Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132342e302f32332d3233203d3e2034383131.roa
File:                     34352e3132342e3132342e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          W/MbPGbFljrYRUW9vNnObLN3mStkeLteFb0IgK8s888=
Subject key identifier:   C8:DF:3E:3E:CE:58:40:A0:06:69:86:32:A3:7A:BF:7A:5C:13:8A:5D
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       29E309AF482A44065D098543A4B13C64D46ED741
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132342e302f32332d3233203d3e2034383131.roa
Signing time:             Sun 23 Aug 2026 15:04:48 +0000
ROA not before:           Sun 23 Aug 2026 14:59:48 +0000
ROA not after:            Sun 22 Aug 2027 15:04:48 +0000
asID:                     4811
IP address blocks:        45.124.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e3:09:af:48:2a:44:06:5d:09:85:43:a4:b1:3c:64:d4:6e:d7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Aug 23 14:59:48 2026 GMT
            Not After : Aug 22 15:04:48 2027 GMT
        Subject: CN=C8DF3E3ECE5840A006698632A37ABF7A5C138A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:46:05:7f:a3:1e:0e:e0:1b:69:5e:85:ec:
                    e9:1d:37:ef:4e:29:d0:39:fa:27:25:66:e0:d7:0a:
                    84:3b:bc:3d:12:1f:b3:cd:45:77:03:01:b2:e0:ca:
                    dd:a7:ca:6d:5e:12:0f:76:12:6e:65:84:b4:2d:29:
                    8e:29:37:64:5d:da:ae:6a:82:2a:e7:9e:95:1e:47:
                    6d:b5:a5:0d:ae:85:19:ae:66:b8:6b:c1:be:28:b1:
                    81:65:f2:56:7c:36:49:c9:54:b1:1e:a9:05:04:4b:
                    41:5b:c6:b0:3f:9f:b8:40:e3:16:71:07:f4:87:13:
                    13:eb:8e:de:db:05:17:69:aa:22:89:4f:54:e1:a7:
                    54:38:37:cf:de:fc:4d:5f:11:ef:c6:45:51:ae:9a:
                    9b:a2:51:38:b9:4b:ee:49:bd:bf:2b:1d:10:19:11:
                    87:b7:41:4b:05:cc:3d:14:7c:bf:54:38:70:c0:ed:
                    86:96:16:10:e4:cb:7f:b5:80:18:de:97:8d:b8:28:
                    e7:09:f4:80:82:cd:07:88:3e:0a:60:46:c2:7b:d0:
                    1a:8f:f7:6e:1d:ca:c8:c2:3a:08:24:d6:2d:15:25:
                    42:02:42:5e:f8:c0:11:63:dd:d1:66:11:f7:8d:c8:
                    9b:f9:6b:72:6f:ad:7f:79:6e:19:25:85:2d:a7:c5:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DF:3E:3E:CE:58:40:A0:06:69:86:32:A3:7A:BF:7A:5C:13:8A:5D
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132342e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:88:35:54:9f:21:91:61:83:a1:fc:ef:1a:a7:ed:50:88:f8:
         87:16:32:93:aa:90:0c:a2:ca:fb:27:c9:12:10:c3:dd:5c:fc:
         d7:cf:75:2f:17:d1:e6:00:9d:93:4e:e2:55:24:61:d9:c9:9b:
         ad:30:a7:6b:f1:48:cd:ce:69:e6:0c:37:7d:3a:ef:1e:82:c0:
         39:17:eb:8c:86:6f:4c:21:3c:a5:d1:6b:45:10:29:cb:83:bb:
         7a:4f:d8:27:a9:35:ba:99:cf:38:ab:bd:7d:7f:a9:eb:cd:4d:
         b4:e2:00:0b:ee:b5:90:bc:8b:53:85:aa:b1:f5:9b:e1:87:e8:
         63:6c:ec:fe:6e:37:74:ff:b3:bf:28:fc:e0:8b:6a:c2:1d:b8:
         a1:76:3f:b3:36:51:80:dc:60:0a:e8:f1:9a:74:59:3c:55:ba:
         34:b7:84:21:f9:ba:cb:df:94:09:1b:4e:4b:b7:2a:b5:8a:b2:
         be:10:41:5b:b8:93:e7:fb:04:85:f2:3e:10:07:87:02:04:99:
         57:51:69:e2:cb:c4:d5:05:14:c5:73:49:ad:a5:b1:6b:fc:dd:
         a6:95:9a:17:13:cb:5f:cc:24:f1:b9:13:29:57:67:cb:2d:d2:
         45:f9:2a:ff:fc:84:ab:46:dd:ae:70:0d:20:98:e6:8c:f4:6d:
         90:d5:34:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:43:22 2026 by rpki-client