Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132362e302f32332d3233203d3e2034383131.roa
File:                     34352e3132342e3132362e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          H0W0ZzMY9r/4L4IYlDPBE2irQJ2OcuMVgZQOZnH89qs=
Subject key identifier:   D4:8D:84:3D:96:55:46:B3:AF:C1:67:64:3E:AD:E2:D5:17:F0:B7:05
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       3586C86F00B8B50C99D68AECD5FDF5345663C206
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132362e302f32332d3233203d3e2034383131.roa
Signing time:             Sun 23 Aug 2026 15:04:48 +0000
ROA not before:           Sun 23 Aug 2026 14:59:48 +0000
ROA not after:            Sun 22 Aug 2027 15:04:48 +0000
asID:                     4811
IP address blocks:        45.124.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:86:c8:6f:00:b8:b5:0c:99:d6:8a:ec:d5:fd:f5:34:56:63:c2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Aug 23 14:59:48 2026 GMT
            Not After : Aug 22 15:04:48 2027 GMT
        Subject: CN=D48D843D965546B3AFC167643EADE2D517F0B705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:4d:ee:77:c7:e6:cd:e0:40:c2:56:0a:d9:
                    da:fe:a7:83:c5:b0:9b:90:dd:d6:a5:90:bd:9c:a1:
                    b7:14:7c:72:cd:ea:3d:77:84:b3:d2:6f:b2:19:ae:
                    6b:ae:e1:3e:54:95:3b:8a:43:8b:2f:31:fc:88:bf:
                    03:f2:9b:02:dc:f3:b3:38:d0:6a:2b:2d:11:7a:69:
                    97:31:10:90:b2:ac:38:24:1d:59:b2:10:cf:84:dd:
                    75:0d:51:ad:ce:cb:48:b0:db:f7:5e:b0:f1:4f:47:
                    9c:c3:bf:f0:b8:6e:d9:c3:7f:2b:ae:9b:a9:97:29:
                    8f:05:40:ed:f1:be:f1:3b:bb:43:ad:67:5c:f9:88:
                    91:5a:f0:ec:e9:40:45:54:e9:f9:b6:b0:5f:23:aa:
                    2a:7e:a9:dd:35:16:ec:49:d6:4e:da:02:29:04:f2:
                    78:8c:6d:97:90:16:e3:5b:3b:f9:15:5b:c7:bc:cf:
                    16:f9:bd:38:7d:36:35:5e:1b:ef:ef:be:a1:68:34:
                    53:9b:e3:96:60:ba:ca:66:06:b1:69:02:fd:d0:a0:
                    5f:bc:06:f6:66:36:72:95:37:fd:bc:15:bc:8d:c3:
                    a0:fd:87:e7:08:0d:67:b1:94:c3:66:c2:a6:47:a0:
                    8a:2a:81:96:db:9c:b2:e5:b8:d7:52:cd:03:12:de:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8D:84:3D:96:55:46:B3:AF:C1:67:64:3E:AD:E2:D5:17:F0:B7:05
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132362e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:1a:e7:ff:16:1f:44:bc:4c:43:e1:9f:2c:22:45:2e:b7:38:
         3e:de:17:e8:0e:e1:1b:6a:95:33:f2:9f:8f:2f:59:2b:4c:c1:
         ad:a7:34:46:2e:15:1e:4e:51:b4:9c:70:b4:57:6f:3e:a6:4f:
         bc:71:5e:b9:14:39:02:27:2e:34:2b:1b:f0:b3:a6:b1:37:a5:
         8e:9f:19:2d:91:e0:80:e4:65:4e:b5:09:6c:09:09:05:42:1f:
         e8:9d:07:f8:60:d3:06:0b:28:16:0e:5a:28:ca:f9:b0:45:3f:
         12:32:00:3f:1a:2b:66:45:7b:e1:74:a0:63:75:2b:ae:48:20:
         a0:aa:2c:94:f6:ff:0e:fe:8f:8c:35:99:30:a8:f5:2e:26:30:
         85:06:e4:a3:39:78:dc:85:e0:d5:73:0d:d2:ec:33:31:b0:77:
         43:d4:72:0b:80:2d:1c:79:09:15:1f:d4:45:c5:93:a9:e4:ab:
         e3:bb:5b:6c:d5:2e:6d:a7:6a:8f:b6:06:2d:26:3b:85:d6:45:
         0c:e5:25:eb:d6:2a:1f:19:62:54:e0:e8:9a:ba:3e:48:ad:dd:
         1a:c6:9b:6a:44:4a:53:57:7f:88:46:b1:b5:e0:d3:ee:2a:b1:
         d9:02:5a:c9:55:11:13:f3:7e:5e:02:ac:e9:7d:e3:1a:71:1f:
         d0:d1:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:43:22 2026 by rpki-client