Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3234203d3e203536303430.roa
File:                     34352e3235312e392e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          7vVBRI/vGFNRmMsPCuoG++okKCNkve1cZEfLd9Ty8b0=
Subject key identifier:   A3:66:0D:F1:D2:A7:94:58:99:51:E9:CC:D9:03:7B:82:1C:67:DF:13
Certificate issuer:       /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial:       12D2FA0CE337E83395684A3A0E511376A27C532E
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3234203d3e203536303430.roa
Signing time:             Fri 29 May 2026 05:50:39 +0000
ROA not before:           Fri 29 May 2026 05:45:39 +0000
ROA not after:            Fri 28 May 2027 05:50:39 +0000
asID:                     56040
IP address blocks:        45.251.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d2:fa:0c:e3:37:e8:33:95:68:4a:3a:0e:51:13:76:a2:7c:53:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
        Validity
            Not Before: May 29 05:45:39 2026 GMT
            Not After : May 28 05:50:39 2027 GMT
        Subject: CN=A3660DF1D2A794589951E9CCD9037B821C67DF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:67:31:c5:2b:85:b1:2d:b9:1a:cc:89:7a:
                    46:54:82:6e:33:89:77:64:7a:07:29:72:4f:71:79:
                    ea:ac:bd:05:3d:1a:03:50:58:1f:c7:f2:71:4c:0b:
                    2a:19:34:4a:4b:16:37:f5:76:34:f9:cb:24:35:c1:
                    30:8f:4d:09:62:64:6a:a4:3c:1f:1e:bc:b7:50:7b:
                    25:d3:01:62:58:ec:05:8f:fe:4e:e0:89:a7:fd:2c:
                    0f:88:7b:11:4d:fa:e0:03:72:5e:44:52:91:6a:e5:
                    f3:c6:a7:79:17:85:9e:7b:ef:b5:3c:1c:35:d6:9d:
                    ad:64:74:42:da:63:b3:05:6d:7f:b2:f2:0c:1b:89:
                    4d:71:a2:52:cb:61:35:5c:0f:51:44:36:57:3e:9a:
                    e7:00:94:7d:a2:3f:24:b2:1f:16:3b:1e:d2:06:f7:
                    f4:29:ed:30:8c:4c:d8:ca:26:a4:b6:06:fd:d0:25:
                    d9:36:28:98:3e:07:56:5c:35:8e:6d:c4:62:ee:a4:
                    fe:3d:47:81:f9:6e:7a:ba:a3:07:f6:45:b7:d4:b0:
                    1e:3d:97:c2:c6:f3:c9:1f:7f:2d:11:60:fa:69:de:
                    78:86:da:43:dd:b7:ff:ff:ec:37:45:da:be:19:32:
                    6c:67:b9:13:a9:b9:d6:81:b0:d5:5e:5e:08:6c:0a:
                    51:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:66:0D:F1:D2:A7:94:58:99:51:E9:CC:D9:03:7B:82:1C:67:DF:13
            X509v3 Authority Key Identifier:
                keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:85:78:98:c1:60:b8:22:c2:4a:a4:d9:14:b2:36:6b:6d:
         a7:bf:ee:e2:77:7c:a4:18:c7:25:6d:69:60:3f:0f:c8:7c:7b:
         1f:2c:f9:3e:62:28:8d:59:ee:81:a2:d9:27:88:0b:62:08:e8:
         87:0e:4f:de:97:ca:fa:01:05:45:dd:84:23:7f:28:15:d3:8d:
         57:df:d3:97:35:cf:15:70:6b:8c:9f:6e:06:88:d6:90:ea:fe:
         cb:33:b4:1b:c6:37:a4:e3:df:b7:e7:e0:72:e7:7e:60:ee:63:
         6d:14:b4:38:e9:82:78:8d:60:8d:e6:32:dc:50:23:b7:dd:de:
         bd:7f:e9:b6:16:a3:59:68:cd:50:29:b8:9a:19:7c:a9:63:fa:
         c3:55:61:e9:0c:44:3e:17:a1:9c:e2:9a:ae:0c:e4:ab:1d:6d:
         b9:17:0f:88:64:3b:f7:5b:a5:6b:e6:9c:b4:0e:77:ce:57:13:
         72:2a:0f:8f:d3:67:09:e3:74:bf:ac:c1:1b:2f:be:26:b7:4a:
         83:c8:7e:0d:44:68:54:bc:bf:52:01:83:40:0a:f0:c5:f2:39:
         5b:28:23:a7:0d:5b:2c:9c:09:33:cf:d9:6a:38:f6:cb:78:6d:
         88:04:1d:45:27:28:44:54:0d:24:09:d8:5e:bb:b7:c8:a2:09:
         96:5a:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:31 2026 by rpki-client