Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32322e302f32342d3234203d3e203233383438.roa
File:                     34352e36352e32322e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          /hyBTfvC/p8yXs4VG7WKMteb4npwSUsyNeADY6a1e44=
Subject key identifier:   D4:42:F2:67:B0:DC:1A:31:7D:7F:7E:E6:1A:C7:7D:98:5B:F5:B1:17
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       1877CEC9C7F4DB1BBCFF79427F1F3632A3529279
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32322e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:09:43 +0000
ROA not before:           Thu 16 Apr 2026 09:04:43 +0000
ROA not after:            Thu 15 Apr 2027 09:09:43 +0000
asID:                     23848
IP address blocks:        45.65.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:77:ce:c9:c7:f4:db:1b:bc:ff:79:42:7f:1f:36:32:a3:52:92:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:04:43 2026 GMT
            Not After : Apr 15 09:09:43 2027 GMT
        Subject: CN=D442F267B0DC1A317D7F7EE61AC77D985BF5B117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:1a:72:53:b1:4c:fe:83:b7:7b:3b:76:9c:
                    5d:be:ec:ea:ec:f2:39:94:5e:3b:87:3c:0b:b4:a7:
                    92:cb:7d:f6:34:37:35:af:be:a3:87:ed:aa:c1:50:
                    20:5b:02:42:2c:1f:28:e7:05:34:8b:12:42:7e:15:
                    f4:f8:64:e8:25:fa:bc:6d:06:e5:7b:35:d1:da:b0:
                    f4:34:55:71:f0:df:31:38:dc:af:d9:4c:27:15:c7:
                    e0:c7:97:60:1d:be:07:22:69:77:04:fe:67:ea:39:
                    c8:ea:69:0a:c2:97:a7:81:e6:b6:17:9f:9e:99:57:
                    8e:86:27:a8:77:f9:03:13:ba:99:47:a7:cc:a7:cf:
                    69:50:e0:5d:04:17:23:ed:a7:ea:a4:ee:96:09:55:
                    02:df:5d:e2:5a:1d:2c:8c:ca:0a:81:0f:a6:39:11:
                    31:16:e3:fc:b2:2e:ad:99:08:ca:b9:16:29:55:97:
                    92:08:75:50:98:93:e7:ec:90:18:94:54:72:ac:ec:
                    1a:d8:73:d1:56:80:e9:7d:f3:30:4c:7c:3b:9d:14:
                    b6:60:cb:af:ac:94:d2:1e:83:21:31:5c:65:d1:c1:
                    cf:9d:4e:3f:70:2a:ee:9b:f0:16:35:e7:41:ea:0a:
                    8b:3b:7f:eb:df:d2:68:79:b3:d0:33:e2:e9:f3:4a:
                    20:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:42:F2:67:B0:DC:1A:31:7D:7F:7E:E6:1A:C7:7D:98:5B:F5:B1:17
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32322e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:d2:88:c6:7d:af:01:83:f7:b8:6a:78:08:f0:9f:05:4e:a3:
         36:fc:52:f1:14:79:7f:23:56:51:2b:08:34:19:53:49:53:c6:
         75:2c:21:43:0a:10:dc:4d:f4:4f:69:76:f5:c3:9c:a7:9d:f6:
         5c:c6:86:46:03:e0:24:3f:29:2c:d8:4b:da:b1:7d:73:bf:20:
         a1:13:6c:98:db:4b:2d:10:c0:ce:5c:79:59:bf:11:f6:ac:04:
         5b:5c:0a:d9:f0:a6:5d:d5:60:1f:9e:f6:18:ec:41:5b:fe:f8:
         62:80:b8:10:19:33:0a:f1:d6:22:e6:3a:b3:cb:63:44:c6:63:
         3b:c6:27:07:e1:35:6d:93:c5:f9:e4:cf:3b:1c:02:76:77:39:
         38:f1:84:05:c7:42:db:9e:37:d5:23:73:f3:3a:7c:fe:6c:93:
         db:15:fa:74:de:dd:d5:7e:8b:f9:e0:c3:db:e4:f6:dd:1f:9e:
         7f:bb:9d:e6:cb:45:01:bf:06:7f:20:79:ba:7d:6b:57:94:01:
         16:2d:00:0e:97:0a:c6:1e:93:8d:18:11:36:7c:ef:e5:c0:4d:
         27:2b:bc:69:d9:6c:66:38:53:49:9f:4c:ee:9f:5b:4b:b7:f7:
         c8:6f:39:7e:c1:cc:0f:21:2d:78:e4:3e:54:37:40:2e:67:00:
         1c:69:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:55 2026 by rpki-client