Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/34352e3131392e36342e302f32322d3332203d3e203536303436.roa
File:                     34352e3131392e36342e302f32322d3332203d3e203536303436.roa (raw, json)
Hash identifier:          WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=
Subject key identifier:   A4:05:FE:AF:07:C9:8E:40:DA:21:6C:1B:32:03:03:3B:37:84:37:16
Certificate issuer:       /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F
Certificate serial:       383F18C39DCFC72DE6E551CA91CD7059225F9D6D
Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/34352e3131392e36342e302f32322d3332203d3e203536303436.roa
Signing time:             Wed 15 Apr 2026 07:52:55 +0000
ROA not before:           Wed 15 Apr 2026 07:47:55 +0000
ROA not after:            Wed 14 Apr 2027 07:52:55 +0000
asID:                     56046
IP address blocks:        45.119.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3f:18:c3:9d:cf:c7:2d:e6:e5:51:ca:91:cd:70:59:22:5f:9d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F
        Validity
            Not Before: Apr 15 07:47:55 2026 GMT
            Not After : Apr 14 07:52:55 2027 GMT
        Subject: CN=A405FEAF07C98E40DA216C1B3203033B37843716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5b:f4:fb:5d:c7:3a:da:79:7e:44:28:87:92:
                    59:6e:3e:82:c3:27:ee:a5:37:ed:d6:44:71:8a:12:
                    2b:6c:18:04:09:a6:29:29:ca:11:cf:3e:c0:a8:3e:
                    cf:bc:f1:62:07:60:e9:84:a6:c0:4b:de:ff:e7:16:
                    aa:7a:e3:19:59:19:39:df:64:43:5f:5d:7f:11:e9:
                    d2:5d:eb:9d:cc:c7:e9:b9:2b:b9:29:fa:1e:1c:56:
                    44:46:5e:c6:e2:53:fb:67:0e:09:7b:d0:19:be:b6:
                    33:82:81:2f:65:b7:d8:09:70:d2:7b:fa:08:9d:5e:
                    5d:94:d1:17:07:ed:83:d6:95:29:3f:14:51:90:f2:
                    0d:8d:bd:88:f9:68:71:4b:f9:fa:64:dc:66:21:31:
                    a0:17:a0:de:fa:c1:64:24:a3:c5:d6:c0:1d:7e:37:
                    1a:59:d4:fe:20:ae:24:2e:65:9a:48:f5:e7:97:62:
                    2c:7b:87:76:af:db:b6:8e:6c:ac:9e:e8:b0:5b:12:
                    47:d2:ef:0c:8c:3f:a5:9b:6f:ec:83:a3:42:84:24:
                    cb:8e:fc:41:5f:64:24:91:a6:92:2b:b6:8b:fe:53:
                    19:a6:f0:90:db:d8:4c:7b:c7:e8:76:6f:a0:bf:8b:
                    5f:d2:f1:3b:93:2f:6d:b8:a6:e2:6d:49:b2:c1:e4:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:05:FE:AF:07:C9:8E:40:DA:21:6C:1B:32:03:03:3B:37:84:37:16
            X509v3 Authority Key Identifier:
                keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/34352e3131392e36342e302f32322d3332203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.119.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         eb:50:8a:0c:1c:f8:6f:92:79:a9:51:0e:e7:e5:3e:3a:4f:bb:
         f1:fe:f8:10:6c:dd:c4:7b:c2:47:0c:c5:ae:c0:23:7a:cd:a8:
         63:b9:e6:af:be:ff:dc:70:c0:65:cb:0c:a6:87:b4:8c:d1:05:
         d4:71:8a:e3:98:9f:17:ff:ca:46:1a:76:a7:7e:e7:ee:1b:a8:
         8d:f5:f7:95:5f:1b:28:aa:14:58:3d:6c:1f:65:5b:be:89:4e:
         ff:74:56:27:57:ba:93:a3:ef:6f:38:17:af:cc:dc:d5:97:05:
         91:34:94:ed:9e:6a:5f:62:e9:03:2d:27:e7:1c:a8:89:06:30:
         91:b0:2d:84:75:ce:de:c8:62:4c:9e:18:ab:f3:c8:4a:66:69:
         b3:a3:67:94:a2:66:3e:64:eb:f3:7f:30:02:4c:d9:2c:59:18:
         3d:8f:da:a2:97:97:de:72:af:75:9e:bd:50:46:01:94:64:7f:
         6f:2b:8c:5a:d7:ec:4b:50:d2:b9:5e:db:45:1c:6c:d1:65:d5:
         8b:73:92:93:f0:fe:c6:46:f2:1f:6c:47:02:51:b3:92:17:8c:
         31:ad:c2:06:1b:0c:b6:f9:af:e3:5e:29:4d:b9:da:d6:16:a3:
         2a:34:54:70:47:db:80:ee:66:2b:0a:0f:7c:81:f1:20:ef:50:
         bc:65:53:73
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUOD8Yw53Pxy3m5VHKkc1wWSJfnW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1
NkMwNzAzRjAeFw0yNjA0MTUwNzQ3NTVaFw0yNzA0MTQwNzUyNTVaMDMxMTAvBgNV
BAMTKEE0MDVGRUFGMDdDOThFNDBEQTIxNkMxQjMyMDMwMzNCMzc4NDM3MTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEW/T7Xcc62nl+RCiHklluPoLD
J+6lN+3WRHGKEitsGAQJpikpyhHPPsCoPs+88WIHYOmEpsBL3v/nFqp64xlZGTnf
ZENfXX8R6dJd653Mx+m5K7kp+h4cVkRGXsbiU/tnDgl70Bm+tjOCgS9lt9gJcNJ7
+gidXl2U0RcH7YPWlSk/FFGQ8g2NvYj5aHFL+fpk3GYhMaAXoN76wWQko8XWwB1+
NxpZ1P4griQuZZpI9eeXYix7h3av27aObKye6LBbEkfS7wyMP6Wbb+yDo0KEJMuO
/EFfZCSRppIrtov+Uxmm8JDb2Ex7x+h2b6C/i1/S8TuTL224puJtSbLB5EfJAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUpAX+rwfJjkDaIWwbMgMDOzeENxYwHwYDVR0j
BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz
RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzA0MTU1OTc3ODQyNjkxLzAvMzQzNTJlMzEzMTM5
MmUzNjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzNjMwMzQzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAi13QDANBgkqhkiG9w0BAQsFAAOCAQEA61CKDBz4b5J5qVEO5+U+Ok+78f74
EGzdxHvCRwzFrsAjes2oY7nmr77/3HDAZcsMpoe0jNEF1HGK45ifF//KRhp2p37n
7huojfX3lV8bKKoUWD1sH2VbvolO/3RWJ1e6k6PvbzgXr8zc1ZcFkTSU7Z5qX2Lp
Ay0n5xyoiQYwkbAthHXO3shiTJ4Yq/PISmZps6NnlKJmPmTr838wAkzZLFkYPY/a
opeX3nKvdZ69UEYBlGR/byuMWtfsS1DSuV7bRRxs0WXVi3OSk/D+xkbyH2xHAlGz
kheMMa3CBhsMtvmv414pTbna1hajKjRUcEfbgO5mKwoPfIHxIO9QvGVTcw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:55 2026 by rpki-client