Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/34352e3132362e3131322e302f32322d3232203d3e2034383437.roa
File:                     34352e3132362e3131322e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier:          FalWQte9mnWrzLhbGi0PVklPjT0Bn3VWP8JzYdGRCIo=
Subject key identifier:   08:D9:FB:20:C3:3E:83:7A:B8:58:5C:5C:58:AC:E7:B7:CD:C5:E4:16
Certificate issuer:       /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
Certificate serial:       685B8107E0D3F1FE6ACD9A020BAF7B0A1FA0C341
Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/34352e3132362e3131322e302f32322d3232203d3e2034383437.roa
Signing time:             Mon 15 Jun 2026 06:52:23 +0000
ROA not before:           Mon 15 Jun 2026 06:47:23 +0000
ROA not after:            Mon 14 Jun 2027 06:52:23 +0000
asID:                     4847
IP address blocks:        45.126.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Jun 2026 09:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5b:81:07:e0:d3:f1:fe:6a:cd:9a:02:0b:af:7b:0a:1f:a0:c3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A
        Validity
            Not Before: Jun 15 06:47:23 2026 GMT
            Not After : Jun 14 06:52:23 2027 GMT
        Subject: CN=08D9FB20C33E837AB8585C5C58ACE7B7CDC5E416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:be:55:c4:7a:df:ba:43:10:ea:40:f6:fb:
                    45:7a:89:ea:a8:47:ca:9b:3c:c7:38:ff:30:e2:c0:
                    7f:d5:db:d8:f1:8d:0d:08:31:2b:11:51:c4:6a:80:
                    23:a9:c3:9e:97:db:e7:4a:3a:32:5a:2b:1b:a3:f1:
                    2d:bc:6a:b5:92:8a:c0:61:aa:8f:dc:c5:19:49:aa:
                    95:b6:59:08:e1:3a:20:82:f2:5f:18:c9:08:fa:01:
                    38:1d:1e:7c:c2:07:f9:bd:a1:05:22:06:28:fa:70:
                    89:6d:ed:95:cd:76:ba:74:bc:34:6c:2f:10:c8:d8:
                    e8:14:69:91:20:5e:d1:fd:7f:73:44:92:be:cf:55:
                    9c:1a:27:be:02:ef:62:a4:3c:95:17:45:a4:39:70:
                    0c:17:9c:95:c7:6f:5b:47:c9:85:32:52:0f:32:f2:
                    4c:76:78:15:1a:c9:6c:c5:07:e1:cd:75:10:39:ab:
                    d3:61:d3:83:43:6e:61:db:be:5c:b4:e8:fb:ab:5a:
                    6f:6d:2f:34:ec:14:de:93:3a:db:5c:5e:06:0a:be:
                    fc:9c:f3:65:ba:75:5c:df:9d:dc:dd:b6:8f:e5:21:
                    f5:3b:ad:e9:c6:c4:e8:18:95:d6:e3:b7:83:2a:10:
                    e8:68:66:c1:4e:db:23:9b:ac:81:db:e6:c3:12:fc:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D9:FB:20:C3:3E:83:7A:B8:58:5C:5C:58:AC:E7:B7:CD:C5:E4:16
            X509v3 Authority Key Identifier:
                keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/34352e3132362e3131322e302f32322d3232203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:b2:44:c0:ca:9f:5c:ef:c1:99:79:b5:01:c5:47:10:ea:b8:
         05:04:b7:7b:ac:2e:d7:84:3f:56:56:56:7f:2c:03:25:b5:d0:
         cd:02:cf:0e:c4:c6:76:33:9c:1b:b0:a3:a1:8a:71:c2:6b:e0:
         5e:96:90:10:72:29:82:e4:5b:f2:fe:1a:ca:9d:7d:00:e3:47:
         10:21:9f:5d:f1:14:d7:86:85:77:52:da:bb:f4:3b:e0:e1:a7:
         b0:b1:9f:50:e1:ab:bd:8f:cb:05:ac:b3:06:32:bd:e0:c5:7e:
         ec:9c:e0:46:32:03:5f:9f:34:1a:30:7f:8b:ed:78:fe:0c:04:
         44:84:8b:6a:e3:e1:d2:d4:28:9c:42:24:ee:69:14:4c:01:bd:
         f1:f8:b2:4d:c0:aa:b6:8b:87:f2:99:fe:7b:41:c7:e6:dc:c3:
         2b:38:40:50:b4:b3:5b:4a:02:af:96:b4:d1:3c:dc:1a:dd:cf:
         c1:a0:6b:35:cd:4b:92:59:83:9a:4c:8a:15:68:15:5f:1c:78:
         0d:3a:13:7f:4d:cd:9d:eb:32:0c:e2:f5:b9:9c:c2:d4:51:52:
         67:25:e4:9c:46:9e:7a:24:00:6c:c8:d3:f6:ca:82:ef:dc:af:
         4d:81:63:af:1d:67:d3:88:34:39:5c:83:3a:d0:e6:04:e8:92:
         c0:cc:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 18:15:28 2026 by rpki-client