Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3235203d3e2034383337.roa
File:                     34352e3235312e31302e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          lxWBXtkoDjIMhkl3+hLEslLPl1BR9O2TaK20k98rp9Q=
Subject key identifier:   6A:03:4D:11:6A:44:59:40:5C:5F:72:94:AF:9E:95:D8:8C:43:9E:DD
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       51049F6994064851E1F19D6C690B93C7CD34A2D7
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 05:51:32 +0000
ROA not before:           Fri 29 May 2026 05:46:32 +0000
ROA not after:            Fri 28 May 2027 05:51:32 +0000
asID:                     4837
IP address blocks:        45.251.10.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:04:9f:69:94:06:48:51:e1:f1:9d:6c:69:0b:93:c7:cd:34:a2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:46:32 2026 GMT
            Not After : May 28 05:51:32 2027 GMT
        Subject: CN=6A034D116A4459405C5F7294AF9E95D88C439EDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:42:cc:5a:94:ed:aa:ef:b3:e7:f7:62:23:
                    30:12:0a:f0:61:da:9b:73:3d:54:a6:3d:8c:22:64:
                    3b:4d:17:34:15:70:d6:da:b6:cc:bc:39:fd:28:79:
                    45:48:04:b8:8b:1a:42:c0:08:45:8e:1d:8f:39:2b:
                    20:11:2b:f5:30:64:4d:b8:f0:ea:a0:bd:ba:03:ac:
                    7c:4b:e3:4b:ef:40:02:6b:e6:a9:46:5d:dc:61:b5:
                    e5:d6:50:d6:7a:37:08:de:9a:5a:db:b8:30:05:8e:
                    8f:f0:84:fb:18:67:f2:46:98:e9:39:76:62:a6:85:
                    dc:cb:00:0a:c3:20:0c:b0:07:6a:33:64:bc:9b:11:
                    fc:4f:b8:a4:51:46:03:8a:de:68:c0:9e:a6:ed:42:
                    39:1b:f8:64:56:55:01:fc:8f:b1:54:e6:0c:34:70:
                    84:7c:63:8a:9f:89:b5:1d:fc:2b:2b:7c:bb:06:34:
                    a2:82:e9:53:ea:ca:22:9e:2e:68:9a:f9:63:c5:8e:
                    5b:b4:ef:31:b0:41:1e:fe:04:39:b8:18:42:8b:e5:
                    53:27:35:2b:8f:92:f5:d1:26:9b:34:10:99:9f:a4:
                    55:4f:e0:d7:9e:e2:f9:c2:9d:88:2b:1d:38:1c:fc:
                    ad:e0:f8:ab:7a:d1:1d:36:4a:8b:14:0c:6f:82:0c:
                    48:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:4D:11:6A:44:59:40:5C:5F:72:94:AF:9E:95:D8:8C:43:9E:DD
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:be:94:a8:41:cb:d4:1f:d4:ba:7e:4e:9d:2f:52:d6:20:88:
         53:c2:30:7b:71:ff:f5:51:f4:8f:ae:51:9b:da:6d:10:3f:81:
         02:40:32:27:5e:27:a4:67:70:5f:e7:7f:31:be:81:b5:2e:de:
         3b:91:b9:ee:32:32:17:b0:22:e9:67:fb:8c:1b:f5:98:db:9d:
         fd:7e:e3:7d:42:06:66:ca:eb:d1:38:ea:15:cb:cb:fa:0d:ae:
         94:0d:7d:9c:a8:a8:2e:f6:b9:ea:6e:11:ac:52:85:63:a8:98:
         58:0b:06:b4:54:fd:27:79:bf:fc:8f:ef:df:33:6c:b5:7a:f2:
         a3:92:e1:aa:fa:f7:97:d6:4d:ce:cc:09:38:f2:43:ed:a8:3e:
         35:7e:bf:93:23:17:fd:9b:a3:fc:20:11:78:72:ef:52:bf:34:
         b7:13:18:81:cf:f7:26:cd:40:f4:25:87:2c:02:78:92:26:6d:
         29:e2:7d:fd:f0:a9:9a:4e:69:3c:da:fc:c3:d9:5d:9b:99:9d:
         72:65:8d:3d:bf:59:63:6c:45:52:59:07:fa:94:59:4d:e5:87:
         20:ec:9e:95:d7:88:93:80:c3:29:5b:8f:58:15:e1:7d:1f:35:
         79:4d:9c:a3:86:69:fc:0a:70:57:72:f7:e4:04:57:5d:88:e4:
         7b:54:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:40 2026 by rpki-client