Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230372e302f32342d3234203d3e2030.roa
File:                     34352e3131332e3230372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          CVagD8Z9yMPAdysjmCoIAoVUBTyn6Sqbck57pfmRU50=
Subject key identifier:   91:B0:64:3E:10:91:5A:DD:77:6D:B8:E1:14:FF:D6:D6:A8:99:4E:86
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       1DDBE91D61A7A39F71DAF82D2B645E24AFAE6FF5
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230372e302f32342d3234203d3e2030.roa
Signing time:             Sat 27 Jun 2026 17:36:13 +0000
ROA not before:           Sat 27 Jun 2026 17:31:13 +0000
ROA not after:            Sat 26 Jun 2027 17:36:13 +0000
asID:                     0
IP address blocks:        45.113.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 00:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:db:e9:1d:61:a7:a3:9f:71:da:f8:2d:2b:64:5e:24:af:ae:6f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: Jun 27 17:31:13 2026 GMT
            Not After : Jun 26 17:36:13 2027 GMT
        Subject: CN=91B0643E10915ADD776DB8E114FFD6D6A8994E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:53:4e:a4:ca:f0:15:c6:30:43:e8:f3:c1:
                    85:29:ae:ae:11:f7:ad:c1:c8:12:03:52:09:8c:a8:
                    ff:a0:76:84:3e:85:a7:3e:42:35:f6:50:00:d9:12:
                    32:38:ca:71:32:7a:64:8f:8b:4b:98:66:4b:8a:7f:
                    de:a0:f8:92:b2:34:1b:4f:55:76:c4:70:22:74:7c:
                    08:a1:cc:33:06:ea:73:94:4e:fe:89:a6:53:04:bf:
                    f8:0e:fe:b4:06:d8:d1:55:4d:35:e8:32:59:fe:37:
                    ba:10:18:49:7b:aa:48:ea:05:d5:d8:7e:58:2d:17:
                    03:44:a3:86:ad:a6:47:00:1e:d1:d7:56:7e:85:ba:
                    d2:82:e5:a5:54:1f:ec:e4:9d:4f:60:ec:39:88:57:
                    d1:22:d2:4a:96:03:63:2a:eb:45:49:f1:9c:7f:61:
                    ee:a9:90:90:bd:8f:2e:1f:89:6f:40:b2:b1:4f:f1:
                    3a:8a:bf:63:59:7f:37:03:86:da:44:2f:0f:41:e8:
                    75:e6:d4:73:4c:8c:86:f2:db:19:1c:e8:b8:52:ed:
                    08:70:9e:50:b6:07:2f:95:ee:ee:1a:77:38:f0:5a:
                    6b:91:e2:fa:49:aa:a3:54:0b:30:db:c3:0f:04:1e:
                    47:94:0e:6f:47:8e:cf:9a:fe:eb:58:80:a7:a3:41:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B0:64:3E:10:91:5A:DD:77:6D:B8:E1:14:FF:D6:D6:A8:99:4E:86
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230372e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:c4:59:aa:96:8c:8f:d7:99:53:34:b0:61:79:a5:4a:e2:e0:
         b1:a0:2d:85:eb:47:e2:5d:c8:a7:f9:42:3b:b4:9f:ab:65:6d:
         3b:7a:98:40:f6:96:3c:3c:c6:bf:3b:c3:47:6b:bc:6d:33:19:
         b3:c9:eb:d2:1f:98:f4:15:0d:3f:bd:b9:42:a1:d2:da:ff:e9:
         4f:fc:84:8c:76:35:c1:ed:c3:f8:03:e3:5d:6f:0d:50:5b:90:
         d7:4e:e7:e6:f7:fe:e9:64:27:61:52:eb:9e:b8:b0:32:24:1a:
         73:d9:86:a7:e2:f1:d6:cf:35:7e:53:82:5d:a0:59:40:3c:b6:
         70:c5:a5:7c:4f:00:44:bc:db:44:f0:7a:8d:8d:43:cd:1b:17:
         ca:5d:c6:7b:74:4d:21:6f:2c:bd:e3:f3:23:42:c0:29:03:60:
         69:77:8a:46:19:d4:a4:db:92:ab:ab:78:26:b4:b2:56:79:93:
         18:bd:6d:2d:9c:5c:c6:50:6a:52:64:b1:e8:37:f4:35:cc:1d:
         53:a6:6f:37:98:f2:73:a0:26:9c:ea:6d:e3:70:4d:d9:8b:a3:
         5f:05:f9:9a:54:11:80:dd:3c:5d:1e:ea:0b:1e:3a:eb:25:b9:
         ac:64:3a:ff:23:cb:d0:b2:f8:62:83:ce:8b:02:20:58:34:1e:
         e3:83:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:25 2026 by rpki-client