Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f32342d3234203d3e20313337373938.roa
File:                     3231302e37362e36342e302f32342d3234203d3e20313337373938.roa (raw, json)
Hash identifier:          AX22Jp2P1W6dvxAN+HFb9MxVtpj5CSgs/k5M5XxlHOU=
Subject key identifier:   CD:90:04:15:13:1F:16:EE:3A:F4:AE:82:B4:AF:41:57:E8:97:5D:75
Certificate issuer:       /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial:       371CFD4EF6A6E35EC6A0757FB4C94602492D8F7B
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f32342d3234203d3e20313337373938.roa
Signing time:             Thu 16 Apr 2026 08:44:48 +0000
ROA not before:           Thu 16 Apr 2026 08:39:48 +0000
ROA not after:            Thu 15 Apr 2027 08:44:48 +0000
asID:                     137798
IP address blocks:        210.76.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1c:fd:4e:f6:a6:e3:5e:c6:a0:75:7f:b4:c9:46:02:49:2d:8f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
        Validity
            Not Before: Apr 16 08:39:48 2026 GMT
            Not After : Apr 15 08:44:48 2027 GMT
        Subject: CN=CD900415131F16EE3AF4AE82B4AF4157E8975D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f3:19:1a:61:0c:4e:44:dd:a2:7d:26:a2:ae:
                    d1:9e:08:76:00:7a:8d:85:56:2f:28:6f:7c:b1:ef:
                    a1:f8:3f:4c:0f:a3:bd:b8:b8:22:85:3a:0b:9f:b3:
                    88:08:08:91:0a:cd:40:81:99:40:1e:3e:a5:de:1a:
                    48:15:f1:b6:8d:14:1d:97:5e:33:3f:34:c1:9c:77:
                    1e:a8:76:81:0d:63:d2:88:83:10:37:19:14:f9:58:
                    ed:15:a3:60:fd:9b:5b:f1:f6:84:d6:00:f7:b6:68:
                    73:f7:f1:06:64:49:b1:38:ac:93:eb:3b:a0:af:84:
                    f5:b2:59:e6:a7:69:99:17:e8:d2:e6:e9:77:e5:b7:
                    ae:e1:49:39:58:ac:95:fb:4b:14:27:4b:85:cf:47:
                    e4:3d:38:03:29:6a:04:44:38:33:bc:38:de:ab:1d:
                    f9:f2:3f:13:df:f3:64:ec:64:3d:3d:fb:2c:3c:eb:
                    65:97:73:2a:a3:92:53:37:f1:e6:95:0e:88:d9:54:
                    be:84:a4:43:4b:b3:fc:f1:c3:43:a8:56:9e:e4:25:
                    dd:54:33:58:2a:a4:39:71:10:7f:dd:87:14:b0:5d:
                    6a:16:b5:f8:97:9c:df:42:06:41:6b:bb:d2:d9:af:
                    8d:82:0f:06:ac:14:bc:c3:b4:93:85:2d:58:08:74:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:90:04:15:13:1F:16:EE:3A:F4:AE:82:B4:AF:41:57:E8:97:5D:75
            X509v3 Authority Key Identifier:
                keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f32342d3234203d3e20313337373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:00:38:45:56:f9:b3:86:0f:28:93:59:8c:62:70:82:54:
         08:a3:65:f1:5e:fe:50:f9:7b:d9:05:11:50:d9:77:27:a1:f2:
         7a:a5:80:d4:db:4c:09:4d:34:1d:d9:34:8a:0f:2a:a4:65:14:
         45:79:f9:d5:2b:38:84:11:b1:54:16:68:96:be:a1:31:77:fc:
         7f:f4:97:af:35:df:7d:48:ca:3a:f6:cf:ab:22:85:b3:6c:2b:
         42:c0:ce:89:ad:ed:38:fd:15:84:85:1b:60:e3:af:9e:b9:23:
         54:51:83:6b:d6:b4:78:c3:c5:19:22:ee:40:ca:77:49:21:06:
         85:2a:a1:6d:6f:5a:da:3c:87:8a:98:8f:96:e4:85:7e:07:22:
         2c:eb:b0:86:ed:ab:f9:90:1b:d7:46:c4:9e:13:ee:24:1e:3a:
         92:2b:fd:d5:1d:c2:fa:ed:07:be:06:c4:fc:6c:8a:72:ef:bf:
         85:be:06:be:79:b4:0d:90:7b:00:a2:79:45:4d:dc:2c:bc:95:
         de:e8:56:36:07:d0:39:dc:fc:87:44:54:ad:78:d3:80:f3:8b:
         dc:32:76:4c:d9:5b:30:bf:d8:c7:f0:4e:8e:08:64:d3:62:23:
         d1:a9:ba:b1:93:cc:26:bc:63:6f:2e:ac:d1:45:ee:2b:60:96:
         d1:ae:76:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:29 2026 by rpki-client