Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230362e302f32342d3234203d3e2034383038.roa
File:                     34352e3131332e3230362e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          zcRmo63dclxgiZ3nFyKCKGrLFhXcY5p/S+EzqtAO7J0=
Subject key identifier:   1E:FA:40:44:0D:42:78:99:DD:B2:64:29:82:BB:17:E2:B7:B6:C6:42
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       1754E79F2770E778CB98C5F68C3497DD7603F8EA
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230362e302f32342d3234203d3e2034383038.roa
Signing time:             Sat 30 May 2026 22:12:26 +0000
ROA not before:           Sat 30 May 2026 22:07:26 +0000
ROA not after:            Sat 29 May 2027 22:12:26 +0000
asID:                     4808
IP address blocks:        45.113.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 09:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:54:e7:9f:27:70:e7:78:cb:98:c5:f6:8c:34:97:dd:76:03:f8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: May 30 22:07:26 2026 GMT
            Not After : May 29 22:12:26 2027 GMT
        Subject: CN=1EFA40440D427899DDB2642982BB17E2B7B6C642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:cd:b5:0f:43:ae:ec:84:62:d1:09:09:d4:
                    1a:21:98:44:71:8b:0b:2f:ca:56:06:c2:1e:7f:b5:
                    a4:60:e6:c4:bd:06:84:7a:4d:fe:c1:b5:34:6a:06:
                    ac:21:b9:d7:22:68:f0:e0:a3:67:6b:75:25:10:49:
                    c6:c9:20:aa:4f:9c:40:4e:3e:3c:b7:7c:c6:5e:bf:
                    30:79:e5:d3:a6:1c:f4:f9:e5:9c:be:2b:ab:ac:81:
                    a5:3c:96:58:0a:6d:3a:c7:ed:ac:07:6b:59:8e:94:
                    a1:09:75:76:3d:46:21:bf:63:1d:0f:44:ff:33:28:
                    eb:0d:41:9e:83:74:b1:61:0c:0d:e9:ce:fe:51:72:
                    01:8a:50:a3:5a:d9:5c:83:89:7f:1c:16:c6:cf:ef:
                    c2:3a:99:80:d7:43:ea:7b:df:e4:47:8c:9f:8d:6c:
                    8f:56:f3:c9:d9:4d:9a:a1:e9:47:55:a0:e3:c8:ba:
                    64:8f:c7:e7:3d:14:58:1a:ab:48:4e:ec:4c:5c:45:
                    79:ae:7f:b4:fb:73:a4:79:b6:e6:75:41:5a:50:a1:
                    06:58:87:71:af:87:89:e1:3b:c7:4b:95:c3:c5:29:
                    39:a1:5f:a5:08:10:45:a9:59:fd:8f:2f:e1:80:42:
                    0a:8b:3e:1c:f9:b2:7d:60:08:da:1e:ff:82:1d:7c:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FA:40:44:0D:42:78:99:DD:B2:64:29:82:BB:17:E2:B7:B6:C6:42
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230362e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:86:ca:ee:62:4a:d3:3f:10:83:f1:7a:1b:9f:60:87:67:ef:
         32:c1:a0:fd:85:4b:06:3d:39:6d:ba:10:a5:84:f5:b6:3a:93:
         79:bb:74:3e:53:8e:0f:74:de:79:ca:7e:c2:cd:5a:a0:53:6d:
         a9:9f:16:bd:3d:cf:68:d0:3d:cd:80:b9:1b:37:55:f8:f7:e6:
         ee:68:6b:d8:b5:e7:b6:33:7c:f7:1a:f8:7e:be:4a:51:b5:bd:
         0c:16:52:d1:08:fd:80:9f:f1:77:0b:02:54:fd:03:8e:ce:52:
         4f:9a:b5:5f:d5:3b:7a:d0:ff:d1:62:7a:4e:e4:e8:80:2d:5a:
         1a:f9:f3:fd:3c:4d:8a:57:fa:bd:2e:1a:71:c2:90:35:9e:db:
         d6:4c:66:86:cb:02:7b:15:22:23:3c:3f:e9:bf:95:66:1b:0f:
         cd:b6:bb:21:3f:2f:cd:92:f3:7a:21:38:17:45:a4:a6:c7:a9:
         38:60:4c:8e:cb:6f:2a:bc:fe:73:0f:96:bc:ef:d8:a9:e1:6d:
         6a:11:83:fc:a1:d6:8b:32:cf:7c:90:19:04:2c:f0:73:38:3c:
         74:80:dc:09:5a:d8:18:54:9d:e5:03:b4:dc:a0:b9:51:22:2b:
         5d:88:03:d1:33:39:38:1f:18:b8:b5:4d:dc:c3:d9:c5:cc:15:
         08:b2:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:05 2026 by rpki-client