Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e203633363333.roa
File:                     34352e3235342e382e302f32342d3234203d3e203633363333.roa (raw, json)
Hash identifier:          2wyVk8ZYds07gMgFgv5tN5PEVXabnwJjCcdDeX5PRh4=
Subject key identifier:   45:35:E5:E7:E4:31:4F:46:7F:66:95:E5:8C:AD:2C:48:9F:89:18:BF
Certificate issuer:       /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial:       3E760CE2FF53735C8A2B9221FDDC510BBC5F7DC6
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e203633363333.roa
Signing time:             Tue 23 Jun 2026 13:06:08 +0000
ROA not before:           Tue 23 Jun 2026 13:01:08 +0000
ROA not after:            Tue 22 Jun 2027 13:06:08 +0000
asID:                     63633
IP address blocks:        45.254.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:76:0c:e2:ff:53:73:5c:8a:2b:92:21:fd:dc:51:0b:bc:5f:7d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
        Validity
            Not Before: Jun 23 13:01:08 2026 GMT
            Not After : Jun 22 13:06:08 2027 GMT
        Subject: CN=4535E5E7E4314F467F6695E58CAD2C489F8918BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:f6:08:30:7b:b4:41:e8:ac:6c:a2:77:44:
                    85:ed:8c:5a:2c:ea:8d:55:01:f6:ba:65:e0:0a:23:
                    0c:f9:78:18:8c:2e:97:85:3b:7d:84:f0:aa:89:60:
                    76:44:a2:ab:eb:70:5a:0b:c8:19:af:62:4e:03:b3:
                    0c:16:bc:b7:ba:f8:7b:14:63:96:60:34:43:db:cc:
                    0f:24:de:44:f6:64:30:4d:95:3d:e0:e7:7a:63:ce:
                    b6:2e:20:37:88:f8:a8:b5:74:5d:51:46:47:f4:1c:
                    ae:c5:2d:29:93:b9:76:27:03:09:7e:19:d1:72:92:
                    18:fb:ef:d2:7b:89:a8:53:e9:2a:a7:2a:f4:05:f7:
                    e3:83:5e:a9:4e:2a:d1:c9:21:23:13:5c:76:62:36:
                    4b:18:d5:e3:32:b7:1e:8c:d6:d0:c4:0f:44:85:44:
                    64:e1:97:99:ec:1b:b3:75:49:05:20:08:99:4c:df:
                    20:4d:71:d4:3e:60:e7:de:d4:5e:21:0a:f2:eb:f6:
                    06:d1:f2:09:08:2e:e4:37:b5:94:b0:f8:98:07:02:
                    bc:2a:83:a2:90:57:d4:40:d8:06:8d:87:82:69:75:
                    b1:fb:bf:42:ed:79:6d:3a:35:d9:3a:4e:17:82:f0:
                    1c:cd:10:a8:22:aa:b1:b3:3c:55:59:b1:b8:92:53:
                    b8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:35:E5:E7:E4:31:4F:46:7F:66:95:E5:8C:AD:2C:48:9F:89:18:BF
            X509v3 Authority Key Identifier:
                keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e203633363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.254.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8a:e7:4e:80:16:06:c7:d0:2c:6b:f0:30:be:ed:6c:0f:87:
         98:86:a1:49:90:10:17:62:f8:5d:35:f2:8a:78:30:21:46:54:
         50:d8:2d:d6:f6:5d:5a:85:b3:0b:11:89:5b:da:85:cc:07:4c:
         54:35:33:c8:95:2c:5e:24:34:51:da:f8:d8:35:22:91:22:52:
         cd:ed:24:a4:63:0a:b7:93:0a:39:a3:d8:4e:b7:bc:31:42:df:
         cd:53:36:45:9c:26:83:dd:6d:1e:d8:7d:70:1a:2c:90:b6:68:
         b6:82:cb:a5:4b:15:12:b8:9b:a9:5a:c1:09:1d:2e:9a:4b:fb:
         34:b4:f6:32:a1:46:f5:e7:c1:b3:9a:d0:25:9b:a2:02:8b:df:
         12:73:4a:16:33:71:79:6e:90:33:84:ba:7a:ce:df:ce:73:cd:
         14:69:51:56:77:19:03:f8:89:9b:f3:d7:ee:d2:74:df:7c:39:
         f7:f9:00:3a:a7:7b:ef:64:db:c2:ed:7f:6f:4d:f9:4c:f2:c8:
         6e:b2:3f:c0:4b:33:c1:1d:51:5f:4c:1f:02:26:54:1a:98:e4:
         73:cb:a7:8f:17:ef:64:ca:ad:72:e1:6a:6e:f3:4d:21:39:f1:
         4b:1d:7d:3d:33:b9:60:16:9d:bc:c1:2c:92:f2:ba:eb:47:fb:
         ae:f6:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:13 2026 by rpki-client