Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e33322e302f32322d3234203d3e2030.roa
File:                     34352e3132342e33322e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          HC3iveVNMDVxR6Hh6h5itOl8NvQuPuzeQkd/IWyuxr0=
Subject key identifier:   67:83:39:34:C1:0C:CF:F7:2E:E2:33:39:A7:29:33:32:C2:E2:75:2A
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       6738A326774BEB9E56DEA1239DF458BFD13B2949
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e33322e302f32322d3234203d3e2030.roa
Signing time:             Thu 04 Jun 2026 07:21:59 +0000
ROA not before:           Thu 04 Jun 2026 07:16:59 +0000
ROA not after:            Thu 03 Jun 2027 07:21:59 +0000
asID:                     0
IP address blocks:        45.124.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 19:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:38:a3:26:77:4b:eb:9e:56:de:a1:23:9d:f4:58:bf:d1:3b:29:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 07:16:59 2026 GMT
            Not After : Jun  3 07:21:59 2027 GMT
        Subject: CN=67833934C10CCFF72EE23339A7293332C2E2752A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:67:a2:e9:7c:30:ca:15:23:32:ee:3d:29:93:
                    a8:c8:f1:e0:db:4f:d0:5b:2a:c1:41:3b:e1:89:27:
                    0a:2b:d8:a3:47:e9:90:84:fd:89:b0:ca:1a:31:3b:
                    0b:46:bd:73:4a:5f:a9:e4:6b:2a:80:f7:07:f5:18:
                    0c:33:aa:f1:33:e8:40:0d:3f:ab:40:44:59:09:04:
                    17:31:33:b2:a3:07:10:05:16:df:09:e6:88:a3:00:
                    b8:b6:df:1c:c2:a3:39:b8:eb:32:ef:10:13:3e:af:
                    bf:56:18:af:be:5f:77:43:9e:4a:8f:35:4f:8e:4c:
                    c5:02:b9:9d:5b:16:a0:85:be:09:89:05:46:a4:a3:
                    f9:26:b4:4b:23:ce:ad:91:2f:d6:92:dd:25:4c:5a:
                    b5:16:e6:2e:88:49:ed:3e:c8:ff:f5:0e:04:d9:78:
                    d6:b3:aa:dd:66:5c:32:30:d4:9d:a0:bb:3f:2b:27:
                    1d:3c:ec:59:85:d6:8b:ae:c7:06:30:c9:b0:6d:62:
                    88:45:96:70:68:db:e5:e3:84:da:4a:0c:02:4f:86:
                    43:a3:33:34:06:e3:dd:08:97:d6:2d:13:36:69:cd:
                    93:cd:8c:ba:34:63:c2:f5:e9:7b:41:41:fa:83:db:
                    81:5e:36:f4:0b:37:db:a0:68:60:98:ac:86:51:93:
                    34:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:83:39:34:C1:0C:CF:F7:2E:E2:33:39:A7:29:33:32:C2:E2:75:2A
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e33322e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:c9:39:5a:61:c8:0b:60:98:ce:48:bf:43:3f:c0:ab:87:03:
         29:28:ed:aa:72:f5:74:c1:46:a2:f6:9a:51:63:9e:2e:59:f6:
         00:83:17:8c:f2:d5:eb:90:ea:cc:d2:53:f4:77:91:e2:f4:60:
         15:96:8b:30:42:0c:78:27:96:33:31:b0:43:85:ef:6b:ab:4b:
         80:e9:f5:59:a5:7c:ab:6a:eb:af:72:3d:7e:49:a7:74:89:97:
         b4:ac:36:18:c8:ee:b3:1b:9c:a2:3a:87:a6:41:8b:0b:69:c7:
         7c:15:c2:bf:50:a9:a8:2b:b7:04:b9:87:7f:06:97:18:17:e2:
         37:24:b4:6d:c9:d1:50:d0:7c:d2:2e:17:87:f4:24:8f:a0:d9:
         75:f2:ea:64:04:06:7f:3e:27:b5:d3:12:6d:d6:05:26:ca:91:
         03:2d:24:1c:2c:89:62:96:3b:05:f4:b7:2e:6f:e8:34:da:2a:
         4a:db:7a:77:c9:f1:14:e4:80:b6:84:0d:c0:b5:f9:3c:ff:d8:
         b7:84:a3:03:35:10:b9:ca:59:fa:ec:7b:ce:85:aa:03:c4:a1:
         c2:b0:95:80:ac:76:d0:a3:72:7d:2e:b6:ca:ca:d8:07:57:70:
         ad:80:37:8e:46:20:5c:b3:6b:e9:11:f4:27:d2:dd:08:88:7e:
         96:60:fa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:44:11 2026 by rpki-client