Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e38352e302f32342d3234203d3e20313337373938.roa
File:                     3231302e37362e38352e302f32342d3234203d3e20313337373938.roa (raw, json)
Hash identifier:          Ll9w0jJPuJt/6zq7fo1YOt+A5yMY4dyRvdKrJFM7hBs=
Subject key identifier:   5C:B6:16:37:E0:EA:F1:EB:FF:20:6C:E8:1A:F4:02:A8:63:49:A6:08
Certificate issuer:       /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial:       19D45AB49927AEA220CE08848CF31F15AC64E92C
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e38352e302f32342d3234203d3e20313337373938.roa
Signing time:             Thu 16 Apr 2026 08:44:48 +0000
ROA not before:           Thu 16 Apr 2026 08:39:48 +0000
ROA not after:            Thu 15 Apr 2027 08:44:48 +0000
asID:                     137798
IP address blocks:        210.76.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d4:5a:b4:99:27:ae:a2:20:ce:08:84:8c:f3:1f:15:ac:64:e9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
        Validity
            Not Before: Apr 16 08:39:48 2026 GMT
            Not After : Apr 15 08:44:48 2027 GMT
        Subject: CN=5CB61637E0EAF1EBFF206CE81AF402A86349A608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:52:fc:9d:1c:dd:a5:db:0b:49:af:c4:85:
                    1d:9f:b5:8c:cd:1d:54:55:34:9c:6b:5d:de:85:4b:
                    8f:5f:39:3f:be:24:f7:77:73:eb:3f:7e:e3:bb:6f:
                    21:34:46:67:c6:45:9d:2c:4e:10:c7:3d:3d:9a:ec:
                    61:bb:10:16:ca:12:f2:f1:b4:83:51:55:45:69:90:
                    92:67:e2:32:eb:52:cc:45:95:7a:88:ea:67:e9:75:
                    2a:98:09:03:1a:42:9e:74:97:d1:ef:1b:44:9d:ca:
                    b3:2a:4f:7a:ff:86:33:3c:3c:ee:66:1c:3a:42:68:
                    e5:42:c5:13:21:b0:52:49:5e:4d:05:5a:34:b9:bd:
                    58:8c:3a:eb:b9:df:49:d8:43:7e:d2:04:70:cd:9d:
                    ba:82:35:72:1d:01:a7:28:65:a4:56:b0:2e:4b:38:
                    e8:2f:7f:8d:b2:97:fd:65:a5:3c:c6:ff:1d:f4:28:
                    9a:56:12:5f:9f:15:50:e1:b4:5e:4b:fa:ef:af:1d:
                    15:b2:a6:d2:b8:e5:dd:04:ce:42:0a:58:1f:e5:85:
                    62:71:9d:18:70:47:ac:8d:f5:95:e4:05:1c:29:21:
                    7e:20:2e:52:f3:96:e6:f5:91:c9:e0:fe:f5:c9:51:
                    53:83:eb:8e:4a:2d:0d:34:dd:61:d9:15:65:df:8e:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B6:16:37:E0:EA:F1:EB:FF:20:6C:E8:1A:F4:02:A8:63:49:A6:08
            X509v3 Authority Key Identifier:
                keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e38352e302f32342d3234203d3e20313337373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:02:be:6e:45:e0:4c:d4:f3:fa:04:a4:ac:14:bb:ba:a5:0d:
         14:22:7a:8d:62:6b:1a:16:f2:06:3d:5a:4a:fe:2c:b8:0d:b7:
         9f:d2:f8:84:7a:c1:4d:4c:5d:21:0a:01:85:1c:5d:99:c1:d9:
         bf:5d:82:d0:b0:2b:39:e2:42:7c:b4:a6:f8:a4:4a:f9:56:c9:
         41:d8:0b:21:1f:f0:b4:6f:b9:c5:f0:e4:87:14:70:38:4a:94:
         39:e1:7a:e3:60:b5:6d:69:35:08:f2:f7:c2:4a:33:f8:ad:0e:
         db:2c:fa:5b:76:9d:0a:ae:0a:b6:73:78:2e:57:b6:ac:d1:66:
         df:17:9d:e5:06:2e:6b:3e:6a:90:59:07:9f:c3:b5:c4:b5:0c:
         32:3d:6f:33:1f:21:21:49:7e:7e:72:1f:0e:c3:bb:05:96:fb:
         45:5c:4a:3d:12:02:70:f8:40:46:60:6e:d4:b1:e4:92:79:57:
         96:2a:81:53:81:8b:ba:04:8a:e0:e2:bd:f7:f4:0b:2f:16:d6:
         56:ba:e2:fc:ca:f7:a6:b4:79:28:fa:25:b6:b1:1d:52:2d:0c:
         2c:82:7f:fc:0b:11:4c:1a:48:37:3c:ae:8d:fa:ee:17:21:ed:
         5a:e1:17:1b:0d:42:ec:22:1f:d7:27:4b:52:2d:87:db:d2:3b:
         f1:02:b2:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:03 2026 by rpki-client