Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa
File:                     34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa (raw, json)
Hash identifier:          UcuGXuPb0hXyj0b7YXGKUEIL6kjhnor7fhftIIHVK9k=
Subject key identifier:   41:87:BD:6B:41:99:53:B8:F3:87:79:63:83:3C:1D:A5:8D:91:C3:CE
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       463F146D12AE00D958D8FE11082F75508C10BCF1
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa
Signing time:             Sat 06 Jun 2026 15:50:40 +0000
ROA not before:           Sat 06 Jun 2026 15:45:40 +0000
ROA not after:            Sat 05 Jun 2027 15:50:40 +0000
asID:                     134543
IP address blocks:        45.249.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3f:14:6d:12:ae:00:d9:58:d8:fe:11:08:2f:75:50:8c:10:bc:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 15:45:40 2026 GMT
            Not After : Jun  5 15:50:40 2027 GMT
        Subject: CN=4187BD6B419953B8F3877963833C1DA58D91C3CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:33:36:0a:bd:c1:81:4a:7a:7b:a9:48:75:
                    b1:bc:1b:fe:69:58:66:a5:19:c1:7f:20:57:c8:80:
                    7d:ec:25:86:02:12:53:58:b0:9d:68:34:ee:c9:e3:
                    19:01:35:36:91:c3:ab:79:12:f5:c3:1d:ea:28:c1:
                    f0:cb:5d:f4:80:1d:f3:bc:4f:45:3f:be:8b:67:6a:
                    28:e5:a7:1c:c9:96:74:b8:48:5f:60:b0:45:99:00:
                    4b:bf:01:18:cd:83:91:3c:43:7f:fe:1d:ce:11:ac:
                    77:1d:e9:c6:db:d0:b1:2f:d9:be:26:17:1f:05:9d:
                    cd:f4:38:ce:4a:a7:b5:7c:f4:a1:bb:9c:26:81:1d:
                    97:4d:27:b2:8d:ba:12:42:c1:1b:f7:83:6e:b5:fa:
                    e1:dd:d8:58:f2:ac:74:dd:6f:71:3d:67:14:f1:c3:
                    6f:91:d8:2a:3d:bf:18:d0:83:d9:de:b0:5f:83:7c:
                    da:50:12:d3:4e:ca:95:3d:db:72:4f:81:d6:ea:9a:
                    ea:ce:f4:36:85:77:3d:4e:93:fc:30:1d:ae:1c:5f:
                    20:ac:66:50:56:3e:c5:57:2c:c6:a1:86:97:c7:95:
                    14:2e:9b:52:1d:bf:20:cb:ed:bd:89:56:90:db:f6:
                    4c:d7:c9:69:00:14:67:2a:af:6e:24:4b:7c:f2:57:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:87:BD:6B:41:99:53:B8:F3:87:79:63:83:3C:1D:A5:8D:91:C3:CE
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:ed:ec:4e:e0:c1:d4:84:9f:4e:f1:42:0a:e1:c5:90:e2:0c:
         26:53:ff:c4:d5:d2:b0:b9:31:23:30:1d:b0:1c:de:44:cf:69:
         62:27:0b:8f:47:50:29:dd:69:f6:f5:ba:a4:ed:c2:91:64:9f:
         ec:fc:53:55:b7:ca:d2:1b:6b:8b:a2:a7:16:b1:3a:f5:eb:e8:
         ea:7c:9b:7e:e5:53:b4:8a:bc:40:0a:cd:77:64:b1:91:62:19:
         3a:ca:8b:c3:ed:86:a9:a6:8e:2b:03:8f:65:08:63:c8:fc:9f:
         46:f4:8d:77:f1:20:e7:c7:51:cf:e7:b4:b0:da:07:5c:65:b7:
         29:83:1a:a3:0d:66:16:ed:1d:d2:6b:4c:d5:c5:5d:b6:95:85:
         1f:34:43:68:76:4d:ad:d8:31:2b:46:3d:41:72:07:f6:ff:b3:
         c2:bc:17:ed:3b:d6:ef:14:4f:c0:1f:d2:b0:0c:c8:02:c9:12:
         9d:e7:c9:e3:24:c8:d2:30:73:56:eb:4a:68:09:e4:55:59:fe:
         0c:92:bf:61:e6:c1:e0:a3:99:3f:bb:d9:41:76:b2:35:a3:3c:
         05:6b:24:f5:2f:6a:a5:f5:00:69:88:4e:0e:47:73:0a:42:e7:
         ab:45:22:b6:39:d4:3a:47:51:de:31:c3:51:4f:17:8c:b9:b9:
         70:6b:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:58 2026 by rpki-client