Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3231322e302f32322d3234203d3e203337393633.roa
File:                     34352e3131322e3231322e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier:          +HN/NfBruCrgd3/LLisaUcAGAPcs8E/rP9uQc/v+RME=
Subject key identifier:   C6:96:72:60:8C:C0:77:6D:40:50:63:95:E3:C0:2E:80:4B:97:E7:2E
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       3F00377FEACDEB48A2C97D268DA9F5360EACAB2A
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3231322e302f32322d3234203d3e203337393633.roa
Signing time:             Fri 27 Mar 2026 02:25:05 +0000
ROA not before:           Fri 27 Mar 2026 02:20:05 +0000
ROA not after:            Fri 26 Mar 2027 02:25:05 +0000
asID:                     37963
IP address blocks:        45.112.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 16:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:00:37:7f:ea:cd:eb:48:a2:c9:7d:26:8d:a9:f5:36:0e:ac:ab:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: Mar 27 02:20:05 2026 GMT
            Not After : Mar 26 02:25:05 2027 GMT
        Subject: CN=C69672608CC0776D40506395E3C02E804B97E72E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:6f:38:49:3c:cb:9e:62:e5:88:72:c6:3c:
                    52:c9:00:f4:8e:03:df:a3:af:79:e4:f4:9e:e0:e4:
                    f8:91:94:8b:bc:ac:cc:2d:e7:41:4f:ba:a7:2e:2d:
                    40:ca:20:73:06:52:52:17:f6:2d:78:d1:b4:29:29:
                    ed:47:c8:ad:e3:5c:e4:7d:3c:eb:af:ec:86:0f:d8:
                    6e:f2:d0:f0:27:bc:dd:e0:13:68:46:9b:72:1b:fc:
                    99:f1:c9:ef:76:2a:3f:df:bb:c0:5a:08:c8:f8:53:
                    ad:09:ef:7b:d9:61:b5:7e:18:cc:08:6c:ea:86:5a:
                    98:de:ba:b5:c3:a7:97:86:d8:72:72:60:f4:a1:19:
                    ac:28:9f:c4:a7:50:38:5d:ca:a7:97:38:b8:c7:f8:
                    e6:a8:01:63:14:e4:3c:1d:b0:2b:7a:e6:5f:66:bb:
                    b3:c2:19:84:e8:76:e3:68:ae:52:ab:11:16:dd:e8:
                    3b:7d:6e:69:a2:21:f1:d6:83:59:db:fb:eb:2f:85:
                    6b:fc:cc:19:0f:a8:7b:a3:03:62:7f:a3:64:58:6f:
                    2f:15:ea:e0:25:19:49:b4:dc:a5:35:8d:35:6c:1e:
                    fa:a4:76:13:f4:36:7f:49:78:2c:50:2c:8a:c3:a6:
                    ce:7e:9b:e0:7d:cc:c9:f5:af:ac:32:1e:f7:9c:dc:
                    96:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:96:72:60:8C:C0:77:6D:40:50:63:95:E3:C0:2E:80:4B:97:E7:2E
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3231322e302f32322d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:d2:b6:9e:4f:62:34:07:a9:1a:bf:11:c9:8a:0c:7a:19:a8:
         f4:cb:72:fd:dc:98:8c:2c:4a:17:04:1d:33:0f:de:db:6b:c7:
         1e:cc:a3:f8:6c:23:f8:e2:26:82:93:fa:cc:75:bd:62:5c:dc:
         bd:a7:bf:a9:68:34:0d:0e:91:c6:3c:b0:3a:80:6e:09:a9:6a:
         1f:a7:24:30:16:12:c4:f8:b3:a0:21:b1:0c:1e:7f:8b:a8:9f:
         17:2b:b0:25:56:73:01:d1:69:75:80:f3:ff:90:3a:a1:61:f1:
         25:52:78:78:77:cd:14:80:14:6a:41:e2:96:c2:1f:af:77:0d:
         68:dc:0a:7f:f5:96:c6:35:b9:2c:98:7d:ee:59:16:fd:dd:93:
         30:99:dd:76:90:cb:bb:c7:b7:81:7e:ad:37:2f:c7:55:fe:df:
         4b:8f:94:2b:42:9e:c4:00:25:c4:25:1b:77:43:c5:85:d7:80:
         0d:ac:25:09:0b:52:ff:61:dd:c0:5b:d6:76:58:97:10:ae:0f:
         4f:72:84:4d:1a:22:ee:cd:e8:70:bb:8a:2a:d2:92:ba:2c:34:
         91:96:b8:7d:34:16:3a:be:36:35:d3:1a:21:9e:71:5d:b3:59:
         78:cf:1d:a3:63:1f:c4:6a:eb:97:50:8b:4c:62:89:9f:4b:72:
         ec:d5:76:55
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPwA3f+rN60iiyX0mjan1Ng6sqyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFD
MENGMTU3RjAeFw0yNjAzMjcwMjIwMDVaFw0yNzAzMjYwMjI1MDVaMDMxMTAvBgNV
BAMTKEM2OTY3MjYwOENDMDc3NkQ0MDUwNjM5NUUzQzAyRTgwNEI5N0U3MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXpm84STzLnmLliHLGPFLJAPSO
A9+jr3nk9J7g5PiRlIu8rMwt50FPuqcuLUDKIHMGUlIX9i140bQpKe1HyK3jXOR9
POuv7IYP2G7y0PAnvN3gE2hGm3Ib/Jnxye92Kj/fu8BaCMj4U60J73vZYbV+GMwI
bOqGWpjeurXDp5eG2HJyYPShGawon8SnUDhdyqeXOLjH+OaoAWMU5DwdsCt65l9m
u7PCGYToduNorlKrERbd6Dt9bmmiIfHWg1nb++svhWv8zBkPqHujA2J/o2RYby8V
6uAlGUm03KU1jTVsHvqkdhP0Nn9JeCxQLIrDps5+m+B9zMn1r6wyHvec3JZxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUxpZyYIzAd21AUGOV48AugEuX5y4wHwYDVR0j
BBgwFoAUBW9/ngNYfd/sagSeoPIPocDPFX8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODMzNzE1NS8wLzA1NkY3RjlFMDM1ODdEREZFQzZBMDQ5RUEwRjIw
RkExQzBDRjE1N0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDU2RjdGOUUwMzU4N0RERkVDNkEwNDlFQTBGMjBGQTFDMENGMTU3Ri5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODMzNzE1NS8wLzM0MzUyZTMxMzEz
MjJlMzIzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAi1w1DANBgkqhkiG9w0BAQsFAAOCAQEAJdK2nk9iNAepGr8RyYoMehmo
9Mty/dyYjCxKFwQdMw/e22vHHsyj+Gwj+OImgpP6zHW9Ylzcvae/qWg0DQ6Rxjyw
OoBuCalqH6ckMBYSxPizoCGxDB5/i6ifFyuwJVZzAdFpdYDz/5A6oWHxJVJ4eHfN
FIAUakHilsIfr3cNaNwKf/WWxjW5LJh97lkW/d2TMJnddpDLu8e3gX6tNy/HVf7f
S4+UK0KexAAlxCUbd0PFhdeADawlCQtS/2HdwFvWdliXEK4PT3KETRoi7s3ocLuK
KtKSuiw0kZa4fTQWOr42NdMaIZ5xXbNZeM8do2MfxGrrl1CLTGKJn0ty7NV2VQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:39 2026 by rpki-client