Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233392e302f32342d3234203d3e20313332383833.roa
File:                     34352e3131352e3233392e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier:          4ttlBoSWVe9ZNF/Zp9jHRsWrZKXi+CTyy/+lqvgHOAk=
Subject key identifier:   22:D7:82:75:AF:5F:45:28:11:BC:79:A6:F4:1F:6C:E4:5C:16:26:0B
Certificate issuer:       /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial:       5710784B5C2B3C46D8A09084959785E1BE85D1F7
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233392e302f32342d3234203d3e20313332383833.roa
Signing time:             Wed 08 Apr 2026 05:59:33 +0000
ROA not before:           Wed 08 Apr 2026 05:54:33 +0000
ROA not after:            Wed 07 Apr 2027 05:59:33 +0000
asID:                     132883
IP address blocks:        45.115.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:10:78:4b:5c:2b:3c:46:d8:a0:90:84:95:97:85:e1:be:85:d1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
        Validity
            Not Before: Apr  8 05:54:33 2026 GMT
            Not After : Apr  7 05:59:33 2027 GMT
        Subject: CN=22D78275AF5F452811BC79A6F41F6CE45C16260B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:9e:58:4c:dd:94:e6:47:a1:ad:c8:81:ca:
                    bb:ee:99:0c:9b:6e:ef:49:5c:aa:39:31:b0:ed:19:
                    7c:04:2a:ba:70:24:54:92:5d:7d:11:9f:94:78:50:
                    1e:e6:cd:c7:8b:e6:12:53:39:50:36:9d:5d:98:27:
                    c3:36:70:24:23:e1:c0:11:90:f1:42:f6:69:fe:a7:
                    e7:fa:70:b9:4e:85:d7:6a:7d:9b:94:95:26:b2:80:
                    9d:69:8d:3b:85:fb:85:88:60:5c:f2:8b:8d:8e:9a:
                    22:c1:42:aa:70:e6:cd:96:81:47:52:c7:2a:14:85:
                    e3:b8:51:2d:1b:57:7c:46:f6:bd:cf:53:1e:94:31:
                    8c:46:8b:1f:3b:c0:70:59:00:c5:fa:40:a9:f3:67:
                    11:c9:dc:c2:14:b4:07:15:f8:b6:2f:ce:05:14:9b:
                    39:62:6a:88:bc:a7:28:09:e9:18:0a:c1:f5:7d:04:
                    27:fb:1b:5e:b9:ef:93:59:7a:d6:8e:c2:c1:6e:5f:
                    db:0e:d8:54:6f:67:28:2f:b2:e6:40:62:b6:c5:06:
                    39:68:d0:e4:7c:88:35:2a:01:da:64:a3:06:1c:e7:
                    cf:23:4c:d9:df:2f:19:0c:40:39:f1:96:09:f4:b8:
                    8d:68:6d:f8:6e:ea:96:da:19:ef:b0:61:ac:41:e0:
                    cd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D7:82:75:AF:5F:45:28:11:BC:79:A6:F4:1F:6C:E4:5C:16:26:0B
            X509v3 Authority Key Identifier:
                keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233392e302f32342d3234203d3e20313332383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:b0:83:a8:c4:ae:d8:39:46:9b:c2:99:d0:52:1f:dd:57:dc:
         1e:19:0a:98:33:5e:66:84:01:7b:92:78:b6:44:ab:3b:fd:27:
         bc:0c:27:36:2b:d5:34:ef:48:f4:51:cc:a8:20:18:ee:02:ab:
         3a:1c:77:9c:4d:bd:df:c8:61:49:67:6e:7f:20:41:fe:0c:a1:
         da:31:56:f6:43:b7:cb:64:ee:00:5e:25:48:8d:51:97:61:a5:
         aa:68:46:de:2d:4b:32:f3:94:7c:2f:b8:a3:a0:c4:40:5d:eb:
         7f:d4:f2:a7:1a:2b:c5:ab:d7:19:14:30:a9:62:f9:c0:a3:93:
         f3:c4:c4:4e:96:8a:ee:ad:f5:9b:b0:dd:c4:8a:7d:94:5a:ec:
         0c:b0:3e:c6:66:be:11:26:8e:83:7e:3f:85:99:9d:90:fa:d8:
         f0:05:94:08:64:b8:9e:19:b1:05:60:2c:c9:71:b4:77:df:7a:
         10:88:d8:4d:70:82:b7:61:ab:21:f0:46:85:d6:bc:80:64:22:
         a6:29:bf:d6:06:b6:6e:e3:f4:7e:3f:35:c3:6c:b1:44:68:a9:
         cb:39:60:2a:e6:58:ea:23:f0:ad:93:52:2f:9d:07:b7:f9:75:
         e7:4f:1c:1e:a6:5a:0a:72:74:81:84:37:47:3f:c8:cc:e0:a4:
         1e:15:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:02 2026 by rpki-client