Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3230382e302f32322d3234203d3e203337393633.roa
File:                     34352e3131322e3230382e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier:          F831a+KKy9dtfnyP0ZQtRhGL7dpZz0ZWB2jMOP9pGjQ=
Subject key identifier:   93:26:4C:26:06:47:A9:12:02:F8:70:3E:24:6A:82:71:50:B7:3F:A2
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       65AE49BCBD284770B1C5AEE0C81EBD2BA91432
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3230382e302f32322d3234203d3e203337393633.roa
Signing time:             Fri 27 Mar 2026 02:05:10 +0000
ROA not before:           Fri 27 Mar 2026 02:00:10 +0000
ROA not after:            Fri 26 Mar 2027 02:05:10 +0000
asID:                     37963
IP address blocks:        45.112.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 16:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ae:49:bc:bd:28:47:70:b1:c5:ae:e0:c8:1e:bd:2b:a9:14:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: Mar 27 02:00:10 2026 GMT
            Not After : Mar 26 02:05:10 2027 GMT
        Subject: CN=93264C260647A91202F8703E246A827150B73FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:be:e6:62:0a:6a:a6:bb:45:50:ea:97:40:
                    db:7e:dd:1a:7b:3d:e3:30:3d:e0:de:55:fc:27:40:
                    f5:9b:16:a2:b6:19:e7:3f:54:28:a5:60:2c:f2:24:
                    37:4b:88:d5:56:e6:c9:40:b8:4b:2b:f1:90:38:56:
                    41:44:cc:60:1d:1a:58:84:71:7e:1a:e6:ce:6d:ef:
                    be:18:a4:8b:a8:82:12:b0:07:40:2e:50:8f:8e:ac:
                    c5:5e:b8:af:10:ae:d4:8d:1f:84:86:9e:fd:0c:27:
                    e3:29:21:64:8f:ff:20:71:1e:61:e8:20:22:6a:d1:
                    78:f6:13:96:7c:8f:af:10:74:48:ef:42:db:2e:fc:
                    af:cc:ac:9e:0c:0e:6b:e0:23:86:54:93:d1:98:c0:
                    e6:df:46:6b:45:36:a2:0a:23:23:ea:d8:7a:51:58:
                    5a:6a:02:ba:d4:18:e2:a6:b4:cf:f7:24:68:4d:4a:
                    70:b7:f0:39:99:0c:31:84:48:15:0e:a1:12:de:e0:
                    71:d0:f8:a4:b3:92:f6:8e:81:9d:f5:73:ad:02:f7:
                    83:e0:b6:44:6e:e3:29:e5:61:b2:20:31:33:cb:6c:
                    60:3d:5a:de:83:02:c6:d2:db:7e:70:a4:34:9f:24:
                    05:44:65:3d:cd:53:38:fa:b7:d9:ab:99:27:95:52:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:26:4C:26:06:47:A9:12:02:F8:70:3E:24:6A:82:71:50:B7:3F:A2
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3230382e302f32322d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:ca:5f:92:46:57:9a:0c:75:83:ce:03:d5:bf:8d:e8:ca:62:
         37:1f:93:1c:42:3b:97:b6:6e:1c:e8:bd:17:90:91:06:b6:da:
         01:7a:0f:55:27:4a:03:de:ad:aa:37:6c:f5:20:a2:52:4d:29:
         ed:c6:45:85:bc:6a:e6:fc:f2:e3:e8:6e:04:e9:8b:01:d6:01:
         e8:17:0c:d7:79:41:f1:52:33:24:4c:75:aa:60:12:46:e1:11:
         81:43:76:31:12:7e:37:be:c2:f7:8e:c6:b7:04:7c:8e:ae:db:
         ca:37:3a:b6:0d:73:bb:04:bb:5b:61:98:ae:55:8f:8e:6f:88:
         3f:e4:b1:45:34:1a:62:0e:2e:c1:90:ee:7e:a5:1d:c8:f5:b0:
         17:12:24:5e:5b:f2:d1:02:24:5b:98:4e:44:8c:80:7b:28:61:
         4b:c2:67:4e:5f:87:f7:e0:a4:62:32:ec:c7:dd:fd:2b:c9:91:
         02:5a:5c:7d:3e:5f:77:13:c2:cb:8e:0b:6f:9f:da:97:b9:57:
         3e:33:41:1a:b1:3d:b5:cb:ce:11:a3:3a:85:58:a4:ff:c1:93:
         2a:8a:81:5f:10:f3:e4:a5:16:06:cd:32:12:c4:1a:60:12:c0:
         ab:7a:d1:5c:a1:0b:b4:8c:01:53:1e:81:e7:b3:08:7e:a0:b1:
         19:8d:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:47 2026 by rpki-client