Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e382e302f32342d3234203d3e203536303430.roa
File:                     34352e3235312e382e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          NgyJNGN7BwrlXA2WZxYsdOeeeuVjmWMWZs2AeagF/k8=
Subject key identifier:   C8:89:23:69:3B:3D:DA:D1:5C:00:DF:68:EF:CF:C5:8C:41:57:8D:6B
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       482C56A789AD49FC48EC8EA0F2D657CDB6F6E2FA
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e382e302f32342d3234203d3e203536303430.roa
Signing time:             Fri 29 May 2026 05:49:39 +0000
ROA not before:           Fri 29 May 2026 05:44:39 +0000
ROA not after:            Fri 28 May 2027 05:49:39 +0000
asID:                     56040
IP address blocks:        45.251.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2c:56:a7:89:ad:49:fc:48:ec:8e:a0:f2:d6:57:cd:b6:f6:e2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:44:39 2026 GMT
            Not After : May 28 05:49:39 2027 GMT
        Subject: CN=C88923693B3DDAD15C00DF68EFCFC58C41578D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:c6:c6:74:49:c2:86:9b:4f:24:7d:78:62:
                    a0:c8:ff:57:37:4b:c0:27:60:ed:e6:11:f3:7a:bc:
                    a7:64:fe:fe:61:82:89:d1:27:80:f3:85:56:51:49:
                    5d:86:81:19:40:89:bf:44:c2:e4:6f:2d:7b:b9:3e:
                    17:9d:5d:9f:4c:93:28:84:10:b7:2b:20:c1:1a:6f:
                    43:c3:ab:37:ea:8a:9e:9d:b5:d2:d6:a6:de:24:ee:
                    25:ce:23:5f:21:7d:b9:f8:53:ae:15:03:28:d1:ef:
                    90:f7:86:c5:2d:21:67:b6:c9:9f:66:55:2b:c2:16:
                    de:7e:65:a2:be:b1:5a:db:bf:18:2d:2a:43:02:ad:
                    82:24:50:58:13:13:55:40:32:28:ee:bd:aa:87:96:
                    06:2c:28:51:70:b3:30:11:b7:d7:8a:c1:c0:c5:78:
                    5d:3f:3e:41:cd:8e:83:2a:bd:60:8f:40:84:5d:66:
                    a8:1e:dd:7b:d5:1e:3b:72:ad:a5:ab:bf:13:21:3e:
                    e1:b8:7f:69:b9:a0:a6:b8:4a:67:d2:94:c9:13:48:
                    11:54:96:29:f0:9b:b9:3a:60:e1:05:12:37:53:95:
                    ce:95:34:5e:e1:43:94:81:e8:94:d4:d7:85:32:ef:
                    14:22:e4:71:43:e8:1d:7e:dd:1f:5e:46:3d:88:3d:
                    78:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:89:23:69:3B:3D:DA:D1:5C:00:DF:68:EF:CF:C5:8C:41:57:8D:6B
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e382e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:05:be:f3:06:c4:f9:7e:d9:cc:f3:c2:c5:98:24:67:9a:84:
         95:97:9b:42:f5:21:8b:1e:91:6d:b4:c0:9b:f8:c8:40:a1:03:
         19:83:0b:5b:45:e6:a4:3a:e1:92:ad:93:d3:9d:a2:e1:41:77:
         97:bc:ff:93:2c:85:ce:a3:a3:7a:34:fd:d4:fa:f7:d6:73:95:
         b7:b2:1d:16:fc:15:6a:8d:10:fa:93:05:3b:66:09:1c:90:51:
         79:a4:b2:61:00:90:64:20:f3:db:6e:12:db:90:db:52:d1:cf:
         df:cf:71:ea:07:09:fa:2c:ea:5c:ad:82:80:84:84:9a:95:a8:
         fc:91:c7:99:4b:33:14:17:52:dc:02:ff:1f:f4:00:24:6f:ca:
         9f:6b:44:02:9d:72:b3:ae:92:a7:2d:aa:e7:a5:8f:05:de:4b:
         12:5a:e5:62:12:f1:72:3d:0b:da:bf:6b:e5:f3:56:4b:7c:c5:
         c8:de:9d:dc:9a:57:ec:4a:ac:4c:f2:f2:05:56:f6:4d:25:c8:
         df:98:5b:71:f9:98:7f:50:85:95:9b:42:e9:e4:62:47:25:21:
         67:a4:89:b2:22:ee:52:79:9e:4c:70:fa:7a:a9:f1:33:69:49:
         3f:3a:2d:6e:9d:2f:8d:10:88:fc:f7:9a:83:b5:77:0a:33:9d:
         56:05:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:29 2026 by rpki-client