Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32302e302f32342d3234203d3e2034383437.roa
File:                     34352e3132342e32302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          7Ai5355UCmtNkZAudgsxmPeA4qw8KrEHxgbTkFG5WHc=
Subject key identifier:   26:D6:65:5A:1F:57:1C:9D:88:70:43:AD:D5:F6:47:30:44:3D:39:5E
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       4EEACDDF0388673BF2CAAAAFB1D80C9696A21D50
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32302e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 08:49:04 +0000
ROA not before:           Thu 04 Jun 2026 08:44:04 +0000
ROA not after:            Thu 03 Jun 2027 08:49:04 +0000
asID:                     4847
IP address blocks:        45.124.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ea:cd:df:03:88:67:3b:f2:ca:aa:af:b1:d8:0c:96:96:a2:1d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 08:44:04 2026 GMT
            Not After : Jun  3 08:49:04 2027 GMT
        Subject: CN=26D6655A1F571C9D887043ADD5F64730443D395E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:5c:b6:cc:bb:2a:6d:54:4f:17:d2:d7:07:
                    9b:96:1a:c4:1e:27:3b:7a:06:d1:b2:a2:9d:57:3f:
                    5f:21:94:8e:88:59:6f:c1:fd:98:0a:6f:6b:a2:05:
                    1b:ab:19:07:ad:fa:46:63:b4:be:5f:3b:61:82:19:
                    87:d4:a0:3d:3b:d7:9f:84:07:8b:5f:ff:e9:30:e5:
                    f0:e7:76:e2:c8:d4:49:ba:d1:e5:6b:c7:03:bb:34:
                    a2:5e:b4:3e:87:1a:d8:97:78:1c:06:a3:ad:b6:21:
                    e6:49:82:b5:dd:db:19:a7:b5:24:99:cc:c6:1f:4c:
                    bb:e6:8b:37:56:b0:95:df:f7:a9:bc:c5:ad:34:45:
                    4b:c9:0c:f1:de:cb:ae:ec:50:79:5d:ba:b0:7e:98:
                    94:3d:c8:d4:9d:06:1c:46:7e:56:38:12:88:e2:bb:
                    7b:51:42:f0:36:36:fc:ff:89:e1:57:f9:25:a7:76:
                    7d:f6:24:d0:8e:e7:da:38:2a:35:17:6d:ac:01:ff:
                    07:5e:be:d3:b3:2d:c0:48:85:16:72:ff:fa:26:e0:
                    96:cf:c8:98:f0:8c:38:fd:68:7b:a1:5d:27:3b:d7:
                    44:9b:ce:56:d4:ff:47:a2:c3:7c:28:ad:86:d3:55:
                    b2:74:f8:02:2b:ea:b7:49:9a:f2:dc:9a:27:d9:cd:
                    b1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D6:65:5A:1F:57:1C:9D:88:70:43:AD:D5:F6:47:30:44:3D:39:5E
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32302e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:0b:8f:d4:a3:6f:19:b1:05:32:f0:42:70:69:7c:ec:f5:57:
         f8:7f:2b:dd:59:37:50:b0:8c:ad:73:10:02:0d:73:e6:da:09:
         38:b4:7f:c3:a2:8c:a6:9a:5d:b3:8a:c7:8c:fc:24:eb:e4:41:
         d1:de:15:a8:a8:f7:f3:b9:a3:a5:46:fe:06:48:f1:19:20:a3:
         e4:47:d2:7e:2d:49:d9:c5:65:ea:b6:2a:48:00:54:d6:fe:3e:
         01:15:60:b8:c8:18:83:5f:03:03:31:8b:27:15:cd:6e:6f:0e:
         f8:15:18:f4:7a:03:b1:04:0b:3f:2f:6f:83:b3:81:b8:7b:2f:
         6f:c5:a0:4d:e1:18:05:28:01:c1:a3:89:9f:d0:b2:08:79:87:
         27:a9:23:e3:30:9f:3d:f3:1a:1f:2a:50:34:3f:b8:d4:06:74:
         0b:8a:8f:e4:7e:75:6f:3d:23:6e:4f:73:cd:1c:d2:13:32:54:
         e9:d1:43:b5:dc:fd:73:e4:ab:76:61:4d:89:75:4a:33:d6:74:
         14:d1:39:83:e9:9d:55:c4:46:f1:49:1a:a1:0e:49:c6:d6:56:
         7e:b3:ed:99:2f:89:72:e8:07:04:61:aa:a9:4f:e5:29:c4:b2:
         ce:0b:3d:55:f4:61:85:aa:78:11:06:12:92:da:e7:28:99:51:
         9e:08:1f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:32 2026 by rpki-client