Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230352e302f32342d3234203d3e2030.roa
File:                     34352e3131332e3230352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          BD64OSACeGxAeO4KURjOtf7p0Hi9TEXugn1QNLI3BW0=
Subject key identifier:   BB:81:0F:21:E7:99:51:DB:C3:B3:48:C0:22:E7:81:36:C5:A8:EE:07
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       404AAFDE768EC12F3DE052DC5A7CF9BF40713AAF
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230352e302f32342d3234203d3e2030.roa
Signing time:             Sat 27 Jun 2026 17:35:39 +0000
ROA not before:           Sat 27 Jun 2026 17:30:39 +0000
ROA not after:            Sat 26 Jun 2027 17:35:39 +0000
asID:                     0
IP address blocks:        45.113.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 00:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4a:af:de:76:8e:c1:2f:3d:e0:52:dc:5a:7c:f9:bf:40:71:3a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: Jun 27 17:30:39 2026 GMT
            Not After : Jun 26 17:35:39 2027 GMT
        Subject: CN=BB810F21E79951DBC3B348C022E78136C5A8EE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:81:8f:69:e6:19:43:cc:28:4a:54:e4:03:46:
                    7c:05:1a:2b:50:f9:89:bb:70:71:80:a5:17:91:1c:
                    15:97:c8:32:14:27:24:45:11:d9:a5:e8:0e:a4:8f:
                    8e:09:a8:c5:c2:e3:5d:11:9c:2d:11:c8:5f:09:1a:
                    6b:96:58:5a:4c:c1:c0:13:49:2e:de:28:49:76:d0:
                    78:a6:07:54:5e:a1:02:a3:8d:ad:88:06:be:d7:78:
                    23:b6:56:bf:26:17:36:0f:ec:c0:8c:4a:9d:27:01:
                    5a:39:ce:c2:2e:40:f9:37:e2:49:59:b0:04:cd:7b:
                    33:e6:cd:03:31:c4:d7:08:69:fe:2a:d6:3e:85:67:
                    b0:81:18:f7:0b:8e:9b:fa:18:e1:8c:a0:d0:90:1a:
                    f7:0f:8b:d9:05:33:7e:97:61:97:63:60:48:a1:9e:
                    65:bc:28:e6:40:ec:78:b0:6f:ca:61:68:ea:c5:70:
                    2e:5a:e6:19:0d:d0:70:0d:9d:3a:5c:1b:65:a5:ea:
                    09:bb:5f:cb:63:da:89:0f:c9:7b:c1:9e:cc:20:76:
                    7c:90:57:5f:1a:f5:8e:64:5c:b5:bf:3d:6b:66:17:
                    ba:6e:8a:e0:3a:82:f9:45:a9:c3:d6:ef:e1:bd:02:
                    15:e5:44:f5:ce:09:d3:4b:55:a6:81:ba:79:5a:3f:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:81:0F:21:E7:99:51:DB:C3:B3:48:C0:22:E7:81:36:C5:A8:EE:07
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230352e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:da:bb:21:7b:8b:67:41:da:4f:03:35:bc:d7:75:86:26:6c:
         41:9e:6b:83:ba:8a:5b:24:19:27:72:45:10:b2:d9:95:16:95:
         37:66:d2:13:02:5c:62:ce:25:3f:00:5d:1c:4c:f9:3f:ce:16:
         b6:67:0e:72:a1:a5:15:76:40:16:45:03:0d:ad:48:58:af:31:
         a1:29:21:d8:8f:20:d2:2f:73:7c:4e:53:0c:07:d4:a9:35:a3:
         f6:7e:d5:0a:a3:69:53:e5:d5:b0:32:e9:a5:bb:cb:14:93:ba:
         b3:89:40:45:40:79:73:f3:86:fd:40:06:c3:9d:0b:26:18:69:
         7f:c8:ab:be:10:ac:49:06:9d:2a:e9:e0:34:28:b5:05:a3:40:
         5f:eb:34:97:5e:46:09:9d:17:38:d9:e7:37:0f:35:b0:e0:ca:
         76:03:c9:9e:78:a0:d7:76:11:85:c1:5f:f0:2a:3b:90:cf:54:
         99:94:6b:01:c1:af:aa:05:59:c7:44:b2:cc:d3:9f:d9:f2:e7:
         ec:23:1a:11:ca:9e:5b:ea:ce:7f:fe:15:35:44:8e:94:fa:53:
         db:1c:15:05:53:dd:0a:f8:ee:61:cd:48:e1:ad:dd:ef:15:b6:
         91:7b:00:5f:9f:72:db:42:bd:0c:a9:39:0e:cc:66:46:1c:9f:
         95:91:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:24 2026 by rpki-client