Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32322e302f32342d3234203d3e2034383437.roa
File:                     34352e3235312e32322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          MA3pXAy66eAstygV8uQuW4MRp2FgYwUIGoklSLpL1KA=
Subject key identifier:   84:0E:FD:D9:9C:01:E8:23:B6:A8:24:21:2B:B8:9A:3C:85:5B:BF:BC
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       0F23761E90F0D482C869818FED823FA00314808D
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32322e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 09:05:13 +0000
ROA not before:           Thu 04 Jun 2026 09:00:13 +0000
ROA not after:            Thu 03 Jun 2027 09:05:13 +0000
asID:                     4847
IP address blocks:        45.251.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:23:76:1e:90:f0:d4:82:c8:69:81:8f:ed:82:3f:a0:03:14:80:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:00:13 2026 GMT
            Not After : Jun  3 09:05:13 2027 GMT
        Subject: CN=840EFDD99C01E823B6A824212BB89A3C855BBFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:00:c6:28:de:cf:3e:b0:d4:0a:11:a0:e0:
                    a8:e3:cf:bc:a9:63:65:7a:3c:3f:e1:3b:1f:ba:6b:
                    a4:0e:88:6d:73:9a:9d:35:c9:e7:72:bd:d7:9b:fb:
                    1c:46:bd:09:2f:8e:fc:5f:55:2a:22:0e:0e:5d:97:
                    d3:73:3f:ab:b3:ec:73:84:25:93:2e:a2:d2:7d:3b:
                    26:12:4e:98:9a:8e:31:76:6c:46:9d:3a:66:b0:b8:
                    f9:c7:72:0b:2e:71:b7:eb:2a:8f:49:43:2d:fa:ee:
                    44:b6:18:4a:2b:d4:f2:4f:6d:89:a3:1e:5f:1e:86:
                    12:9c:2a:1a:ce:71:c4:d5:90:3a:fc:cc:ba:45:65:
                    70:a3:da:c1:e3:83:37:7b:39:73:12:43:89:23:16:
                    20:4c:13:4b:f7:48:5c:bf:e1:16:86:90:9d:ca:f3:
                    bc:80:a4:53:4d:7d:70:90:f2:a6:82:8e:20:b6:27:
                    38:2a:33:78:75:c9:26:fa:5e:96:57:e1:9f:94:b4:
                    a5:f3:75:5c:0b:c9:6b:33:67:5b:bf:09:dc:fd:bf:
                    86:a0:49:02:3d:98:2b:ff:e9:aa:16:e0:e2:46:e1:
                    2d:76:0f:a5:a1:a0:91:4a:54:13:82:f8:cc:ee:52:
                    b0:03:a9:37:47:cd:6a:46:ba:99:b6:f5:27:a5:b0:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0E:FD:D9:9C:01:E8:23:B6:A8:24:21:2B:B8:9A:3C:85:5B:BF:BC
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32322e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:52:6f:96:7b:bd:bd:b9:4f:92:f3:76:20:37:c1:95:8f:f4:
         e5:1d:4f:fe:33:cd:45:d9:96:70:b1:9c:6c:db:4b:0f:cd:bc:
         36:b6:64:8e:e1:59:4e:78:2a:0d:d5:75:a9:fb:c7:51:bb:7b:
         00:db:ac:b1:1d:66:2d:f0:fe:6f:44:5c:0a:97:a0:87:1f:06:
         26:f9:12:6f:f4:44:de:87:a0:8a:e4:7e:cc:c8:ce:b9:82:59:
         56:68:65:2e:f1:9e:b7:1a:96:53:2c:20:74:31:36:5c:e5:16:
         84:ab:ea:71:44:1f:a5:f8:11:81:77:bd:54:10:23:73:d1:04:
         7f:4d:cd:78:83:ca:3c:7c:88:d3:23:1a:73:c3:65:b6:ad:06:
         ba:36:27:15:54:58:d1:ed:a0:00:39:bf:ab:ab:68:23:55:38:
         5e:3a:05:4e:0e:e4:93:fd:d8:40:db:47:c2:e7:77:de:f5:fa:
         df:b0:a6:ca:c1:e2:f9:55:c2:71:43:4d:94:81:20:01:b6:11:
         a6:d8:8a:8a:f0:27:f3:1a:71:18:ff:8c:54:35:24:d1:d8:3e:
         82:5f:7b:d6:68:63:68:77:e9:be:00:46:7a:c2:6e:f4:ea:04:
         98:08:90:a6:79:f7:16:a7:7f:88:3f:e2:7b:b3:63:3d:70:ad:
         b0:e5:fa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:50 2026 by rpki-client