Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32332d3233203d3e203633363333.roa
File:                     34352e3235342e382e302f32332d3233203d3e203633363333.roa (raw, json)
Hash identifier:          OupSETeNES+E6EQKnoTym1IonUo5VuuLCKmGEp4Jhg4=
Subject key identifier:   0B:35:7C:4E:23:B1:16:BC:A8:1B:14:E1:C0:89:12:8D:CD:45:02:AB
Certificate issuer:       /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial:       16444A95211A54EC558AE5E89F3ADF33F23CB4AD
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32332d3233203d3e203633363333.roa
Signing time:             Tue 23 Jun 2026 13:13:45 +0000
ROA not before:           Tue 23 Jun 2026 13:08:45 +0000
ROA not after:            Tue 22 Jun 2027 13:13:45 +0000
asID:                     63633
IP address blocks:        45.254.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:44:4a:95:21:1a:54:ec:55:8a:e5:e8:9f:3a:df:33:f2:3c:b4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
        Validity
            Not Before: Jun 23 13:08:45 2026 GMT
            Not After : Jun 22 13:13:45 2027 GMT
        Subject: CN=0B357C4E23B116BCA81B14E1C089128DCD4502AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:48:d1:e8:3d:4d:f8:88:34:b6:49:75:f3:67:
                    a0:0d:60:81:c3:be:b8:fa:19:14:e7:5c:b8:c3:01:
                    20:1e:dc:a5:bd:e4:db:ce:9e:b4:97:2c:04:9a:2d:
                    8f:ec:22:87:07:65:d9:bc:cf:2a:2b:5a:a3:1b:cf:
                    81:69:f3:9c:d3:0c:81:56:aa:ad:5e:2f:ad:17:e5:
                    b9:00:1c:c4:f7:37:72:aa:bf:36:6e:31:7d:12:7e:
                    ff:87:3e:be:cc:61:2e:b3:cb:b3:72:90:ee:0b:bd:
                    68:ee:81:19:f2:89:e1:ec:c5:1f:47:57:a9:6b:5a:
                    56:04:ee:21:e0:3b:77:c3:81:c0:27:96:78:cd:29:
                    ce:06:e2:5c:3c:81:54:7d:27:56:d3:bb:61:2f:49:
                    75:85:a1:05:09:ae:37:7e:ca:2a:39:c6:85:9d:7e:
                    ce:dd:df:71:96:7e:93:e1:37:e4:aa:79:3a:f2:46:
                    cf:dc:5f:e9:00:b4:37:cf:60:cc:43:3c:7f:c6:fb:
                    da:07:29:9f:66:0f:20:40:12:f1:4d:70:1d:3a:97:
                    c3:d3:f8:5d:51:53:2f:f3:03:be:c2:ce:80:b8:a2:
                    41:f9:1b:4d:fa:f1:cb:3b:63:6c:28:d1:a7:d8:f7:
                    2f:aa:f9:90:40:11:47:ff:fe:61:82:73:94:b5:35:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:35:7C:4E:23:B1:16:BC:A8:1B:14:E1:C0:89:12:8D:CD:45:02:AB
            X509v3 Authority Key Identifier:
                keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32332d3233203d3e203633363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.254.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:58:0a:7a:cd:38:f5:95:14:45:8f:72:67:4b:da:35:97:
         fc:ca:d1:10:38:a7:11:53:6a:2a:ec:e7:62:46:87:76:0b:77:
         bc:3f:a9:24:96:cd:da:cb:88:23:8a:be:3e:5a:5e:77:a9:7d:
         78:de:ca:38:a4:a2:19:48:c0:7a:fe:91:64:65:4d:2e:f7:74:
         73:4c:0b:1a:8c:59:69:51:77:76:78:27:86:ae:c3:dc:30:5a:
         c7:34:31:f1:bf:f3:52:86:ed:be:77:3a:a2:c1:8d:c2:96:ad:
         ec:92:e0:d5:19:55:40:f5:72:ca:50:04:d3:7d:0c:71:c5:e1:
         2f:9e:90:a2:6d:c7:c4:c9:76:00:42:17:44:23:9d:5a:f4:c3:
         6b:b7:ac:59:ac:fb:a3:49:05:63:b9:e8:46:76:86:d5:ea:a4:
         91:ae:37:79:74:b6:c9:09:f7:d5:e2:14:50:3c:17:d3:0e:5f:
         ba:b5:62:dd:f2:b1:da:18:5f:6d:58:e3:8c:5b:ce:e4:80:3b:
         6f:f3:94:2e:78:68:46:8c:f9:e3:7b:a8:66:a4:5d:55:aa:bc:
         5b:95:dd:4e:f8:51:e5:b3:f5:58:06:6e:9a:6c:ac:94:51:a3:
         42:b0:11:c4:5b:43:e9:c1:8d:9b:f1:cb:c6:d5:66:56:1c:03:
         c4:99:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:27 2026 by rpki-client