Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/34352e3235302e33362e302f32322d3332203d3e20313337373935.roa
File:                     34352e3235302e33362e302f32322d3332203d3e20313337373935.roa (raw, json)
Hash identifier:          jxLXvU0lQ9qIYNXLlSI02aCg7dGIkFu+2hUw+HMgo+8=
Subject key identifier:   D2:79:10:60:5E:0C:7F:7D:F0:6E:8F:68:2B:F5:8F:7A:F1:40:32:C2
Certificate issuer:       /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial:       3CECAA1CFE0BC30852C82F7E92BDDC133B68FB71
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/34352e3235302e33362e302f32322d3332203d3e20313337373935.roa
Signing time:             Wed 15 Apr 2026 07:40:58 +0000
ROA not before:           Wed 15 Apr 2026 07:35:58 +0000
ROA not after:            Wed 14 Apr 2027 07:40:58 +0000
asID:                     137795
IP address blocks:        45.250.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ec:aa:1c:fe:0b:c3:08:52:c8:2f:7e:92:bd:dc:13:3b:68:fb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
        Validity
            Not Before: Apr 15 07:35:58 2026 GMT
            Not After : Apr 14 07:40:58 2027 GMT
        Subject: CN=D27910605E0C7F7DF06E8F682BF58F7AF14032C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e3:1d:e3:54:c6:92:bf:8d:2d:7d:16:96:8a:
                    23:58:ab:72:42:f8:61:90:95:5f:99:7f:c2:e6:60:
                    f8:cd:d6:3c:d6:da:6a:20:fe:17:bf:ed:c5:20:df:
                    e6:0f:bc:01:e1:83:16:7d:fd:b7:f9:5f:ca:d4:be:
                    15:55:56:27:88:86:64:79:7d:b3:f1:04:14:a8:d6:
                    29:a8:d6:dc:94:d4:0e:f2:43:2d:67:e2:55:b0:53:
                    80:4c:f7:be:3d:0f:4c:dc:91:23:63:18:46:c4:61:
                    d9:0a:b8:e3:63:1a:85:6c:ba:88:20:3e:d4:69:4c:
                    97:75:c8:d7:70:26:43:6c:7b:b2:e3:4b:a2:64:b8:
                    3f:ff:99:bb:e7:c7:bc:2e:ca:25:f3:a6:e8:75:c0:
                    b5:a9:ea:0e:81:d0:83:dc:c8:03:45:a9:53:14:62:
                    4e:53:eb:70:b6:f7:bd:e3:98:ec:16:03:ba:8f:35:
                    2b:2d:59:9f:16:86:af:aa:41:77:e2:df:cd:47:3c:
                    e0:ed:d9:f9:a1:a0:26:47:7f:99:f6:1b:2c:c1:3c:
                    3b:e9:0f:e4:2c:6b:48:34:dd:21:d8:b0:55:48:02:
                    94:8f:b5:e1:10:41:8f:24:70:ec:d9:1b:6a:04:fb:
                    61:fe:a3:d6:cb:d8:ea:c1:73:6f:72:6a:ad:fb:da:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:79:10:60:5E:0C:7F:7D:F0:6E:8F:68:2B:F5:8F:7A:F1:40:32:C2
            X509v3 Authority Key Identifier:
                keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/34352e3235302e33362e302f32322d3332203d3e20313337373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:3f:23:98:f9:ce:4d:d0:df:d0:9a:9b:92:e1:a9:74:f8:1b:
         82:a7:2c:00:f9:f9:ee:92:ad:52:03:9e:68:06:2f:6a:9a:19:
         0c:26:90:5a:8f:30:82:ee:6b:b2:82:f9:51:ff:d4:fc:88:56:
         f1:e4:be:24:8d:b4:82:74:ce:73:ca:a9:ac:a7:ad:54:e3:3f:
         52:f3:48:eb:ab:80:fe:3e:15:66:b7:e0:7f:a4:6c:7b:56:e3:
         85:83:d9:65:fa:b9:68:5c:a0:61:eb:b0:ba:4b:73:a7:fe:02:
         5c:c0:2e:f1:3d:3e:e3:ea:23:37:83:35:f0:9f:39:ee:e6:91:
         a7:bb:d8:5a:09:e7:c8:76:c6:2b:f1:f3:55:fe:74:61:6b:96:
         db:83:b8:2e:e3:8e:ce:29:84:fb:9d:1f:90:df:e3:21:73:9e:
         c6:26:ea:e0:67:fe:d9:07:8d:46:7a:70:d0:db:1c:1a:4c:87:
         6b:72:78:02:b2:31:11:bc:16:8f:62:70:6d:4c:74:3f:46:9e:
         55:db:f1:5f:de:0f:6b:35:f3:c1:7e:d4:df:ac:7f:d1:cd:35:
         5b:20:96:43:7e:0d:ec:cb:e3:75:17:3f:93:83:10:61:3a:80:
         44:2a:e7:c9:c1:32:50:17:a3:87:43:75:69:b6:ef:14:71:64:
         97:09:df:dc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPOyqHP4LwwhSyC9+kr3cEzto+3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThG
QkRCMTlERjAeFw0yNjA0MTUwNzM1NThaFw0yNzA0MTQwNzQwNThaMDMxMTAvBgNV
BAMTKEQyNzkxMDYwNUUwQzdGN0RGMDZFOEY2ODJCRjU4RjdBRjE0MDMyQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4x3jVMaSv40tfRaWiiNYq3JC
+GGQlV+Zf8LmYPjN1jzW2mog/he/7cUg3+YPvAHhgxZ9/bf5X8rUvhVVVieIhmR5
fbPxBBSo1imo1tyU1A7yQy1n4lWwU4BM9749D0zckSNjGEbEYdkKuONjGoVsuogg
PtRpTJd1yNdwJkNse7LjS6JkuD//mbvnx7wuyiXzpuh1wLWp6g6B0IPcyANFqVMU
Yk5T63C2973jmOwWA7qPNSstWZ8Whq+qQXfi381HPODt2fmhoCZHf5n2GyzBPDvp
D+Qsa0g03SHYsFVIApSPteEQQY8kcOzZG2oE+2H+o9bL2OrBc29yaq372pCHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU0nkQYF4Mf33wbo9oK/WPevFAMsIwHwYDVR0j
BBgwFoAUlKBAB8GJNO79d5RFulNJqPvbGd8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwMDQwMDIwNTAzNzU3MC8wLzk0QTA0MDA3QzE4OTM0RUVGRDc3OTQ0NUJBNTM0
OUE4RkJEQjE5REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThGQkRCMTlERi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjcwMDQwMDIwNTAzNzU3MC8wLzM0MzUyZTMyMzUz
MDJlMzMzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM3MzkzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAi36JDANBgkqhkiG9w0BAQsFAAOCAQEAKD8jmPnOTdDf0JqbkuGpdPgb
gqcsAPn57pKtUgOeaAYvapoZDCaQWo8wgu5rsoL5Uf/U/IhW8eS+JI20gnTOc8qp
rKetVOM/UvNI66uA/j4VZrfgf6Rse1bjhYPZZfq5aFygYeuwuktzp/4CXMAu8T0+
4+ojN4M18J857uaRp7vYWgnnyHbGK/HzVf50YWuW24O4LuOOzimE+50fkN/jIXOe
xibq4Gf+2QeNRnpw0NscGkyHa3J4ArIxEbwWj2JwbUx0P0aeVdvxX94PazXzwX7U
36x/0c01WyCWQ34N7MvjdRc/k4MQYTqARCrnycEyUBejh0N1abbvFHFklwnf3A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:03 2026 by rpki-client