Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/34352e3132302e3136342e302f32322d3232203d3e203539303239.roa
File:                     34352e3132302e3136342e302f32322d3232203d3e203539303239.roa (raw, json)
Hash identifier:          KURF38qbyACbjpFtMMo5NPeX7O1J7f/hNApA+Wasi+s=
Subject key identifier:   FB:F6:3C:30:F4:3D:EB:A3:C5:C5:C4:EC:0E:69:8F:8B:EC:DC:DE:05
Certificate issuer:       /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial:       7858E1256586162CDA7321BCF7BAC2AA3BD58871
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/34352e3132302e3136342e302f32322d3232203d3e203539303239.roa
Signing time:             Thu 16 Apr 2026 07:14:30 +0000
ROA not before:           Thu 16 Apr 2026 07:09:30 +0000
ROA not after:            Thu 15 Apr 2027 07:14:30 +0000
asID:                     59029
IP address blocks:        45.120.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:58:e1:25:65:86:16:2c:da:73:21:bc:f7:ba:c2:aa:3b:d5:88:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
        Validity
            Not Before: Apr 16 07:09:30 2026 GMT
            Not After : Apr 15 07:14:30 2027 GMT
        Subject: CN=FBF63C30F43DEBA3C5C5C4EC0E698F8BECDCDE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:70:af:77:18:2a:c9:35:72:a9:5d:9a:46:
                    3a:c6:27:97:d1:d6:d0:3c:ad:05:60:b6:55:b5:99:
                    f4:e1:63:96:0c:80:e7:4d:07:29:dc:37:3f:eb:7c:
                    59:cd:77:67:87:8c:31:dc:e9:14:0d:13:97:59:ec:
                    63:ad:6d:19:55:0d:e6:ce:56:67:5a:16:d1:c9:49:
                    4c:fe:a4:83:15:c2:ff:8e:2b:d1:8f:ac:05:04:05:
                    59:20:86:e4:5e:3f:52:d1:8f:94:4d:ef:52:12:90:
                    98:dc:f6:d7:90:4a:fe:28:59:35:85:ad:91:d8:54:
                    b1:25:1a:65:5f:1b:56:3e:87:da:da:21:b6:5c:52:
                    e1:67:58:9c:6b:43:be:7c:b2:a3:67:8b:0a:74:5b:
                    21:fc:b6:3d:cd:09:7f:03:68:d9:71:a6:d9:df:30:
                    03:9e:16:9a:a3:1e:02:c0:75:89:e5:55:22:6c:99:
                    1c:5b:ce:b2:ba:ef:30:b8:60:3a:27:70:34:ef:2a:
                    32:33:65:99:74:66:6b:d4:f0:19:a9:4e:af:fa:27:
                    62:f9:14:e6:9b:c4:63:18:9f:01:47:81:a5:8f:21:
                    3f:19:94:bb:3c:d9:6e:8a:83:d4:5b:15:32:3b:bf:
                    b9:46:4c:b7:e1:bf:39:2e:a7:14:b7:3a:ae:34:c0:
                    e2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F6:3C:30:F4:3D:EB:A3:C5:C5:C4:EC:0E:69:8F:8B:EC:DC:DE:05
            X509v3 Authority Key Identifier:
                keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/34352e3132302e3136342e302f32322d3232203d3e203539303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:18:be:20:49:3b:f5:ab:e9:eb:06:df:f8:28:01:26:d4:
         2e:ad:a4:b1:90:b4:f8:73:b1:b9:86:f4:33:13:34:bc:55:6f:
         4e:51:3a:c5:30:28:cf:2a:35:a8:ce:f7:8f:34:15:03:76:ea:
         0e:0f:16:c2:0c:c8:f4:cd:c6:4b:52:6e:5e:ae:b0:09:27:a1:
         44:77:b4:ae:b1:03:b3:b6:12:06:18:bc:1c:22:34:1b:7b:0b:
         5c:19:2b:40:10:33:ef:a8:db:b8:9a:e4:a8:10:85:4a:97:d8:
         e3:09:7b:da:2c:2a:4d:94:5b:43:97:d2:27:9a:24:2a:7d:d0:
         68:77:f5:62:2a:09:48:cd:7c:d2:f4:5f:64:8f:5a:18:61:da:
         26:e7:ef:6e:5c:ed:f5:a0:49:1f:dc:36:e3:ba:97:42:a1:97:
         94:67:8c:78:d1:f7:ed:8a:fc:88:d6:9d:e6:4a:a9:4d:a1:7a:
         7d:61:b1:a2:82:90:78:35:f8:9b:d8:46:2c:d5:6f:da:67:ee:
         d6:3f:c1:8e:a0:de:87:ad:2e:c8:3d:df:79:53:c5:77:db:0b:
         65:78:5d:a6:6c:4a:ba:88:49:40:d7:7a:3a:23:04:a4:5b:a2:
         b9:2a:d1:25:6a:10:aa:9d:c2:48:cd:c4:f3:49:90:9d:3b:fe:
         01:d0:30:b0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUeFjhJWWGFizacyG897rCqjvViHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC
NUYxOTU1MTAeFw0yNjA0MTYwNzA5MzBaFw0yNzA0MTUwNzE0MzBaMDMxMTAvBgNV
BAMTKEZCRjYzQzMwRjQzREVCQTNDNUM1QzRFQzBFNjk4RjhCRUNEQ0RFMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCHCvdxgqyTVyqV2aRjrGJ5fR
1tA8rQVgtlW1mfThY5YMgOdNByncNz/rfFnNd2eHjDHc6RQNE5dZ7GOtbRlVDebO
VmdaFtHJSUz+pIMVwv+OK9GPrAUEBVkghuReP1LRj5RN71ISkJjc9teQSv4oWTWF
rZHYVLElGmVfG1Y+h9raIbZcUuFnWJxrQ758sqNniwp0WyH8tj3NCX8DaNlxptnf
MAOeFpqjHgLAdYnlVSJsmRxbzrK67zC4YDoncDTvKjIzZZl0ZmvU8BmpTq/6J2L5
FOabxGMYnwFHgaWPIT8ZlLs82W6Kg9RbFTI7v7lGTLfhvzkupxS3Oq40wOL9AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU+/Y8MPQ966PFxcTsDmmPi+zc3gUwHwYDVR0j
BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF
NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA1NTM5NjA0MTg1MDg4MS8wLzM0MzUyZTMxMzIz
MDJlMzEzNjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzIzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAi14pDANBgkqhkiG9w0BAQsFAAOCAQEAGisYviBJO/Wr6esG3/goASbU
Lq2ksZC0+HOxuYb0MxM0vFVvTlE6xTAozyo1qM73jzQVA3bqDg8WwgzI9M3GS1Ju
Xq6wCSehRHe0rrEDs7YSBhi8HCI0G3sLXBkrQBAz76jbuJrkqBCFSpfY4wl72iwq
TZRbQ5fSJ5okKn3QaHf1YioJSM180vRfZI9aGGHaJufvblzt9aBJH9w247qXQqGX
lGeMeNH37Yr8iNad5kqpTaF6fWGxooKQeDX4m9hGLNVv2mfu1j/BjqDeh60uyD3f
eVPFd9sLZXhdpmxKuohJQNd6OiMEpFuiuSrRJWoQqp3CSM3E80mQnTv+AdAwsA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:23 2026 by rpki-client