Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/34352e3235332e36322e302f32342d3332203d3e203633363231.roa
File:                     34352e3235332e36322e302f32342d3332203d3e203633363231.roa (raw, json)
Hash identifier:          64gxrmcWCGFymrozTJAeOwyiWTaSxZbZumF/VaNZJYI=
Subject key identifier:   C1:1F:D8:EB:54:99:3D:36:DA:DC:B0:B5:1F:CA:AF:19:84:16:BF:9B
Certificate issuer:       /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial:       11279AA5C6E7074B65FC32745FDD5ABB07B3C07A
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/34352e3235332e36322e302f32342d3332203d3e203633363231.roa
Signing time:             Fri 29 May 2026 10:04:06 +0000
ROA not before:           Fri 29 May 2026 09:59:06 +0000
ROA not after:            Fri 28 May 2027 10:04:06 +0000
asID:                     63621
IP address blocks:        45.253.62.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:27:9a:a5:c6:e7:07:4b:65:fc:32:74:5f:dd:5a:bb:07:b3:c0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
        Validity
            Not Before: May 29 09:59:06 2026 GMT
            Not After : May 28 10:04:06 2027 GMT
        Subject: CN=C11FD8EB54993D36DADCB0B51FCAAF198416BF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:e6:5e:f8:8d:35:62:6f:bb:7f:01:cd:23:
                    9b:b9:87:b2:ba:7d:66:db:1e:b6:6f:5d:b4:0e:5a:
                    53:69:ce:65:6c:35:e7:88:dc:26:1a:55:9b:88:ba:
                    2e:82:e6:37:49:fe:66:c6:d9:70:5e:c9:11:f0:db:
                    60:b5:31:17:a6:7e:c4:89:40:79:b3:dc:aa:98:14:
                    21:f0:a3:71:25:9e:8d:f4:81:93:68:33:0a:88:a7:
                    9f:a3:0d:6b:b2:0b:34:02:76:04:0e:38:35:70:ba:
                    43:5a:fd:90:90:a1:52:28:92:6f:94:e7:cd:87:e1:
                    df:49:eb:d3:52:30:88:63:11:b3:0e:98:78:d4:43:
                    7f:de:45:b2:8a:b2:ca:54:d9:65:e1:ae:57:8f:1f:
                    22:83:52:aa:1a:19:6f:2a:d2:93:c5:1c:63:4f:a5:
                    e1:cd:5a:aa:8b:b4:76:08:b5:fa:e1:47:2b:c4:2a:
                    88:14:3f:c9:a0:bf:c6:2e:d2:f0:e6:21:f0:46:4b:
                    73:1b:a6:40:25:41:3f:41:f1:fd:82:06:e0:1d:6c:
                    43:ae:2b:bc:d9:25:84:77:39:f9:b5:b0:fd:98:3e:
                    0e:76:27:29:46:05:c1:96:ef:27:c3:ea:5f:a5:0c:
                    b1:ea:ad:c1:ea:fa:b4:35:b4:c7:e8:fb:bc:fe:36:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1F:D8:EB:54:99:3D:36:DA:DC:B0:B5:1F:CA:AF:19:84:16:BF:9B
            X509v3 Authority Key Identifier:
                keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/34352e3235332e36322e302f32342d3332203d3e203633363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.253.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ad:d2:83:ff:21:62:11:48:75:2a:a3:d7:c9:0e:43:a0:0b:
