Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e382e302f32342d3235203d3e2034383337.roa
File:                     34352e3235312e382e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier:          MZZ0Ue5OyS7Q6GXptpUf6/tTcIJ6AGZ8QsgKzgtAKa8=
Subject key identifier:   95:2D:9D:66:93:80:94:79:FB:70:19:B5:02:F8:97:F8:77:4D:2C:A2
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       79BE7E9AB14DBAE2E4A31532761C0B2CA8F7B7FE
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e382e302f32342d3235203d3e2034383337.roa
Signing time:             Fri 29 May 2026 05:49:39 +0000
ROA not before:           Fri 29 May 2026 05:44:39 +0000
ROA not after:            Fri 28 May 2027 05:49:39 +0000
asID:                     4837
IP address blocks:        45.251.8.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:be:7e:9a:b1:4d:ba:e2:e4:a3:15:32:76:1c:0b:2c:a8:f7:b7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:44:39 2026 GMT
            Not After : May 28 05:49:39 2027 GMT
        Subject: CN=952D9D6693809479FB7019B502F897F8774D2CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:9a:ee:16:4c:d7:dd:7e:9b:f6:d1:c3:91:
                    25:a1:d4:bd:5d:c8:1a:8d:2a:82:46:98:e7:75:13:
                    63:f8:55:88:47:de:98:b7:78:a5:01:8e:dd:1f:b9:
                    3c:bc:f7:f3:37:17:92:2c:5d:3b:05:9b:53:39:45:
                    62:f2:e3:17:b7:00:f7:de:b9:7e:37:24:c3:73:3e:
                    a4:58:f0:bb:e0:2a:86:3d:1c:f6:58:22:df:58:bc:
                    86:f1:4a:5c:fa:6a:6a:c2:2a:6d:b8:4d:9d:60:99:
                    56:e8:f2:df:52:a1:a5:c5:6b:00:b2:0f:22:cd:da:
                    94:c9:25:9f:e5:d8:67:ab:30:b7:e9:24:a8:6d:c5:
                    8c:73:ee:c4:ab:58:90:ec:12:5e:53:fa:94:ab:4f:
                    e6:b2:48:75:c1:2e:90:00:3d:52:23:b6:70:22:19:
                    5b:25:29:a5:59:65:b5:93:1e:8e:38:58:92:f1:9d:
                    4b:66:c0:11:60:94:e8:a7:62:de:7a:42:2f:07:cb:
                    ae:76:bd:03:a6:41:8b:0f:53:31:7c:67:c6:af:a6:
                    9a:fd:7a:67:bd:64:1d:2a:90:64:46:fe:48:93:d7:
                    87:e7:a9:4c:d6:f0:c6:12:c3:b3:05:a0:fe:a0:6e:
                    76:bd:7a:f6:5c:c5:36:a5:33:85:5d:c2:4c:b4:a0:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2D:9D:66:93:80:94:79:FB:70:19:B5:02:F8:97:F8:77:4D:2C:A2
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e382e302f32342d3235203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:e0:18:3c:cb:fb:f0:52:27:48:b1:8a:4c:8c:a4:71:89:ec:
         d7:91:a3:72:03:8e:84:e1:e0:1b:41:15:11:95:8e:20:10:fc:
         0b:e3:b0:a3:c5:8e:a9:6c:2c:4c:67:9d:23:1c:b2:11:6e:a2:
         5a:b2:aa:e7:39:5e:e6:ba:cf:60:df:62:a1:6c:a6:b2:8e:8c:
         b4:74:90:51:3a:78:03:36:e1:6d:3c:70:ee:54:b4:cc:2b:84:
         6c:8e:1d:c1:1e:a3:b1:d5:9d:90:dc:d6:f0:e6:23:6e:50:d9:
         11:95:0c:34:37:2f:e8:d1:d4:1a:51:a3:04:98:c9:af:2c:7f:
         f3:f1:85:23:a8:30:d0:81:f7:6d:0e:58:98:4e:e8:b5:4c:1b:
         bb:e6:e7:08:51:e3:3a:2e:c5:37:24:70:71:e0:25:35:70:cf:
         56:bd:e4:6d:68:7f:f0:96:54:3e:1b:69:20:d6:7b:6c:75:75:
         ae:2b:77:19:15:1f:79:ed:91:7f:b4:df:e6:ef:3f:83:c0:8a:
         2f:2d:8e:6f:54:fa:c4:55:69:9d:f8:54:c8:4b:ad:90:d1:98:
         89:3e:c2:d0:4e:3f:8e:19:3a:86:2a:35:fd:5b:1b:a8:bb:d6:
         d4:a3:f1:51:fe:1c:19:0a:c8:49:06:09:ad:25:de:08:36:7e:
         ec:89:f2:16
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUeb5+mrFNuuLkoxUydhwLLKj3t/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC
MzE4QUJGOTAeFw0yNjA1MjkwNTQ0MzlaFw0yNzA1MjgwNTQ5MzlaMDMxMTAvBgNV
BAMTKDk1MkQ5RDY2OTM4MDk0NzlGQjcwMTlCNTAyRjg5N0Y4Nzc0RDJDQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRe5ruFkzX3X6b9tHDkSWh1L1d
yBqNKoJGmOd1E2P4VYhH3pi3eKUBjt0fuTy89/M3F5IsXTsFm1M5RWLy4xe3APfe
uX43JMNzPqRY8LvgKoY9HPZYIt9YvIbxSlz6amrCKm24TZ1gmVbo8t9SoaXFawCy
DyLN2pTJJZ/l2GerMLfpJKhtxYxz7sSrWJDsEl5T+pSrT+aySHXBLpAAPVIjtnAi
GVslKaVZZbWTHo44WJLxnUtmwBFglOinYt56Qi8Hy652vQOmQYsPUzF8Z8avppr9
eme9ZB0qkGRG/kiT14fnqUzW8MYSw7MFoP6gbna9evZcxTalM4Vdwky0oL5lAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUlS2dZpOAlHn7cBm1AviX+HdNLKIwHwYDVR0j
BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0
NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTc0MjUyMTk0MTAzMjk3LzAvMzQzNTJlMzIzNTMx
MmUzODJlMzAyZjMyMzQyZDMyMzUyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LfsIMA0GCSqGSIb3DQEBCwUAA4IBAQCV4Bg8y/vwUidIsYpMjKRxiezXkaNyA46E
4eAbQRURlY4gEPwL47CjxY6pbCxMZ50jHLIRbqJasqrnOV7mus9g32KhbKayjoy0
dJBROngDNuFtPHDuVLTMK4Rsjh3BHqOx1Z2Q3Nbw5iNuUNkRlQw0Ny/o0dQaUaME
mMmvLH/z8YUjqDDQgfdtDliYTui1TBu75ucIUeM6LsU3JHBx4CU1cM9WveRtaH/w
llQ+G2kg1ntsdXWuK3cZFR957ZF/tN/m7z+DwIovLY5vVPrEVWmd+FTIS62Q0ZiJ
PsLQTj+OGTqGKjX9Wxuou9bUo/FR/hwZCshJBgmtJd4INn7sifIW
-----END CERTIFICATE-----
Generated at Fri May 29 23:50:52 2026 by rpki-client