Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3234203d3e20313333373735.roa
File:                     34352e3235312e392e302f32342d3234203d3e20313333373735.roa (raw, json)
Hash identifier:          yq54Cw3riv9tvqEBVOv0QILSMi4f/f+kGYlq9RvHI+g=
Subject key identifier:   84:4B:78:36:B7:B9:24:16:0E:AA:7B:55:A1:D9:4B:5F:9E:B5:AB:0E
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       024608005B2913057375D1552B796A1866A337D1
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3234203d3e20313333373735.roa
Signing time:             Fri 29 May 2026 05:50:40 +0000
ROA not before:           Fri 29 May 2026 05:45:40 +0000
ROA not after:            Fri 28 May 2027 05:50:40 +0000
asID:                     133775
IP address blocks:        45.251.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:46:08:00:5b:29:13:05:73:75:d1:55:2b:79:6a:18:66:a3:37:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:45:40 2026 GMT
            Not After : May 28 05:50:40 2027 GMT
        Subject: CN=844B7836B7B924160EAA7B55A1D94B5F9EB5AB0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:b2:29:50:20:b9:95:3f:a8:1b:b4:1f:b0:
                    31:2f:25:f0:58:8d:4c:c6:9a:dc:b4:03:7b:aa:ac:
                    ad:d3:29:7c:d9:75:d5:53:24:06:e8:9e:02:61:61:
                    94:3a:47:7d:78:5a:e1:46:da:81:c0:d2:49:30:38:
                    14:1c:5a:48:bc:f4:59:fd:17:7b:19:30:91:f1:e5:
                    b0:74:76:e8:0b:c7:03:06:50:7b:4e:4d:d3:a3:14:
                    3b:0d:4a:cd:76:ef:69:d4:b7:f8:51:c9:cc:2a:c9:
                    e2:bd:a7:be:b0:24:ff:eb:0b:80:fb:60:ae:da:4d:
                    6e:17:99:c3:8a:77:6d:db:ae:12:f2:ab:2e:29:a5:
                    7a:47:9c:29:ca:d5:f1:f8:8c:84:a6:4b:24:76:5d:
                    0f:06:89:d8:97:c1:ee:d5:6f:70:44:87:58:b6:51:
                    45:62:69:3e:78:d4:ae:32:13:ee:40:ba:a3:df:65:
                    1f:09:71:37:62:af:0d:f7:04:93:fc:0c:92:fb:9c:
                    60:43:9c:36:35:fe:41:37:0f:c4:e9:60:16:a3:43:
                    cb:b6:dd:e9:09:ab:4b:fa:d8:04:21:e5:2b:8d:1d:
                    40:65:95:0e:2b:15:91:63:08:bc:37:06:5a:da:a2:
                    e0:7b:4c:45:91:fd:86:42:ed:3c:9c:a2:59:85:27:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4B:78:36:B7:B9:24:16:0E:AA:7B:55:A1:D9:4B:5F:9E:B5:AB:0E
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3234203d3e20313333373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:1f:1a:6d:19:c8:d6:50:73:0c:6b:41:b4:96:75:8d:d8:0e:
         6d:c4:79:3c:e2:35:28:6f:2e:4a:47:aa:67:eb:cf:3c:96:4e:
         cb:83:48:11:da:20:ab:76:97:1d:94:26:2f:9c:18:da:20:d8:
         a6:0d:82:fa:29:f8:bb:e2:0a:dc:3e:59:31:fa:ce:be:2a:7e:
         68:fc:25:a7:d8:e1:bf:a9:cb:78:dd:e7:7f:eb:83:97:b1:16:
         fe:87:83:9c:4d:15:d3:73:68:54:e2:06:ff:85:1d:9a:45:b0:
         30:38:b1:e5:f7:29:f3:42:7a:a0:e9:49:60:e3:89:b3:fb:49:
         d4:9e:ae:88:84:fb:81:24:e1:ec:4e:52:7b:c7:d4:6d:a6:74:
         75:8c:f5:51:a4:91:f9:07:72:10:70:e8:4a:1e:5b:8b:e4:3b:
         d8:52:4e:c4:23:2c:e2:63:47:21:de:1c:c1:49:3e:60:e0:25:
         d6:61:1a:85:0e:ac:c4:81:b6:09:91:f2:6d:8a:56:96:15:90:
         6b:f3:3b:c8:06:80:a6:8c:0f:e4:fd:0e:f9:ee:82:e6:00:71:
         08:b8:42:f4:47:f7:1f:b2:9f:e7:24:be:fd:17:af:df:a2:6e:
         0a:fc:61:96:9f:5f:a1:9a:93:a4:23:6e:e1:53:61:89:cf:53:
         91:f6:e6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:12 2026 by rpki-client