Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231322e302f32322d3232203d3e203233363530.roa
File:                     3134342e34382e3231322e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier:          zCXXgzv9w90xVpAbClwVGa48tUtj8yKEbbd6PAiUBCA=
Subject key identifier:   39:6B:83:DB:E7:DD:4E:E6:5D:F3:3A:9B:82:2F:B3:F2:F9:96:75:AD
Certificate issuer:       /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial:       54F46A807954F1917BEF64A583D92CAFC65674FB
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231322e302f32322d3232203d3e203233363530.roa
Signing time:             Tue 14 Apr 2026 02:00:13 +0000
ROA not before:           Tue 14 Apr 2026 01:55:13 +0000
ROA not after:            Tue 13 Apr 2027 02:00:13 +0000
asID:                     23650
IP address blocks:        144.48.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f4:6a:80:79:54:f1:91:7b:ef:64:a5:83:d9:2c:af:c6:56:74:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
        Validity
            Not Before: Apr 14 01:55:13 2026 GMT
            Not After : Apr 13 02:00:13 2027 GMT
        Subject: CN=396B83DBE7DD4EE65DF33A9B822FB3F2F99675AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:34:d7:b2:56:32:ac:0f:41:10:13:60:b4:
                    3e:9b:3a:6a:de:55:aa:37:f5:76:70:c4:45:d9:ff:
                    98:30:a7:f7:bd:fe:67:3b:25:a6:c6:c5:52:db:81:
                    85:18:49:af:c4:ca:3a:60:57:34:6c:a2:4e:1b:6d:
                    b8:1b:24:37:98:63:8d:83:39:3d:53:15:cd:69:b1:
                    42:5f:51:7b:b4:f6:99:d2:7d:49:46:6c:e2:3c:9c:
                    d0:e5:9c:1b:de:33:bf:b0:9e:b2:23:9c:08:bb:84:
                    4c:fc:4a:42:a5:6b:c3:d2:46:6b:42:d5:bf:5c:4a:
                    11:85:25:73:c8:68:93:47:07:35:51:de:8c:bb:9d:
                    1f:fb:c9:68:ef:88:75:10:c9:51:9e:c3:fc:1f:0c:
                    63:46:c0:6c:df:3b:0f:dc:ea:15:81:ad:21:fe:ab:
                    c2:68:c6:6d:d5:98:eb:d9:dc:3f:cc:50:89:70:b6:
                    fa:0c:3e:2a:3c:d5:aa:ad:13:c6:16:77:ec:b7:55:
                    3b:d7:3b:d3:30:89:ad:cc:ef:8d:ad:e2:bc:0a:3d:
                    c9:74:47:8b:0e:2c:97:a8:9d:96:83:7b:2d:1b:94:
                    ca:40:d4:66:f6:73:22:9f:13:1a:7a:42:dd:0d:28:
                    23:01:95:5d:64:7a:2d:01:e4:b7:d8:56:38:ad:5d:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6B:83:DB:E7:DD:4E:E6:5D:F3:3A:9B:82:2F:B3:F2:F9:96:75:AD
            X509v3 Authority Key Identifier:
                keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3134342e34382e3231322e302f32322d3232203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:af:7c:a7:43:9d:14:8d:c0:2a:03:b3:33:0f:14:6b:49:54:
         00:0f:53:6e:f1:ec:7f:44:bd:cd:0e:52:a8:fb:fa:2e:cd:c1:
         ed:b8:73:20:26:c7:44:79:06:0e:35:c6:cc:2f:e6:d9:55:67:
         0c:b5:d1:be:04:20:57:f8:30:d6:7e:ed:5d:fe:96:5c:f8:32:
         65:c8:05:21:ac:c4:ea:db:49:a9:44:85:62:78:c0:46:06:29:
         1f:27:1a:f9:ee:2a:03:2c:23:71:82:f4:d7:02:57:40:26:a4:
         ff:42:84:b1:cb:16:b8:e0:55:11:33:72:9f:f6:54:ed:5d:e2:
         71:cc:54:00:49:62:a5:48:f8:56:94:e2:53:41:f0:0a:54:e4:
         f4:15:48:6a:37:c3:34:e7:86:19:c2:64:cd:d3:92:76:f8:4a:
         d0:fa:42:aa:64:ba:62:2b:78:10:3b:1f:97:87:e1:07:51:f1:
         db:90:b6:56:a0:b9:62:65:7a:0c:4f:f6:20:24:66:13:a4:73:
         a9:5b:8e:87:ae:6c:fe:00:bd:ba:c3:64:97:15:b8:6a:9a:cc:
         00:11:80:5d:62:96:59:b9:3c:25:2a:74:5d:f4:c6:26:84:01:
         7a:9a:81:52:80:a1:e0:ae:de:ae:83:a7:33:7a:2c:fe:86:52:
         b8:62:30:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:18:04 2026 by rpki-client