         8e:7f:19:d1:66:3f:6f:ed:c7:1d:10:6e:7b:d5:c3:f5:15:de:
         8c:21:d1:35:4e:9c:ec:97:b4:d4:0a:cb:01:f1:7f:7e:2d:ad:
         d8:9c:3e:44:9e:08:9a:6b:58:20:a6:c2:13:34:09:4f:97:dc:
         8b:ce:08:5c:4a:fa:89:c6:a4:74:a2:6e:67:39:76:0d:70:a6:
         39:26:c5:16:38:82:2d:7f:4a:21:81:cf:e5:6b:4a:c4:77:55:
         b2:4e:fb:25:f9:53:0f:dd:1a:7e:10:c6:a2:b5:19:be:7e:61:
         bc:30:ce:4b:a6:93:6d:d2:51:80:c2:d8:0b:8f:30:4f:61:c3:
         7a:53:5e:24:15:ab:32:fe:ad:3c:db:7d:4e:e5:c7:77:b0:e1:
         ad:a0:8e:fd:fd:12:9a:ee:a8:f7:36:32:de:13:6a:76:b3:cf:
         d2:93:f8:f3:25:79:93:7a:e5:59:a8:39:5d:ef:8e:7c:fb:48:
         fe:84:71:f4:16:6f:7c:22:66:99:77:51:77:9a:e7:aa:37:f4:
         13:cb:a2:51:7f:6b:97:dd:06:67:5d:dc:e5:53:cb:3b:d5:8b:
         f5:ed:9c:83:2e:fc:bb:c2:d4:dd:74:84:7b:ef:15:47:d6:4b:
         14:12:4d:a6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUESeapcbnB0tl/DJ0X91auwezwHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2
NTZCRjVDMDAeFw0yNjA1MjkwOTU5MDZaFw0yNzA1MjgxMDA0MDZaMDMxMTAvBgNV
BAMTKEMxMUZEOEVCNTQ5OTNEMzZEQURDQjBCNTFGQ0FBRjE5ODQxNkJGOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyuZe+I01Ym+7fwHNI5u5h7K6
fWbbHrZvXbQOWlNpzmVsNeeI3CYaVZuIui6C5jdJ/mbG2XBeyRHw22C1MRemfsSJ
QHmz3KqYFCHwo3Elno30gZNoMwqIp5+jDWuyCzQCdgQOODVwukNa/ZCQoVIokm+U
582H4d9J69NSMIhjEbMOmHjUQ3/eRbKKsspU2WXhrlePHyKDUqoaGW8q0pPFHGNP
peHNWqqLtHYItfrhRyvEKogUP8mgv8Yu0vDmIfBGS3MbpkAlQT9B8f2CBuAdbEOu
K7zZJYR3Ofm1sP2YPg52JylGBcGW7yfD6l+lDLHqrcHq+rQ1tMfo+7z+NuH5AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUwR/Y61SZPTba3LC1H8qvGYQWv5swHwYDVR0j
BBgwFoAUMgGIs/o42g9BkvcgGtfTd2Vr9cAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY4MDAyMzg5MTkwMjQ4MS8wLzMyMDE4OEIzRkEzOERBMEY0MTkyRjcyMDFBRDdE
Mzc3NjU2QkY1QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2NTZCRjVDMC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNjgwMDIzODkxOTAyNDgxLzAvMzQzNTJlMzIzNTMz
MmUzNjMyMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzYzMzM2MzIzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAC39PjANBgkqhkiG9w0BAQsFAAOCAQEAl63Sg/8hYhFIdSqj18kOQ6ALjn8Z
0WY/b+3HHRBue9XD9RXejCHRNU6c7Je01ArLAfF/fi2t2Jw+RJ4ImmtYIKbCEzQJ
T5fci84IXEr6icakdKJuZzl2DXCmOSbFFjiCLX9KIYHP5WtKxHdVsk77JflTD90a
fhDGorUZvn5hvDDOS6aTbdJRgMLYC48wT2HDelNeJBWrMv6tPNt9TuXHd7DhraCO
/f0Smu6o9zYy3hNqdrPP0pP48yV5k3rlWag5Xe+OfPtI/oRx9BZvfCJmmXdRd5rn
qjf0E8uiUX9rl90GZ13c5VPLO9WL9e2cgy78u8LU3XSEe+8VR9ZLFBJNpg==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:52 2026 by rpki-client