Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230342e302f32342d3234203d3e2030.roa
File:                     34352e3131332e3230342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          azwF4QxJ4o7RUv11JVeJn4yL6J0MCJE7wPtk5VKUtmc=
Subject key identifier:   38:5A:77:95:C1:02:D4:C7:EF:27:42:68:17:03:D8:1A:7B:9B:B6:FA
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       6DC6754DBF411FBCA5FF48EE6C5192CE42D570EF
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230342e302f32342d3234203d3e2030.roa
Signing time:             Sat 27 Jun 2026 17:35:11 +0000
ROA not before:           Sat 27 Jun 2026 17:30:11 +0000
ROA not after:            Sat 26 Jun 2027 17:35:11 +0000
asID:                     0
IP address blocks:        45.113.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 00:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c6:75:4d:bf:41:1f:bc:a5:ff:48:ee:6c:51:92:ce:42:d5:70:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: Jun 27 17:30:11 2026 GMT
            Not After : Jun 26 17:35:11 2027 GMT
        Subject: CN=385A7795C102D4C7EF2742681703D81A7B9BB6FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:69:44:ec:f9:93:26:ad:0b:56:ae:6a:bd:71:
                    6c:ec:70:1e:49:a7:72:12:18:e6:82:ef:43:fb:3b:
                    a5:c9:e7:9f:86:c5:39:60:b1:59:b7:93:d0:cc:24:
                    f6:92:c5:66:9d:d9:a0:88:7d:1f:1c:31:82:2f:ff:
                    21:4d:dc:97:c9:5a:da:27:7b:91:ed:76:d7:2f:46:
                    ae:0e:48:54:98:9b:b3:b8:08:0d:97:6f:bf:78:7c:
                    cb:b4:ee:74:4a:8a:e7:8c:59:1f:83:57:7a:08:4b:
                    27:6a:32:cf:76:a4:c6:54:57:01:a7:ee:95:11:0c:
                    42:b4:41:f8:f3:c4:f4:a7:44:52:0d:6b:e5:6e:a1:
                    8a:14:06:b3:93:4c:10:df:94:81:2c:c7:a7:6d:71:
                    bc:dc:f2:45:78:6a:df:50:cf:93:8f:de:3e:47:17:
                    18:56:28:5d:94:85:c0:a3:7c:25:94:11:55:42:5a:
                    09:32:f3:f4:67:bd:3e:21:6d:ff:af:11:8b:cb:3f:
                    38:94:3d:9a:8f:e6:4c:41:9d:b4:4c:1d:eb:16:3e:
                    ab:5e:ce:13:c6:1f:8a:91:41:f7:6a:76:c0:d6:ea:
                    77:cb:81:80:70:21:44:72:ba:9f:9b:e0:9a:62:51:
                    42:4a:02:4b:cc:ba:45:f5:98:5b:43:6d:92:da:e5:
                    00:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5A:77:95:C1:02:D4:C7:EF:27:42:68:17:03:D8:1A:7B:9B:B6:FA
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:f3:fb:91:24:58:d7:a8:cc:3a:d8:d1:c7:9f:c8:40:9a:
         49:0d:b5:92:29:20:18:7f:fb:28:ba:eb:04:98:16:01:4e:45:
         95:d9:23:83:a6:a3:b9:77:5e:3a:53:3c:94:99:f0:6b:ba:bd:
         26:7c:8c:ec:ac:23:25:34:d8:9a:fb:18:56:9a:36:e1:76:49:
         6b:8b:76:bd:97:36:69:7a:31:38:d5:6a:aa:dd:13:81:07:db:
         cf:7f:e5:d9:72:aa:4a:4f:d2:75:5f:57:04:c7:c8:1e:93:ef:
         b7:6e:4e:25:11:fb:54:c3:00:77:e9:c5:10:8b:59:ab:ad:de:
         d2:65:5e:f9:88:46:fb:ce:fc:9d:b9:d7:2e:7b:2d:42:60:06:
         c5:58:da:48:0d:9f:7d:90:4f:a1:84:65:98:da:93:a4:60:6b:
         65:9b:9f:40:20:09:80:69:be:de:4e:d5:44:0d:c8:34:81:d1:
         45:b8:ea:83:46:f3:d2:a7:28:a9:2a:b4:f9:fb:a5:9d:d3:2e:
         93:5a:8e:a5:80:8e:9b:b1:a1:f4:6b:da:ce:4a:6b:08:16:ef:
         4e:22:cc:65:99:73:2f:fc:16:70:19:54:a7:6d:d0:64:e6:42:
         73:65:67:6f:a3:aa:a4:71:99:a4:cf:29:ed:e6:33:e3:51:47:
         3e:d9:5c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:24 2026 by rpki-client