Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e3130302e302f32322d3232203d3e203538353139.roa
File:                     34352e3235312e3130302e302f32322d3232203d3e203538353139.roa (raw, json)
Hash identifier:          +1W1XexONgisqiQl8crOWAFeeckAYAY5KgqkjbIJosk=
Subject key identifier:   1C:4E:BE:71:CD:D8:6C:DF:05:C6:0C:E4:DC:BA:B4:2C:B2:79:31:95
Certificate issuer:       /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial:       0C4ADDBCD08DFCED6063FF35B515FD7AFABAAD87
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e3130302e302f32322d3232203d3e203538353139.roa
Signing time:             Thu 02 Jul 2026 03:38:03 +0000
ROA not before:           Thu 02 Jul 2026 03:33:03 +0000
ROA not after:            Thu 01 Jul 2027 03:38:03 +0000
asID:                     58519
IP address blocks:        45.251.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4a:dd:bc:d0:8d:fc:ed:60:63:ff:35:b5:15:fd:7a:fa:ba:ad:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
        Validity
            Not Before: Jul  2 03:33:03 2026 GMT
            Not After : Jul  1 03:38:03 2027 GMT
        Subject: CN=1C4EBE71CDD86CDF05C60CE4DCBAB42CB2793195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:8a:84:d3:17:b8:5e:31:cc:5f:e5:62:f5:
                    dc:f2:59:10:29:a9:71:c2:d6:d6:30:55:f2:3f:57:
                    7d:59:db:99:0c:dc:0b:1e:7a:c4:c1:bb:da:22:2d:
                    b8:68:96:b2:a4:43:db:c0:cf:8e:c5:6e:37:48:f0:
                    c3:97:52:56:96:d3:1e:7c:83:25:9d:78:a4:30:42:
                    86:2f:3a:36:1f:2f:1f:7b:78:a5:7c:bf:6d:d6:10:
                    30:18:1c:f5:a8:df:54:52:2d:1e:96:f2:0c:1b:7e:
                    d9:78:86:0e:47:fb:2f:bc:09:97:60:fd:36:cc:19:
                    c4:bf:79:ae:28:58:67:cc:ce:25:be:04:c2:80:10:
                    d8:12:b2:d8:48:7a:59:af:49:dc:43:25:51:52:d8:
                    e3:8e:6c:a8:9b:53:0f:49:b0:a2:ec:08:a7:09:2d:
                    d1:21:dc:57:24:cf:e5:f6:c9:2e:39:dc:32:39:4c:
                    1e:ff:32:9b:0f:9f:fb:73:f7:c1:9a:e6:c4:c7:32:
                    99:6b:45:5c:c3:b3:cc:3f:c6:17:5f:d9:65:6e:b2:
                    b4:24:67:71:81:73:54:d6:f6:35:40:ad:9a:1f:6e:
                    9b:47:a6:fc:ad:a4:dd:a0:83:09:36:5f:93:72:ce:
                    af:16:8c:8a:6d:ee:4b:bf:95:64:ef:b0:be:70:f4:
                    09:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4E:BE:71:CD:D8:6C:DF:05:C6:0C:E4:DC:BA:B4:2C:B2:79:31:95
            X509v3 Authority Key Identifier:
                keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e3130302e302f32322d3232203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:22:a1:83:ee:9a:af:dd:03:a2:29:ba:99:7c:65:01:78:40:
         ca:f8:f8:dc:0a:ef:27:21:14:8d:72:44:0b:f8:ff:57:32:69:
         b1:14:ba:38:67:18:aa:98:d6:b0:d9:8a:f0:8a:b1:a1:c3:ba:
         48:6a:87:09:9b:66:54:0c:9d:fe:2b:a7:f9:16:8a:9d:72:9b:
         7f:88:bf:95:01:1f:8f:48:9b:da:ff:d3:d7:77:6c:5c:2e:f2:
         af:c2:b8:b3:6d:88:99:21:a3:bb:dd:c4:20:dd:5a:af:0a:07:
         24:aa:15:e6:f2:fc:d7:17:6e:ab:30:08:df:4b:ef:c8:63:79:
         72:11:dc:1f:76:0b:e9:78:fe:42:31:73:8c:8a:99:22:a2:57:
         89:81:cc:9d:54:f1:51:6d:4b:d3:15:52:da:2d:df:79:f0:21:
         d3:c4:a9:1a:38:78:50:8d:45:8d:82:82:52:d2:91:d6:69:66:
         5c:e4:a2:4a:bd:63:7c:9f:9a:41:fc:a5:cc:46:68:f9:d1:23:
         98:81:f3:af:c6:70:fa:f3:03:b1:15:d0:28:fb:9b:19:7e:35:
         e7:21:7e:a5:dc:7d:e5:39:f6:6e:c7:70:4a:f7:d3:b5:f8:ab:
         17:76:8c:22:8d:f8:8a:83:59:df:a7:c6:6d:f9:25:5a:a0:64:
         c7:7d:79:cc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDErdvNCN/O1gY/81tRX9evq6rYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw
OThCQzhEMjAeFw0yNjA3MDIwMzMzMDNaFw0yNzA3MDEwMzM4MDNaMDMxMTAvBgNV
BAMTKDFDNEVCRTcxQ0REODZDREYwNUM2MENFNERDQkFCNDJDQjI3OTMxOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj6oqE0xe4XjHMX+Vi9dzyWRAp
qXHC1tYwVfI/V31Z25kM3AseesTBu9oiLbholrKkQ9vAz47FbjdI8MOXUlaW0x58
gyWdeKQwQoYvOjYfLx97eKV8v23WEDAYHPWo31RSLR6W8gwbftl4hg5H+y+8CZdg
/TbMGcS/ea4oWGfMziW+BMKAENgSsthIelmvSdxDJVFS2OOObKibUw9JsKLsCKcJ
LdEh3Fckz+X2yS453DI5TB7/MpsPn/tz98Ga5sTHMplrRVzDs8w/xhdf2WVusrQk
Z3GBc1TW9jVArZofbptHpvytpN2ggwk2X5Nyzq8WjIpt7ku/lWTvsL5w9AmrAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUHE6+cc3YbN8Fxgzk3Lq0LLJ5MZUwHwYDVR0j
BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5
MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwOTM1NDAzNjg2OTQ2NDA4NS8wLzM0MzUyZTMyMzUz
MTJlMzEzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM1MzEzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAi37ZDANBgkqhkiG9w0BAQsFAAOCAQEAkiKhg+6ar90Doim6mXxlAXhA
yvj43ArvJyEUjXJEC/j/VzJpsRS6OGcYqpjWsNmK8IqxocO6SGqHCZtmVAyd/iun
+RaKnXKbf4i/lQEfj0ib2v/T13dsXC7yr8K4s22ImSGju93EIN1arwoHJKoV5vL8
1xduqzAI30vvyGN5chHcH3YL6Xj+QjFzjIqZIqJXiYHMnVTxUW1L0xVS2i3fefAh
08SpGjh4UI1FjYKCUtKR1mlmXOSiSr1jfJ+aQfylzEZo+dEjmIHzr8Zw+vMDsRXQ
KPubGX415yF+pdx95Tn2bsdwSvfTtfirF3aMIo34ioNZ36fGbfklWqBkx315zA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:10 2026 by rpki-client