Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31312e302f32342d3234203d3e203536303430.roa
File:                     34352e3235312e31312e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          m2TZD0OwSBdUwTjtKdcV0J+0TemAOP8LXROahb7pM+g=
Subject key identifier:   EF:C9:99:81:A0:E3:3F:3A:84:A8:79:FA:88:F1:72:22:DC:AC:C6:33
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       0E9EAD8D6FC6FC5B0FF45B77115122282D08BE66
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31312e302f32342d3234203d3e203536303430.roa
Signing time:             Fri 29 May 2026 05:52:31 +0000
ROA not before:           Fri 29 May 2026 05:47:31 +0000
ROA not after:            Fri 28 May 2027 05:52:31 +0000
asID:                     56040
IP address blocks:        45.251.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:9e:ad:8d:6f:c6:fc:5b:0f:f4:5b:77:11:51:22:28:2d:08:be:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:47:31 2026 GMT
            Not After : May 28 05:52:31 2027 GMT
        Subject: CN=EFC99981A0E33F3A84A879FA88F17222DCACC633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:49:ec:fb:7d:55:d5:ac:0f:52:d4:76:c9:
                    84:93:00:85:cd:3c:e4:25:71:68:07:5d:6c:08:a4:
                    d6:d1:07:b9:84:94:14:cb:f3:a6:28:49:80:16:da:
                    9c:4b:cd:55:e3:10:56:d6:9b:d8:0e:b3:f3:4e:2f:
                    8a:39:f3:24:f5:97:c7:39:6e:dc:de:41:ae:6e:e6:
                    c7:e2:69:ff:b9:fd:c4:61:79:c3:a5:7a:0b:25:01:
                    61:2f:6f:48:c0:40:a7:70:0e:a4:a3:dc:3a:a6:80:
                    b8:0d:04:be:4b:6f:1f:77:79:7d:bc:fb:fe:fe:45:
                    29:a7:5a:ed:69:d3:96:83:df:32:bd:e8:a0:8f:48:
                    73:0b:e5:91:c8:5e:94:03:9d:3c:82:14:72:dc:c1:
                    17:9c:02:20:27:8e:d5:ea:8d:95:12:f9:d2:9d:14:
                    f7:b7:43:38:53:71:7e:79:98:4b:71:36:56:cb:4f:
                    cd:6d:db:a7:05:6d:b8:8f:bc:5a:17:c6:32:69:e5:
                    fb:e3:70:cb:d0:fd:f4:fd:a3:90:60:77:d6:4a:67:
                    ba:86:99:1c:04:2d:56:77:87:7d:88:09:f3:f0:67:
                    80:66:c0:49:02:1b:2a:37:75:30:a4:be:bd:af:0c:
                    d0:1a:a2:e8:aa:d0:58:09:c3:49:b5:90:24:93:27:
                    04:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C9:99:81:A0:E3:3F:3A:84:A8:79:FA:88:F1:72:22:DC:AC:C6:33
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31312e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:59:8c:aa:93:bf:11:3a:91:1b:98:bf:95:50:1c:43:72:15:
         b6:1f:31:eb:2d:48:d6:22:a5:e7:c4:ba:dc:41:dd:ca:75:e9:
         c1:bb:3d:ca:f0:04:68:fa:19:1c:68:79:7e:0c:81:93:eb:6d:
         cb:b9:de:c8:8e:42:89:de:a6:41:d7:01:fc:d6:e1:b5:cd:28:
         6a:aa:ce:01:2a:ee:6d:82:0c:bb:9f:2d:ac:c7:de:a2:65:3f:
         99:9d:6d:83:29:b0:9f:d4:e5:cb:07:08:bf:a7:b2:af:4e:7b:
         97:06:b1:bc:62:0c:3d:51:d1:73:7c:d7:ee:2a:e7:76:cf:ab:
         ba:1c:7b:a8:e6:96:38:5d:35:36:3b:2f:76:c1:87:c8:79:19:
         fe:08:71:98:e8:70:03:cc:e0:c9:76:c1:d7:01:bd:6a:aa:27:
         22:aa:94:e4:bc:7f:fa:af:16:ed:f0:67:ea:ce:c8:0f:27:c1:
         22:e0:85:85:42:2b:00:c4:d6:1c:67:31:7a:be:da:cf:e3:51:
         80:bd:81:48:30:21:ce:fc:2c:34:08:bd:ed:41:7f:18:e6:37:
         64:18:19:58:cf:4e:22:ff:84:93:63:cb:ce:c7:75:d4:0c:91:
         70:3a:d2:68:68:0c:bd:ac:f9:46:05:77:6f:64:e0:8f:8b:0a:
         6e:6d:8c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:27 2026 by rpki-client