Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3231362e302f32322d3234203d3e203337393633.roa
File:                     34352e3131322e3231362e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier:          69IQrUPR3CxMCzv+VhlwIaldkkWWwAXv5x3ylXbpgh8=
Subject key identifier:   4E:00:3C:14:2A:3C:B6:B5:5E:69:56:1E:71:C2:81:07:C2:AC:97:C0
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       126F9F4BFD47919F63907C20343D5E417FDD74B1
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3231362e302f32322d3234203d3e203337393633.roa
Signing time:             Fri 27 Mar 2026 02:25:05 +0000
ROA not before:           Fri 27 Mar 2026 02:20:05 +0000
ROA not after:            Fri 26 Mar 2027 02:25:05 +0000
asID:                     37963
IP address blocks:        45.112.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 16:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6f:9f:4b:fd:47:91:9f:63:90:7c:20:34:3d:5e:41:7f:dd:74:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: Mar 27 02:20:05 2026 GMT
            Not After : Mar 26 02:25:05 2027 GMT
        Subject: CN=4E003C142A3CB6B55E69561E71C28107C2AC97C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2b:8f:94:4f:63:24:8f:5a:d1:11:a4:9a:7e:
                    3d:92:7f:99:01:4d:63:67:c3:38:ae:13:e0:ca:6c:
                    5e:32:4c:f7:41:2d:cd:47:7a:a5:2e:d6:83:be:ec:
                    03:d1:16:6a:d6:e2:b8:d0:62:c1:55:69:46:f0:d6:
                    36:e8:a5:45:73:70:4d:5d:25:49:fd:22:e4:c3:09:
                    0b:a0:b3:5d:5e:de:61:df:68:be:95:9c:55:6b:b2:
                    03:ea:67:64:5f:ed:dd:87:97:f8:ba:1a:f7:81:01:
                    27:05:23:ec:66:dd:da:5a:85:66:4f:cc:65:0c:7b:
                    60:39:a9:76:8c:7b:14:25:7e:3c:94:c6:70:28:9c:
                    d6:97:3d:71:9b:c9:57:8b:d0:9a:e6:4b:ba:56:2c:
                    8a:24:a4:2c:d0:97:ac:53:3e:1f:1d:ab:2f:08:f0:
                    63:df:51:d1:38:58:f5:ee:ed:2a:b8:65:4c:8d:77:
                    17:fd:bf:f9:29:75:42:63:64:b3:42:2f:0e:fe:b6:
                    ef:a6:92:b4:df:6f:6b:42:9d:99:7d:b2:cf:34:ce:
                    f2:d0:3c:a7:f2:0a:18:13:52:cd:95:3e:4a:3d:4a:
                    e9:0c:24:c1:1e:fb:8a:1e:59:47:1b:52:fb:cf:f7:
                    6b:0c:54:58:94:8b:6c:20:e8:fd:c4:d3:f5:1c:8a:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:00:3C:14:2A:3C:B6:B5:5E:69:56:1E:71:C2:81:07:C2:AC:97:C0
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34352e3131322e3231362e302f32322d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:a8:0e:4d:b8:95:63:ec:4a:63:72:0b:74:4c:cd:4a:6a:bd:
         55:6d:92:61:e3:84:dc:61:06:f0:e5:9e:b1:66:89:12:c5:ea:
         76:f0:41:43:c9:7b:93:88:94:c2:3f:e5:23:f6:cc:6f:64:32:
         ce:6d:e7:ae:76:49:c2:35:29:ca:57:e8:14:88:ec:14:10:5b:
         c3:13:a3:67:67:1f:30:e4:5b:d2:8e:9f:72:4b:a6:d5:a7:98:
         38:6d:e3:a8:43:ab:dc:6a:a5:5f:15:19:3d:9a:17:3d:65:d3:
         39:cb:04:53:6a:b1:e1:25:b8:41:db:fb:f7:25:c9:ef:bc:99:
         7a:79:65:c4:cc:e4:c7:42:2b:67:a8:5c:18:18:63:26:79:c6:
         cc:74:9a:9d:e8:31:01:07:86:a6:d8:ed:0a:07:56:0c:4d:b4:
         0a:60:ee:7a:2c:3a:dd:f8:35:69:26:21:82:b3:20:22:d9:fc:
         ec:27:4b:29:96:12:91:32:16:1b:cd:61:1e:07:f7:66:3e:c7:
         91:42:97:0d:7a:ca:85:68:ec:b1:65:93:11:7b:ce:72:e8:78:
         ca:61:a0:e4:d2:c8:a8:50:7f:e7:a6:87:c6:fc:7b:f7:8f:84:
         2f:1f:7c:0a:3a:b4:0d:1a:b5:28:3a:67:61:ec:06:f1:2f:c7:
         ba:4c:a8:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:16 2026 by rpki-client