Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/34352e3132332e38382e302f32322d3232203d3e2030.roa
File:                     34352e3132332e38382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          G8aowGv2jw/lgg/xPAw4ki4N7rDCUFHki1crQKuFo/4=
Subject key identifier:   A5:BE:96:4C:41:AE:86:19:1B:48:63:13:6C:2F:C5:A9:5E:13:46:5B
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       1628912F787C475BCEC81E2506F2C9B8FAA531D5
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/34352e3132332e38382e302f32322d3232203d3e2030.roa
Signing time:             Fri 05 Jun 2026 05:57:32 +0000
ROA not before:           Fri 05 Jun 2026 05:52:32 +0000
ROA not after:            Fri 04 Jun 2027 05:57:32 +0000
asID:                     0
IP address blocks:        45.123.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 20:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:28:91:2f:78:7c:47:5b:ce:c8:1e:25:06:f2:c9:b8:fa:a5:31:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: Jun  5 05:52:32 2026 GMT
            Not After : Jun  4 05:57:32 2027 GMT
        Subject: CN=A5BE964C41AE86191B4863136C2FC5A95E13465B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:41:6e:f8:bd:04:cc:e5:2e:06:0c:4f:c1:
                    4c:91:e9:82:b5:22:ff:c6:76:7a:8a:0e:a1:84:08:
                    b8:ef:bd:26:ff:b7:d9:fa:be:40:ab:59:f0:02:95:
                    b3:40:df:92:52:5a:17:2c:54:14:63:18:31:1a:8c:
                    44:f3:b5:4d:96:e9:dc:f4:80:cb:b2:40:53:a3:9d:
                    3d:fc:03:1d:24:18:95:32:bb:fd:f9:c1:14:4e:35:
                    e8:f8:a6:57:21:f3:ae:97:df:80:9c:76:3a:82:04:
                    e7:d1:29:2e:6b:6a:04:5b:59:48:b5:ee:d0:d8:f8:
                    7c:77:d8:e1:16:59:c5:dd:53:bb:aa:2f:9b:34:3a:
                    b0:79:9e:fb:e6:3c:80:6c:7a:83:0e:27:5d:19:40:
                    1e:4c:fa:f0:fe:8f:ca:c4:d0:c8:25:0d:96:f3:25:
                    62:f7:28:aa:5d:71:59:87:0f:05:9a:f9:c5:40:39:
                    06:49:5e:95:fe:39:5b:69:27:96:62:26:6a:2b:f7:
                    55:ee:b9:d2:32:87:30:b2:5a:7b:e6:a6:0a:93:8f:
                    74:d2:e9:0f:ed:5b:8c:e9:80:52:c7:15:3b:c8:56:
                    4a:c8:6d:7d:55:87:b3:f0:01:1e:ff:8c:70:22:ff:
                    07:72:ac:0c:d1:5e:ad:30:ff:e2:21:95:21:71:52:
                    16:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BE:96:4C:41:AE:86:19:1B:48:63:13:6C:2F:C5:A9:5E:13:46:5B
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/34352e3132332e38382e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:5c:51:e3:df:28:3b:b7:91:9a:d9:ac:3a:4c:e7:af:50:
         40:f7:66:eb:dd:df:08:28:0b:71:c0:35:53:49:a1:8a:99:8f:
         1b:32:66:8b:f2:64:37:e9:11:0c:fb:d6:7d:ab:66:21:cd:39:
         60:10:30:db:6f:15:32:66:1f:2b:e6:3d:8d:b4:96:2a:04:7a:
         be:a9:41:6d:4a:67:ea:d8:5d:6f:92:d7:6b:88:9c:41:97:41:
         94:05:da:8c:b5:12:b5:b0:9e:6f:aa:4f:38:6e:aa:72:55:3e:
         13:83:9d:ca:43:47:91:24:dc:70:c2:72:15:59:60:2f:72:1a:
         af:a3:25:0b:8f:ec:0c:95:25:9f:54:ac:b7:af:2e:a0:b6:78:
         cd:f1:82:d4:aa:0d:ee:d2:2d:67:ef:17:8a:cd:97:3f:f1:09:
         04:3e:11:1c:fd:e0:c0:a6:b4:04:a7:89:74:ad:f4:bb:cc:2b:
         c2:ec:06:92:86:cb:57:22:bb:cc:99:e4:40:05:4e:8a:77:81:
         9e:9f:b6:11:19:51:f3:68:ec:73:00:f9:22:b2:4c:5a:8e:d5:
         36:f0:04:42:c1:98:bb:2a:41:b0:97:43:01:6e:01:be:10:5e:
         6a:06:d1:ad:a8:c5:f9:6c:c8:65:30:b5:ee:e3:7c:b9:ec:9a:
         74:1b:85:29
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUFiiRL3h8R1vOyB4lBvLJuPqlMdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA2MDUwNTUyMzJaFw0yNzA2MDQwNTU3MzJaMDMxMTAvBgNV
BAMTKEE1QkU5NjRDNDFBRTg2MTkxQjQ4NjMxMzZDMkZDNUE5NUUxMzQ2NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCkkFu+L0EzOUuBgxPwUyR6YK1
Iv/GdnqKDqGECLjvvSb/t9n6vkCrWfAClbNA35JSWhcsVBRjGDEajETztU2W6dz0
gMuyQFOjnT38Ax0kGJUyu/35wRRONej4plch866X34CcdjqCBOfRKS5ragRbWUi1
7tDY+Hx32OEWWcXdU7uqL5s0OrB5nvvmPIBseoMOJ10ZQB5M+vD+j8rE0MglDZbz
JWL3KKpdcVmHDwWa+cVAOQZJXpX+OVtpJ5ZiJmor91XuudIyhzCyWnvmpgqTj3TS
6Q/tW4zpgFLHFTvIVkrIbX1Vh7PwAR7/jHAi/wdyrAzRXq0w/+IhlSFxUhafAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUpb6WTEGuhhkbSGMTbC/FqV4TRlswHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzQzNTJlMzEzMjMz
MmUzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIte1gw
DQYJKoZIhvcNAQELBQADggEBAJCiXFHj3yg7t5Ga2aw6TOevUED3Zuvd3wgoC3HA
NVNJoYqZjxsyZovyZDfpEQz71n2rZiHNOWAQMNtvFTJmHyvmPY20lioEer6pQW1K
Z+rYXW+S12uInEGXQZQF2oy1ErWwnm+qTzhuqnJVPhODncpDR5Ek3HDCchVZYC9y
Gq+jJQuP7AyVJZ9UrLevLqC2eM3xgtSqDe7SLWfvF4rNlz/xCQQ+ERz94MCmtASn
iXSt9LvMK8LsBpKGy1ciu8yZ5EAFTop3gZ6fthEZUfNo7HMA+SKyTFqO1TbwBELB
mLsqQbCXQwFuAb4QXmoG0a2oxflsyGUwte7jfLnsmnQbhSk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:29:42 2026 by rpki-client