Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32342d3234203d3e203633363535.roa
File:                     34352e3234392e3231322e302f32342d3234203d3e203633363535.roa (raw, json)
Hash identifier:          zkuxppiZoNATV/cOEox1oUDTUtUjB9UKsr/kxX0NfaY=
Subject key identifier:   3D:52:81:E7:1B:56:38:01:84:11:35:FE:FB:5A:ED:42:02:74:79:D1
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       04F6545AFEFEA88B648CF0B0B483792AEF037933
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32342d3234203d3e203633363535.roa
Signing time:             Sat 06 Jun 2026 15:50:40 +0000
ROA not before:           Sat 06 Jun 2026 15:45:40 +0000
ROA not after:            Sat 05 Jun 2027 15:50:40 +0000
asID:                     63655
IP address blocks:        45.249.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f6:54:5a:fe:fe:a8:8b:64:8c:f0:b0:b4:83:79:2a:ef:03:79:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 15:45:40 2026 GMT
            Not After : Jun  5 15:50:40 2027 GMT
        Subject: CN=3D5281E71B563801841135FEFB5AED42027479D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:b0:26:52:a4:6c:8e:99:a7:b5:9e:5b:5c:
                    f6:8a:59:12:1e:88:fb:8c:34:52:75:33:50:5c:42:
                    e9:94:15:e9:88:e8:27:07:aa:4c:d8:e4:78:7b:12:
                    36:c6:0c:04:0e:6f:42:23:c4:80:6d:1d:ae:07:06:
                    d7:f2:7d:4e:85:26:67:e8:67:eb:07:85:95:92:fa:
                    66:78:60:01:a9:f9:87:e7:64:d8:70:53:2e:bd:f6:
                    a4:98:ee:cd:6c:9a:9c:a6:c6:47:93:6d:be:6c:10:
                    23:86:27:bd:8d:76:87:5e:f2:67:bd:f2:86:b3:f9:
                    5d:14:7c:bc:9f:95:4e:f6:05:b6:b4:ed:42:aa:f6:
                    4f:9d:81:46:a0:e2:9e:47:cf:ce:0d:2b:30:b6:d3:
                    7c:ad:ba:43:76:7a:cc:95:9d:43:63:f5:aa:2d:0c:
                    c4:5a:b1:54:ba:c6:a0:90:89:ba:f0:90:21:22:ba:
                    ec:24:ab:81:7e:85:a3:6c:7c:d8:ce:f9:8e:f7:cc:
                    f6:e7:8b:3e:6e:49:7d:97:09:7c:92:ba:21:ca:52:
                    a8:98:49:9a:a3:c0:e8:88:45:f0:7f:ef:fb:30:68:
                    14:84:39:fb:8b:6b:4c:ee:b1:b4:0e:bf:e9:da:c6:
                    fa:f4:15:8e:cb:28:3e:9f:c7:04:9d:bf:91:51:90:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:52:81:E7:1B:56:38:01:84:11:35:FE:FB:5A:ED:42:02:74:79:D1
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32342d3234203d3e203633363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:78:f3:f1:0f:76:58:99:27:92:85:fd:ca:78:32:bb:d1:c7:
         d5:b2:0a:16:55:7b:01:09:b9:c2:9e:97:7e:57:8b:8e:57:13:
         92:85:e0:f3:61:c6:a9:55:a5:d6:02:74:91:2d:40:ab:06:de:
         9d:9a:de:bd:32:be:df:14:3f:c0:64:94:90:44:6b:e8:00:1f:
         91:24:e8:02:d4:6a:8f:cd:e5:dc:30:62:2b:c3:fd:7d:71:77:
         8d:0a:b5:30:14:b4:1e:c9:8e:c4:a8:80:35:a7:cc:4f:69:73:
         15:e0:20:ff:f2:79:60:de:2f:b7:21:df:2f:82:2e:8a:36:42:
         e2:92:38:2c:d1:74:12:96:9d:7a:56:05:60:3d:fd:22:e2:c7:
         d5:fa:d1:98:02:03:77:39:36:f1:7b:bb:2c:21:78:31:f4:c0:
         4a:30:ae:05:a9:92:25:29:f5:4b:43:0f:47:f0:66:8a:59:fe:
         a7:61:16:4d:2a:ef:ba:34:2b:9a:08:91:5f:b0:7b:50:30:a8:
         89:2a:54:4e:50:e4:94:b5:fc:5f:14:2b:ab:af:5c:82:59:77:
         e7:bc:9e:b8:94:72:18:cf:46:b8:da:12:67:9a:0a:dc:fd:e2:
         b6:50:9e:f8:a0:95:ff:10:6a:bf:71:a1:4f:6f:ff:ee:04:78:
         de:60:4c:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:26:51 2026 by rpki-client