Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/34352e3132342e37362e302f32322d3232203d3e203535393839.roa
File:                     34352e3132342e37362e302f32322d3232203d3e203535393839.roa (raw, json)
Hash identifier:          zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=
Subject key identifier:   A0:70:A8:44:E4:13:B0:D0:45:69:C2:A4:D3:BD:4E:A1:F0:B3:84:41
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       3625FAA7A9C0A4E1597910459E105848F30B2C7C
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/34352e3132342e37362e302f32322d3232203d3e203535393839.roa
Signing time:             Wed 15 Apr 2026 07:19:36 +0000
ROA not before:           Wed 15 Apr 2026 07:14:36 +0000
ROA not after:            Wed 14 Apr 2027 07:19:36 +0000
asID:                     55989
IP address blocks:        45.124.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 01:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:25:fa:a7:a9:c0:a4:e1:59:79:10:45:9e:10:58:48:f3:0b:2c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Apr 15 07:14:36 2026 GMT
            Not After : Apr 14 07:19:36 2027 GMT
        Subject: CN=A070A844E413B0D04569C2A4D3BD4EA1F0B38441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a6:eb:1f:f3:49:46:fb:7f:b3:ef:33:68:76:
                    84:0b:e8:55:c6:b6:e2:4a:e9:04:83:56:ff:19:a1:
                    cd:91:af:e3:7d:af:0c:bd:05:79:72:bf:d2:aa:28:
                    7f:87:bc:3c:14:4e:39:3e:09:75:93:e7:4a:8c:84:
                    33:12:e2:e2:a9:bb:a4:1a:84:86:b8:76:f3:4f:6b:
                    3d:6f:c7:7c:d7:a5:c8:46:ff:d3:50:c7:f8:d1:7f:
                    eb:82:f8:40:2b:45:d1:b1:fd:73:75:fe:ca:bd:60:
                    61:97:77:0a:69:74:e8:11:66:76:92:25:47:f9:6a:
                    16:0d:97:c1:20:dc:f3:ca:c0:2a:10:c2:68:eb:9a:
                    f6:0b:9d:6e:59:62:8c:b0:27:a8:3f:75:f6:3b:ff:
                    a1:70:60:14:14:95:a7:17:d6:f1:ea:88:92:2c:4a:
                    70:67:a7:31:a8:d3:2a:15:24:51:be:16:cf:de:ce:
                    b0:a2:34:14:bd:96:48:81:af:6d:c4:6c:30:63:f4:
                    d9:a1:49:f7:1d:3a:cf:24:a5:5a:4d:6c:8c:40:04:
                    61:2d:2f:62:fe:0b:6d:90:26:bf:f1:c8:b0:48:d9:
                    08:e8:ac:eb:9d:e8:e1:f8:3e:c7:62:cb:2d:78:fb:
                    3f:0b:b2:ba:84:62:d3:c3:4d:4e:93:1e:d8:e9:71:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:70:A8:44:E4:13:B0:D0:45:69:C2:A4:D3:BD:4E:A1:F0:B3:84:41
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/34352e3132342e37362e302f32322d3232203d3e203535393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:a8:17:6c:e0:8f:12:47:a0:fd:82:75:9b:fd:64:bb:74:c8:
         52:c2:69:d7:f7:a4:57:29:7f:e8:98:dd:64:1f:d4:62:2d:18:
         b0:e5:74:25:3c:6e:5b:58:22:73:e2:d6:2d:92:2c:20:7d:14:
         d3:d3:69:7b:7e:66:87:f0:67:5e:50:64:20:0b:e7:e8:69:91:
         df:ce:af:1c:0c:fd:03:d4:f0:01:5d:b8:d9:f2:04:d9:ca:0f:
         f1:37:82:af:23:9a:d6:ee:b1:20:4c:ca:16:8d:42:cc:c5:7c:
         34:23:fc:41:ba:cf:1f:cd:fc:1f:5f:55:0f:52:17:af:66:d2:
         0e:fc:23:8b:c5:f0:42:6e:81:47:8b:37:cc:72:87:5b:95:81:
         c6:6d:57:84:af:56:25:41:1d:52:c2:f5:e9:e2:e0:d1:55:8a:
         fa:8c:7d:49:1f:99:21:ec:d0:9c:20:95:ec:3e:e1:98:04:21:
         e8:30:84:4f:df:c6:a0:9a:97:09:0d:45:44:09:15:ef:e8:fc:
         04:a0:98:bf:3f:bb:84:b7:d0:84:73:83:99:53:bb:46:2d:37:
         0d:39:73:88:55:24:62:ed:2e:de:b3:d4:87:53:cf:46:b2:44:
         c8:2b:6d:b8:0c:74:9e:63:f4:16:6e:a7:3e:6d:ab:86:0f:a8:
         be:6d:03:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:52:45 2026 by rpki-client