Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/34352e3132342e37382e302f32342d3234203d3e203535393931.roa
File:                     34352e3132342e37382e302f32342d3234203d3e203535393931.roa (raw, json)
Hash identifier:          k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=
Subject key identifier:   39:67:47:CF:1B:4A:5B:30:05:54:74:E6:57:72:F9:34:22:3E:D5:C0
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       7343516900978681773223BB7672AADB648F44E6
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/34352e3132342e37382e302f32342d3234203d3e203535393931.roa
Signing time:             Wed 15 Apr 2026 07:19:36 +0000
ROA not before:           Wed 15 Apr 2026 07:14:36 +0000
ROA not after:            Wed 14 Apr 2027 07:19:36 +0000
asID:                     55991
IP address blocks:        45.124.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 01:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:43:51:69:00:97:86:81:77:32:23:bb:76:72:aa:db:64:8f:44:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Apr 15 07:14:36 2026 GMT
            Not After : Apr 14 07:19:36 2027 GMT
        Subject: CN=396747CF1B4A5B30055474E65772F934223ED5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:2f:19:d8:b2:38:db:e3:6f:3b:45:55:cd:
                    79:9c:4d:81:1f:49:f9:33:3b:fe:e6:69:16:90:f5:
                    9c:64:54:8a:31:8d:37:04:e8:9b:27:d5:0b:a0:c7:
                    0a:26:da:b5:18:c0:48:bc:73:d4:28:39:d5:6a:37:
                    76:f4:6c:07:fe:ae:2f:b6:04:af:46:75:cd:bd:f2:
                    c5:1a:de:16:1b:42:47:a9:c1:65:27:ce:b7:c3:79:
                    33:cd:89:e8:39:7b:40:93:da:91:ac:18:67:5d:6f:
                    63:0d:d2:db:74:c7:31:7d:a9:00:50:6a:00:89:63:
                    43:01:dd:a8:dc:e9:11:5c:c8:84:b5:7c:9a:99:fc:
                    74:48:ea:aa:22:9a:c7:4e:99:14:cc:62:7a:d0:cb:
                    28:90:81:b6:41:9a:2f:28:3d:4a:6c:5d:8e:11:3f:
                    40:14:a7:6f:1b:b6:0e:ac:d8:77:97:03:cf:33:82:
                    58:46:0d:0c:b1:d2:78:5a:ef:65:ef:05:26:06:ce:
                    f1:fc:a9:0c:27:f7:42:ef:25:f3:8c:23:76:9b:15:
                    17:73:43:18:41:74:42:7a:c6:c2:b7:6e:b8:22:ea:
                    ca:93:2c:8e:6f:a5:52:f6:ca:f4:75:f4:69:81:79:
                    23:ad:c9:5a:34:1b:e2:cc:b6:93:fa:5b:72:27:29:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:67:47:CF:1B:4A:5B:30:05:54:74:E6:57:72:F9:34:22:3E:D5:C0
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/34352e3132342e37382e302f32342d3234203d3e203535393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:73:56:2f:dc:de:1a:b4:af:a7:5c:c8:ee:38:d0:66:c1:b6:
         a6:c7:eb:07:4b:ef:c8:66:94:d8:85:b4:49:ed:ea:df:2e:ba:
         a0:7e:16:c0:5b:cd:32:53:b0:e7:4c:fa:c8:0c:9a:41:da:97:
         07:ff:a3:bb:eb:68:01:ef:2d:ea:e1:1c:5a:b1:c9:7a:c1:a4:
         9e:39:81:55:c5:0c:b9:b9:5e:16:33:b4:25:7f:80:85:f6:15:
         e4:05:1e:5d:86:92:79:7f:2f:bd:1f:8a:a9:d2:ee:11:8e:c8:
         91:24:3c:21:97:98:a9:9c:b0:e6:5c:58:14:1c:51:dd:65:43:
         b4:1e:a7:49:ea:04:c9:69:18:28:72:ac:8b:f0:0d:f9:af:ed:
         9c:cc:03:83:8e:54:15:82:51:a9:f8:b1:80:b7:45:b0:1a:e0:
         19:9c:76:05:9b:a3:bb:19:96:7e:87:cd:fb:86:3c:16:7a:87:
         37:a2:a5:09:cc:ba:75:c3:da:ea:8f:49:fd:89:55:0a:e6:be:
         cb:0e:37:f9:5a:64:ca:b0:87:62:c0:f7:1a:58:6d:7f:30:90:
         a3:9f:93:48:0d:3a:7a:14:ff:db:6f:b8:85:4d:2b:11:06:38:
         f0:d5:4d:78:10:3c:e7:49:b1:29:7f:98:59:77:bf:79:c4:6d:
         09:61:a3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:36:21 2026 by rpki-client