Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa
File:                     34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa (raw, json)
Hash identifier:          CUo6KI0C02tUysr9K890TtQgm00S71yWpThJcqrvcys=
Subject key identifier:   71:86:84:CB:07:2E:F2:2F:1D:5A:6B:89:4C:D4:EF:F1:C4:A0:78:72
Certificate issuer:       /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Certificate serial:       3EE07A96634779BF5744F8D92F545E453CD4F012
Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa
Signing time:             Thu 16 Apr 2026 04:06:43 +0000
ROA not before:           Thu 16 Apr 2026 04:01:43 +0000
ROA not after:            Thu 15 Apr 2027 04:06:43 +0000
asID:                     146772
IP address blocks:        45.248.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e0:7a:96:63:47:79:bf:57:44:f8:d9:2f:54:5e:45:3c:d4:f0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
        Validity
            Not Before: Apr 16 04:01:43 2026 GMT
            Not After : Apr 15 04:06:43 2027 GMT
        Subject: CN=718684CB072EF22F1D5A6B894CD4EFF1C4A07872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:6a:7b:79:fc:73:0f:6e:e8:43:4a:05:24:
                    4e:0d:71:9a:ae:e2:ab:ff:bd:f9:7f:7d:3a:ca:8a:
                    0d:76:73:0f:0a:d1:5f:ec:ee:b2:d2:1f:2b:2a:6a:
                    b9:cd:69:a2:fc:c4:10:2e:2c:4f:94:6b:a3:63:71:
                    8e:af:81:dd:f7:8f:79:65:09:63:a0:5f:a0:16:36:
                    7b:aa:03:44:9d:25:f5:56:da:cb:9a:fe:e7:f1:f0:
                    90:11:de:a4:10:e4:3b:61:50:8a:5f:91:f3:84:c9:
                    68:eb:0f:2f:55:e8:d5:9a:98:67:c9:ad:23:cf:dd:
                    d7:4c:f8:cb:a9:15:23:ba:68:79:d1:39:f5:d0:dd:
                    92:10:43:4e:7d:35:b1:4a:47:13:3e:8b:e3:b9:86:
                    70:29:a5:bd:aa:e8:26:ca:57:e0:06:3a:cd:3a:08:
                    91:13:d3:dc:c7:8b:da:f2:89:01:48:6b:76:8a:c3:
                    2c:da:8d:47:65:bf:70:00:b1:81:c4:cd:96:cf:3e:
                    65:c7:0d:b9:6c:84:2d:b1:fb:0f:99:22:c7:ae:a9:
                    2d:52:a2:a5:b2:88:ae:23:84:73:06:6b:b1:2b:6f:
                    0d:e8:f8:77:b2:03:ec:b8:b9:38:6c:1e:36:39:68:
                    b2:13:ea:07:ea:2d:5b:85:66:1a:e8:0e:56:92:fe:
                    bf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:86:84:CB:07:2E:F2:2F:1D:5A:6B:89:4C:D4:EF:F1:C4:A0:78:72
            X509v3 Authority Key Identifier:
                keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:bf:d7:02:05:8a:e6:45:d5:33:e6:11:32:b0:14:50:1d:eb:
         ec:d2:18:76:e9:90:20:ed:d4:93:9b:62:51:c0:d3:49:71:5c:
         87:45:fb:90:3a:a4:65:3c:84:55:4a:fc:5a:95:9b:49:bf:74:
         83:3c:21:cb:f5:db:17:17:ed:fe:d8:57:2a:a1:40:46:5e:ad:
         92:30:6b:b9:27:18:b0:76:1c:5f:4a:a6:41:9f:cb:33:91:4d:
         9d:2f:9e:03:35:49:20:b8:28:e6:03:c5:6b:91:f7:e1:ba:61:
         a9:83:87:b5:97:a8:29:00:47:a4:32:77:c3:0d:4d:31:95:32:
         a2:5f:8f:9f:06:90:ed:ca:e1:9e:12:ec:cc:61:74:c1:92:87:
         a9:a2:2d:a3:b1:9a:81:29:53:3e:5f:95:50:75:4e:07:f6:dd:
         73:bc:19:17:46:4e:6a:5e:8c:64:2d:19:3d:ca:46:7d:20:a8:
         a0:74:f5:80:6e:f3:9b:39:0e:ac:0d:54:33:a3:97:e2:2f:fa:
         4b:de:f6:d3:94:1e:30:96:9c:17:17:2b:3e:a5:33:85:1b:55:
         1f:df:7e:17:e6:c9:41:14:7c:6e:c5:23:36:a1:6f:df:fe:b6:
         75:7e:33:a5:67:54:e1:da:6d:de:91:d4:2e:64:d2:ff:35:a2:
         b8:24:fb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:50 2026 by rpki-client