Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/34352e3235302e34302e302f32322d3332203d3e2034383337.roa
File:                     34352e3235302e34302e302f32322d3332203d3e2034383337.roa (raw, json)
Hash identifier:          EAaYwNd0lpYc0bg5b49dtzIlWXe8A0pgSFh06kZY9Zs=
Subject key identifier:   0D:4A:0D:C5:1A:76:52:87:5D:D7:67:63:61:13:1A:CB:CF:EA:79:F5
Certificate issuer:       /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial:       51A60B094982412C7232C1EFC5F9CCC666233A67
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/34352e3235302e34302e302f32322d3332203d3e2034383337.roa
Signing time:             Wed 15 Apr 2026 07:40:59 +0000
ROA not before:           Wed 15 Apr 2026 07:35:59 +0000
ROA not after:            Wed 14 Apr 2027 07:40:59 +0000
asID:                     4837
IP address blocks:        45.250.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a6:0b:09:49:82:41:2c:72:32:c1:ef:c5:f9:cc:c6:66:23:3a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
        Validity
            Not Before: Apr 15 07:35:59 2026 GMT
            Not After : Apr 14 07:40:59 2027 GMT
        Subject: CN=0D4A0DC51A7652875DD7676361131ACBCFEA79F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:3e:bd:be:2b:08:71:7c:74:21:21:4a:66:
                    f3:47:05:b9:84:d1:d9:aa:b3:91:9f:50:97:fb:27:
                    9b:22:b1:d9:0d:10:40:45:75:b3:c6:9b:1a:48:b5:
                    07:b5:92:49:6c:09:7e:bd:6f:d5:c5:f3:40:11:74:
                    02:d4:ec:cb:25:ec:c7:66:8b:49:e2:b2:b5:58:5b:
                    08:76:1b:01:9d:72:42:2a:7f:fb:63:bd:2c:e4:53:
                    10:b0:5c:45:09:63:e7:64:e9:ab:d5:25:5b:21:8d:
                    98:6e:5b:24:c2:be:7b:ab:4c:89:a0:be:19:e0:b2:
                    8a:fd:f8:4a:1e:5e:36:5c:6b:d7:ec:10:8c:d8:53:
                    b4:17:24:cd:5a:c6:52:a5:ac:6a:4c:7e:5f:45:21:
                    68:eb:a5:c0:9b:de:54:c4:68:7d:0a:81:51:a4:51:
                    e4:e5:99:76:b4:6c:87:28:27:ac:11:73:94:6b:3b:
                    e0:11:57:67:b3:5b:f4:2c:e1:04:13:03:ad:12:d4:
                    79:05:94:c6:51:77:89:ba:be:cd:e8:ff:c5:20:6e:
                    4f:bc:a7:d2:ce:9f:7f:a9:e5:f9:22:ed:b6:f0:0a:
                    d6:49:9c:9a:b5:56:1d:b0:06:36:05:18:58:1e:bd:
                    5d:80:cd:5a:a3:56:02:8c:b9:ec:c8:7c:e7:c5:a0:
                    0e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4A:0D:C5:1A:76:52:87:5D:D7:67:63:61:13:1A:CB:CF:EA:79:F5
            X509v3 Authority Key Identifier:
                keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/34352e3235302e34302e302f32322d3332203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:86:16:c7:e9:3e:00:5f:c1:86:1d:de:c3:9e:b5:45:60:59:
         eb:37:db:db:d9:96:b8:bf:06:e3:70:0c:6b:a9:83:63:a3:52:
         2f:1b:f2:97:dc:20:a8:36:ca:21:69:e1:5e:9d:24:69:13:e4:
         ae:cf:83:18:6b:7d:ef:83:ed:74:8f:9c:7b:2f:fb:b7:81:08:
         35:3b:a5:e8:58:6b:1a:ab:f8:fe:97:78:ef:89:2e:02:18:54:
         a4:28:09:45:86:62:15:8a:ef:68:51:af:9d:44:0d:e2:3b:18:
         3a:c9:16:fd:4a:ae:57:5d:b3:d3:f7:a4:4d:40:5f:b8:e7:5a:
         0a:41:f5:f4:24:ac:ee:5c:ea:79:8c:2f:37:6f:22:88:11:90:
         e2:f2:c2:39:08:b2:5a:eb:64:28:2b:f8:f5:ac:81:8f:5d:0b:
         1c:d7:c3:0d:bf:98:98:d9:e7:33:cc:db:95:90:8c:fa:fe:32:
         12:56:d2:34:ce:8e:26:7a:d3:8a:28:a8:3d:7f:6c:8e:46:c1:
         b5:21:92:f7:07:4d:48:9f:c3:76:d0:4f:02:9a:27:ef:57:c0:
         6d:b7:87:ba:dc:27:95:14:7c:1c:92:58:af:5a:a4:fa:cb:91:
         1b:ef:2a:57:2f:61:2b:0b:62:19:90:67:63:f2:d4:e4:95:2f:
         3a:ca:f4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:17 2026 by rpki-client