Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3234203d3e203536303430.roa
File:                     34352e3235312e31302e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          dEWkLtMMH2qD6XB42Ckm0p1n+UWQDeIS+yciQ4uFhGY=
Subject key identifier:   0E:60:F0:64:D1:22:80:72:98:45:5F:6A:BF:20:5D:40:FE:BF:70:00
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       0CD2E251D8BCACA0AB91B6A7D2875158922C1E61
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3234203d3e203536303430.roa
Signing time:             Fri 29 May 2026 05:51:33 +0000
ROA not before:           Fri 29 May 2026 05:46:33 +0000
ROA not after:            Fri 28 May 2027 05:51:33 +0000
asID:                     56040
IP address blocks:        45.251.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d2:e2:51:d8:bc:ac:a0:ab:91:b6:a7:d2:87:51:58:92:2c:1e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:46:33 2026 GMT
            Not After : May 28 05:51:33 2027 GMT
        Subject: CN=0E60F064D122807298455F6ABF205D40FEBF7000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:9b:41:93:b0:a5:90:51:74:78:e3:83:13:
                    cb:de:c0:74:fc:e1:f5:b3:47:e3:07:fe:1a:67:51:
                    6c:83:20:88:52:be:ba:87:53:aa:5d:c7:64:fe:9f:
                    7c:04:81:c8:5d:19:af:5a:3c:30:02:59:74:4d:68:
                    d0:0f:c7:26:ba:57:d7:71:be:fd:2e:18:8d:88:36:
                    0a:0a:7c:8c:bd:08:6d:59:60:9a:a1:d0:cf:13:7f:
                    fb:cb:22:95:c2:eb:b7:ae:c3:14:3f:1a:4b:8f:f3:
                    11:f8:2f:fd:fa:6f:8e:d1:00:1a:80:43:cc:79:ad:
                    3d:fe:3e:ae:28:1f:36:9c:7b:f4:45:9d:87:33:78:
                    d2:54:30:a9:6e:4b:ed:4e:e6:1f:f4:4a:da:49:fc:
                    b5:90:f5:bf:22:e1:c6:eb:52:d8:96:ce:e7:3e:b3:
                    8b:db:5c:11:4f:c4:cb:a0:b3:60:de:56:ed:db:bf:
                    79:da:17:61:fe:58:11:31:55:5f:1f:48:a4:fc:a6:
                    3f:ec:97:dc:3d:48:11:a1:8f:b0:b0:e6:cc:aa:2f:
                    52:09:1e:1a:13:4e:60:90:e4:bc:02:27:50:cc:82:
                    73:3f:81:a0:95:0e:cc:8c:fc:e0:aa:57:bd:44:22:
                    5c:2b:b2:77:4b:a3:9d:f3:3b:d3:03:8f:18:a8:0f:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:60:F0:64:D1:22:80:72:98:45:5F:6A:BF:20:5D:40:FE:BF:70:00
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:03:75:cc:9d:4f:ae:00:f5:b1:5a:5d:cb:c7:32:b3:5d:c2:
         72:5f:65:2e:e6:4b:82:cb:f9:86:63:d9:c7:b4:42:7e:02:c6:
         cf:27:5f:62:ca:a6:43:62:36:15:2c:d7:05:fe:e4:e0:bb:c8:
         09:72:33:9f:d7:2b:0a:cc:8f:aa:67:f5:80:33:17:e9:c7:ae:
         3a:0b:9a:6d:ce:45:c5:6d:b4:6d:54:64:3f:4d:5e:fd:ca:da:
         45:b2:af:2d:b3:da:fb:85:9d:a7:3c:54:eb:16:ef:81:2b:d7:
         04:19:0f:51:7c:1b:35:14:96:ef:4f:50:94:b8:6e:7c:50:8a:
         96:b6:9b:8f:78:ed:04:86:ff:c6:8d:d6:9a:e0:84:4a:cb:fc:
         27:26:65:24:dd:d7:6b:4f:33:0c:2d:9c:ac:d9:1e:dd:29:cf:
         d4:5a:4d:73:29:64:32:18:52:ab:90:0a:ff:1a:60:95:7a:a3:
         38:b9:40:95:a6:3b:dc:91:ab:bf:59:13:cd:17:52:3a:6f:60:
         c4:dc:16:2a:9f:be:da:73:08:4e:f2:09:f6:0a:a3:91:43:3a:
         91:5e:80:45:05:a9:52:51:42:3a:7e:18:b0:91:46:b9:de:9e:
         f4:0e:65:61:60:ec:0c:38:e6:0e:e3:9f:99:54:15:ca:32:3d:
         ac:5c:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:23 2026 by rpki-client