Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32312e302f32342d3234203d3e2034383437.roa
File:                     34352e3132342e32312e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          lcuJsk7NCmVi9uUbxn2YCJE3t3e2O60UPcvuRv0ueSw=
Subject key identifier:   97:BB:6B:04:8A:73:5E:B5:E5:E0:D1:A9:CF:1A:53:F8:14:7A:D5:FE
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       0FDACE6B6675D3854898E0C5F9D3B7FD363CFBBB
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32312e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 08:48:57 +0000
ROA not before:           Thu 04 Jun 2026 08:43:57 +0000
ROA not after:            Thu 03 Jun 2027 08:48:57 +0000
asID:                     4847
IP address blocks:        45.124.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:da:ce:6b:66:75:d3:85:48:98:e0:c5:f9:d3:b7:fd:36:3c:fb:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 08:43:57 2026 GMT
            Not After : Jun  3 08:48:57 2027 GMT
        Subject: CN=97BB6B048A735EB5E5E0D1A9CF1A53F8147AD5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:ba:c9:52:6a:51:90:90:f5:3d:ec:d2:f1:
                    40:b4:31:85:1c:a4:0d:57:f8:b6:5f:b3:4d:79:81:
                    2c:c9:93:8e:6a:82:9d:e1:a0:7d:b1:1d:4b:61:a3:
                    9d:b5:1a:7a:fd:75:2f:b5:8a:cd:75:d8:07:71:1a:
                    e3:bf:30:a3:ce:22:50:90:73:86:e2:4d:1a:12:4e:
                    45:54:b6:f3:b7:10:8e:a1:89:e7:10:12:68:4a:93:
                    7d:63:62:4a:05:68:f1:e9:02:5a:15:93:4e:d2:00:
                    a7:af:52:c2:d5:24:c6:1d:d6:74:e7:9e:e7:02:71:
                    6b:a5:b4:f5:f1:ed:67:1c:e4:62:ab:53:aa:45:f1:
                    a4:f5:d7:55:b0:1c:e7:1f:92:ff:f6:45:df:05:48:
                    c5:6c:3e:ac:89:fe:20:70:e8:d3:32:72:3e:c8:03:
                    32:b5:c4:b1:10:8d:af:c2:bb:b3:84:28:bd:fa:69:
                    9c:af:c5:29:f6:ce:11:14:9f:48:c5:93:0b:61:6a:
                    08:9a:03:b4:bf:eb:a5:dd:30:e2:40:25:b7:80:67:
                    75:65:4c:35:d8:dc:57:fe:87:2a:d3:3e:3d:aa:b4:
                    9e:fe:2c:8d:52:73:f0:da:ab:cc:f7:dc:dd:3b:cb:
                    b6:31:9d:e2:7a:02:a4:30:cf:18:90:ce:67:89:b1:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BB:6B:04:8A:73:5E:B5:E5:E0:D1:A9:CF:1A:53:F8:14:7A:D5:FE
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32312e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:73:31:07:b3:6f:84:a2:fb:68:76:75:69:7e:ea:c3:48:e3:
         7d:8f:f5:48:2a:dc:a5:be:88:d5:2d:cb:c1:43:97:9f:e9:6a:
         d9:a4:04:7d:75:49:bc:16:2b:06:95:7f:96:60:91:87:b4:3f:
         a1:bd:2e:55:e4:ac:6b:10:1b:3c:c5:c7:70:0d:9b:d6:27:f2:
         e7:48:2c:21:4e:6c:29:e7:b6:7d:f8:8a:23:ff:96:f2:0e:db:
         e9:9e:f7:e1:b5:71:bf:37:2d:87:29:99:78:9b:f2:9c:cb:ed:
         67:91:4c:6b:db:01:c7:f7:e5:76:87:b7:c8:58:89:d1:76:02:
         b8:67:a5:2c:89:7b:dd:8b:c9:91:8b:f1:ce:54:43:f6:26:78:
         67:88:95:cd:8c:47:e5:37:c7:a9:94:c9:c8:71:9d:07:5b:2c:
         5f:6e:ab:7d:f7:2b:e6:b7:4e:0e:2e:5b:15:28:e5:fa:23:2d:
         88:af:fa:76:fc:1d:5d:d0:4f:5e:93:28:68:f7:f0:c5:77:a8:
         d8:fa:5e:5d:38:2a:a6:ff:85:9d:4d:9f:3c:2a:45:7a:1f:40:
         ef:c2:d7:c0:b6:35:39:f2:85:7f:cd:6f:92:5a:88:6b:38:a1:
         4b:e4:6d:cf:ba:38:6e:03:9d:57:af:46:88:c4:51:bd:a4:3c:
         fb:ed:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:53 2026 by rpki-client