Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/34352e3131372e37312e302f32342d3234203d3e203539303634.roa
File:                     34352e3131372e37312e302f32342d3234203d3e203539303634.roa (raw, json)
Hash identifier:          1Y+Dh612RaqOJd6pDXHDbAj4lmDdl16U1NldnrDPKCw=
Subject key identifier:   3B:96:2F:BF:CF:72:7B:38:AB:70:9B:57:05:D7:6B:31:B3:BB:A3:70
Certificate issuer:       /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Certificate serial:       0557F058A467227368344525F56528FB4EEAE207
Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/34352e3131372e37312e302f32342d3234203d3e203539303634.roa
Signing time:             Tue 02 Jun 2026 07:36:57 +0000
ROA not before:           Tue 02 Jun 2026 07:31:57 +0000
ROA not after:            Tue 01 Jun 2027 07:36:57 +0000
asID:                     59064
IP address blocks:        45.117.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:57:f0:58:a4:67:22:73:68:34:45:25:f5:65:28:fb:4e:ea:e2:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
        Validity
            Not Before: Jun  2 07:31:57 2026 GMT
            Not After : Jun  1 07:36:57 2027 GMT
        Subject: CN=3B962FBFCF727B38AB709B5705D76B31B3BBA370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:54:dc:c6:89:71:bf:60:b1:0e:89:5e:6f:
                    26:ca:3a:f5:0b:7c:8f:69:ff:62:50:c4:c2:f9:5a:
                    c5:94:c3:1d:8e:74:17:e9:98:a9:f2:5c:a2:4f:34:
                    2b:a2:26:46:9f:55:2a:e6:68:4d:56:a1:a4:93:08:
                    3c:38:a1:87:13:40:71:cb:13:51:e1:4f:5e:3b:2e:
                    8d:a4:88:b8:ca:5a:b9:23:44:21:0e:3d:15:02:ad:
                    5c:11:ee:03:38:a7:fd:4c:c8:61:ce:63:08:ec:0c:
                    f7:4f:38:ec:b5:1c:4c:00:8b:d7:ab:af:98:60:72:
                    30:c4:4f:92:e8:f5:41:3b:ef:b0:fa:6b:c5:34:3b:
                    48:e7:56:e9:26:2d:86:62:34:4c:ac:f3:c6:f3:7e:
                    65:d7:5d:f7:26:60:af:71:f6:3c:21:2c:ff:01:dc:
                    78:59:d0:08:b6:af:70:e3:f6:4c:b8:89:e1:41:ba:
                    4f:4c:94:2a:aa:2e:fa:bd:3e:41:dc:50:71:04:8b:
                    b5:a1:f5:0f:29:a0:3e:14:34:df:bc:00:e3:31:dd:
                    d9:9b:81:e5:3c:8f:3c:3c:08:05:da:82:49:4b:8e:
                    cd:71:74:db:f5:63:c8:bf:fa:00:31:b2:d9:4a:80:
                    56:33:f8:fa:d6:33:75:29:32:f6:e7:f2:5e:83:c9:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:96:2F:BF:CF:72:7B:38:AB:70:9B:57:05:D7:6B:31:B3:BB:A3:70
            X509v3 Authority Key Identifier:
                keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/34352e3131372e37312e302f32342d3234203d3e203539303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:4b:73:7b:38:ac:77:35:2d:5c:01:75:74:3d:ad:59:8b:40:
         5b:3b:6c:19:a4:d1:ad:ba:0a:98:02:1a:36:4d:a7:44:c8:30:
         04:4e:96:ed:73:75:90:42:1b:79:36:8d:a9:07:03:a2:be:85:
         4e:b8:f0:35:29:70:4a:bf:fe:a1:fa:3a:fc:a0:89:6b:18:28:
         81:40:c5:c0:46:08:fb:c7:fa:cb:95:29:0a:0e:a2:e0:73:b5:
         47:4d:a0:ca:e5:17:15:c3:cb:40:31:ab:59:28:5a:16:bb:0b:
         a1:f3:53:b6:a9:1d:e2:27:43:70:9a:bb:99:2d:02:f5:c1:ae:
         35:77:03:1f:00:82:01:d5:72:bb:46:28:0b:7a:e8:a0:c3:d9:
         4e:63:5b:3e:d4:c3:2e:51:b7:6c:3f:93:bf:1c:1b:87:8b:6b:
         e8:6e:67:37:75:0b:b0:00:9f:49:04:6f:56:15:27:b2:d7:42:
         7a:c7:21:39:1d:13:2d:8e:b0:d9:c1:f7:d6:3d:d8:06:d9:c1:
         92:48:ca:f9:34:bf:3a:2b:4d:ac:5c:b0:82:43:b1:4d:21:be:
         37:32:b8:c5:16:6b:f1:81:7a:b4:2b:22:3e:4b:20:d7:bb:68:
         c4:75:66:a1:e8:57:02:66:8f:64:ee:d9:84:6a:0e:5c:d5:bd:
         1e:c2:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:52 2026 by rpki-client