Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32322e302f32342d3234203d3e2034383437.roa
File:                     34352e3132342e32322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          k8qbD1pZsJLTL4HS5XDDeCa1ZCg7eDrxW9hBG19DvoI=
Subject key identifier:   BD:C2:60:72:3A:C6:04:9B:66:2B:19:20:6C:F1:33:80:A7:05:78:07
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       1086D75127740CC2AA166F12E89585F6D7634927
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32322e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 08:48:48 +0000
ROA not before:           Thu 04 Jun 2026 08:43:48 +0000
ROA not after:            Thu 03 Jun 2027 08:48:48 +0000
asID:                     4847
IP address blocks:        45.124.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:86:d7:51:27:74:0c:c2:aa:16:6f:12:e8:95:85:f6:d7:63:49:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 08:43:48 2026 GMT
            Not After : Jun  3 08:48:48 2027 GMT
        Subject: CN=BDC260723AC6049B662B19206CF13380A7057807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:c2:ff:de:8b:c5:6c:d7:17:42:d1:41:ab:
                    da:31:c2:4d:ab:aa:8f:7a:84:ba:61:9e:23:9a:1f:
                    b1:77:a8:69:99:88:5e:ce:5d:d6:5f:b7:2a:1a:0a:
                    79:c6:4a:48:bc:6b:bb:15:8e:c2:38:5f:d2:82:cd:
                    bd:49:a9:7a:ed:aa:84:63:d7:41:0c:7c:af:c2:a7:
                    d6:38:ae:b4:ac:40:bd:c4:72:49:69:16:64:54:ee:
                    29:ed:e8:2e:0b:4c:a5:2e:67:b9:f1:d9:ef:34:64:
                    0a:9d:8e:05:d2:e0:a3:6e:13:0b:41:3c:87:8e:a0:
                    b7:de:b5:49:f0:46:4a:47:1e:fc:2a:b0:12:5d:af:
                    91:ab:9c:26:b5:a6:ad:2f:01:70:f8:5a:cf:a2:0a:
                    60:b0:ff:99:d3:8f:65:99:01:1d:97:11:32:8f:f7:
                    f5:d3:4f:21:2a:c1:1d:14:a5:c6:c9:6e:62:7d:fd:
                    be:4f:6e:6d:4c:d0:fb:29:e7:1e:da:5b:26:f5:35:
                    d4:6e:19:64:df:c4:5e:7d:57:1c:84:8d:81:af:ea:
                    49:94:13:f5:e5:2b:dc:3b:4f:a6:e8:08:f3:8d:a2:
                    ca:01:40:fb:7c:e7:79:87:8a:83:16:b4:53:e1:a4:
                    c2:73:b5:8d:66:6c:47:b3:cd:1a:83:e8:ca:1a:60:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C2:60:72:3A:C6:04:9B:66:2B:19:20:6C:F1:33:80:A7:05:78:07
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32322e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:f9:30:ce:c2:8b:af:dd:79:ef:36:f1:e1:19:6b:e3:b9:b4:
         d3:9a:98:2d:33:a7:bc:76:75:7c:79:9f:3c:b4:aa:e1:59:31:
         60:8d:cd:5a:11:aa:28:d1:3c:99:4f:7e:c4:bd:7e:88:a2:b2:
         f6:07:10:28:3c:11:72:af:73:fd:f6:b7:99:e3:55:f3:4a:37:
         67:77:a8:56:74:e2:9f:45:4c:bd:66:db:d2:91:1c:db:85:88:
         59:cc:ae:c1:fa:20:42:d1:74:3c:11:28:75:ea:a3:d7:93:24:
         3c:dd:08:ab:a4:e0:de:45:ca:9e:1d:cb:6c:81:aa:b9:a9:15:
         52:62:65:1f:00:4c:e3:5a:27:07:b0:06:db:28:1c:21:79:fb:
         09:db:d9:48:35:4a:b7:fc:1e:38:a7:6b:2e:16:c2:c3:2f:1c:
         0b:59:bd:23:d5:bd:52:05:10:25:4f:f3:39:6c:1a:c9:3d:b0:
         eb:da:30:4c:39:c6:43:74:0e:b9:a7:82:e7:19:0b:10:39:27:
         00:0f:95:1e:02:d0:75:bb:db:22:ac:60:3d:c7:9b:8e:e1:68:
         62:7c:a6:c1:23:03:96:94:c5:65:b3:a2:a0:2f:56:bb:f2:1a:
         99:b6:8d:23:c9:f3:b2:d4:97:88:c4:f2:ff:11:f4:53:36:13:
         dd:14:61:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:51 2026 by rpki-client