Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138302e302f32332d3233203d3e203137363233.roa
File:                     34352e3235302e3138302e302f32332d3233203d3e203137363233.roa (raw, json)
Hash identifier:          z5CNtqggfpBwQHvrd01NKsHY76dW1RQ+2zq6ZLkT6L8=
Subject key identifier:   6D:5D:A1:E5:55:E7:D0:5E:79:1B:DC:F8:C4:4E:F2:33:12:B6:AE:BD
Certificate issuer:       /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Certificate serial:       250F99FE008D4E40B24F322212F3932D7E0432CC
Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138302e302f32332d3233203d3e203137363233.roa
Signing time:             Thu 16 Apr 2026 04:05:08 +0000
ROA not before:           Thu 16 Apr 2026 04:00:08 +0000
ROA not after:            Thu 15 Apr 2027 04:05:08 +0000
asID:                     17623
IP address blocks:        45.250.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0f:99:fe:00:8d:4e:40:b2:4f:32:22:12:f3:93:2d:7e:04:32:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
        Validity
            Not Before: Apr 16 04:00:08 2026 GMT
            Not After : Apr 15 04:05:08 2027 GMT
        Subject: CN=6D5DA1E555E7D05E791BDCF8C44EF23312B6AEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bf:0c:bf:ce:84:85:12:56:14:06:31:fe:b1:
                    e3:da:b0:01:0c:d6:4e:e5:88:43:14:aa:e2:e6:9c:
                    ff:65:a8:5e:a5:2c:61:74:81:52:3c:06:fa:92:27:
                    18:ce:28:91:bf:ef:ed:0e:ca:ae:ca:0c:5f:d0:84:
                    93:3c:48:16:b7:1a:09:6a:82:c2:3c:c4:80:99:f0:
                    76:05:78:40:50:76:1e:39:5b:52:99:5d:c3:48:2f:
                    7f:a7:16:33:9d:21:d8:d8:a9:3c:3e:a5:a4:a8:11:
                    cf:27:5f:38:c9:75:94:97:d0:24:8a:a3:40:98:95:
                    82:61:90:c5:cd:0a:b0:ab:fb:4f:a2:4a:ba:24:b8:
                    c4:9d:63:6e:d0:ff:c8:88:0a:0e:18:5c:c2:03:17:
                    4d:07:36:32:32:d2:5f:04:bc:1b:b6:cb:f2:64:85:
                    f9:eb:3d:46:95:4f:6c:ee:57:6a:11:26:a9:84:66:
                    cc:a9:c9:3a:ba:34:1f:9b:b3:68:74:dc:8d:40:f3:
                    05:19:5b:a6:81:c4:ac:e3:34:7e:0b:ca:d0:e5:f3:
                    23:12:62:59:69:f8:df:17:66:39:53:f3:de:f9:0d:
                    c1:71:9f:82:0e:21:4d:38:fc:ae:ce:20:1b:0a:31:
                    53:f9:71:68:bc:f7:97:4d:d4:d1:3b:db:90:a1:e7:
                    73:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5D:A1:E5:55:E7:D0:5E:79:1B:DC:F8:C4:4E:F2:33:12:B6:AE:BD
            X509v3 Authority Key Identifier:
                keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3235302e3138302e302f32332d3233203d3e203137363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:00:68:92:82:ae:f4:22:84:11:bb:27:06:9f:89:2d:bd:41:
         ea:d9:07:14:6c:90:ac:3d:57:8b:b1:de:c4:1c:6e:a1:40:d9:
         87:25:d9:07:17:fb:65:28:cc:6c:f1:23:ea:dc:6f:88:98:5f:
         07:a1:02:6e:17:5a:04:6e:df:da:3c:0e:f3:65:0a:49:c0:d7:
         97:6d:a7:85:69:f7:32:86:38:85:28:2f:79:f9:ee:ba:0c:39:
         70:db:4e:bf:1a:95:48:78:4f:30:e5:ec:33:c1:3e:2d:45:38:
         b9:3e:ca:b5:91:e3:0b:da:d7:82:3b:d1:fe:c4:e3:22:ed:f3:
         48:e3:af:1c:96:59:aa:a9:89:fc:35:12:02:ba:e2:58:e8:a3:
         4a:33:16:0a:10:d6:d7:19:3a:3c:68:f9:a3:58:43:9e:c7:dd:
         31:cf:59:00:c6:85:2a:d3:9c:00:18:0d:74:69:27:af:05:25:
         31:e7:28:32:0e:78:fc:2b:42:55:df:73:b6:c9:23:dd:da:90:
         c2:9f:4d:e8:e2:c6:83:01:b0:43:68:7b:6e:b8:b8:29:39:62:
         a1:16:0a:c2:79:e8:75:fc:a8:2b:b2:cc:c8:e5:89:1e:48:4a:
         8d:16:c2:f1:0b:0a:27:24:2b:be:11:56:f5:9d:b3:2f:21:f4:
         38:54:83:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:46 2026 by rpki-client