Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39322e302f32322d3232203d3e203538353139.roa
File:                     34352e3235312e39322e302f32322d3232203d3e203538353139.roa (raw, json)
Hash identifier:          ePQdZvLEBEPecmiRi/mFtngHDwQwodel2INEy7X9N4E=
Subject key identifier:   2E:61:63:4E:01:78:4F:ED:78:6F:73:CA:8F:D6:84:82:14:B3:5E:48
Certificate issuer:       /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial:       1F27219528FBC59DC2614F20EBB4B34A575641B1
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39322e302f32322d3232203d3e203538353139.roa
Signing time:             Thu 02 Jul 2026 03:38:03 +0000
ROA not before:           Thu 02 Jul 2026 03:33:03 +0000
ROA not after:            Thu 01 Jul 2027 03:38:03 +0000
asID:                     58519
IP address blocks:        45.251.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:27:21:95:28:fb:c5:9d:c2:61:4f:20:eb:b4:b3:4a:57:56:41:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
        Validity
            Not Before: Jul  2 03:33:03 2026 GMT
            Not After : Jul  1 03:38:03 2027 GMT
        Subject: CN=2E61634E01784FED786F73CA8FD6848214B35E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:e0:bb:dd:76:bf:cd:62:f0:23:9a:e3:8b:
                    7d:93:97:cb:0f:76:90:42:12:78:3b:b2:83:ee:a7:
                    fe:41:1d:e0:5f:55:dd:34:18:7b:09:51:64:c3:3b:
                    a3:1f:b2:cd:e7:61:ff:90:4c:20:12:7e:5e:13:5a:
                    3d:97:70:57:86:96:e8:4c:ff:c6:cf:f0:71:02:b2:
                    0e:63:d3:8a:7c:5d:1f:72:78:60:61:b6:0a:e1:3b:
                    23:6b:ec:03:1d:f4:f4:7f:ec:5e:1d:c0:82:31:5e:
                    5a:85:8f:8a:0f:01:d8:e8:4e:c2:00:3a:dd:46:64:
                    d9:fe:33:b7:e4:b5:20:ac:69:c7:88:5b:93:a7:cc:
                    0e:71:b0:7c:cf:ca:88:c3:1d:47:91:9b:82:e6:2d:
                    11:5a:54:1f:36:9c:72:0b:a2:f8:46:9a:26:97:91:
                    13:29:0d:d0:14:4e:31:31:0b:3e:10:87:96:1d:60:
                    42:19:60:36:e6:d9:a5:d0:d4:4f:3b:5b:3c:12:13:
                    f5:26:19:e1:b6:dc:92:2c:3d:81:d2:c3:21:ed:8d:
                    55:7d:74:b9:95:5a:47:b7:55:70:39:0c:a5:be:dd:
                    85:a9:d5:c3:ff:d7:73:38:78:ef:85:a8:67:8d:b3:
                    e7:ea:b8:36:73:3f:e9:64:b4:be:a1:77:63:1b:f1:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:61:63:4E:01:78:4F:ED:78:6F:73:CA:8F:D6:84:82:14:B3:5E:48
            X509v3 Authority Key Identifier:
                keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39322e302f32322d3232203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:0f:e7:fa:18:08:18:35:b4:af:a6:47:90:ca:c2:d6:d8:
         28:2e:fa:76:1d:6a:38:08:23:fc:fa:a9:6f:c3:1b:c0:7e:6c:
         ad:e6:ff:55:83:54:f8:c8:3c:66:66:1a:52:ef:1d:51:41:d5:
         ca:02:f1:4b:be:0f:42:90:90:d3:a8:66:17:9a:ee:bc:b7:a5:
         db:98:50:48:ad:2a:39:5f:91:93:dc:fa:80:74:22:69:ea:93:
         46:c8:7d:5a:1c:65:6f:1d:88:ed:87:d8:e3:37:5f:69:48:a7:
         81:df:18:84:df:07:3a:a9:09:16:e3:79:97:e2:1d:cb:fe:0e:
         71:29:80:e9:30:4d:9c:c9:b0:93:cf:c0:73:08:f4:a1:a2:11:
         00:b4:03:32:4a:62:82:30:15:c4:be:9f:58:6f:bb:a8:56:9f:
         12:f2:65:66:5b:31:11:f3:19:3b:2f:ab:62:fe:0d:a8:63:1a:
         ba:10:2c:d9:a5:fb:e4:63:c9:7d:f0:c4:eb:53:56:63:db:e9:
         f7:6c:fb:51:22:18:46:dc:3e:52:c5:a7:51:cd:fa:67:de:3b:
         b6:de:75:32:92:96:6e:16:38:38:9b:7b:a2:59:8b:40:88:79:
         6c:b3:72:2c:49:a2:31:b4:2f:45:43:92:f8:c0:ea:67:fe:74:
         69:7a:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:31 2026 by rpki-client