Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa
File:                     34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          jzCGGkLFQm34ItGKVukkr/wAEXg4rSDR9Fl7iCV+EJQ=
Subject key identifier:   4E:68:91:B2:28:D9:CA:B6:8B:4D:61:8F:58:D6:0D:7D:42:5E:2D:60
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       05E8385E2EDD8C196CFAC9953ED620E4DB9AC3E6
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa
Signing time:             Sat 06 Jun 2026 15:50:39 +0000
ROA not before:           Sat 06 Jun 2026 15:45:39 +0000
ROA not after:            Sat 05 Jun 2027 15:50:39 +0000
asID:                     134543
IP address blocks:        45.249.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e8:38:5e:2e:dd:8c:19:6c:fa:c9:95:3e:d6:20:e4:db:9a:c3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 15:45:39 2026 GMT
            Not After : Jun  5 15:50:39 2027 GMT
        Subject: CN=4E6891B228D9CAB68B4D618F58D60D7D425E2D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:01:8c:7d:c1:7d:ea:74:3f:46:08:24:cb:71:
                    b8:d3:33:f3:a2:78:2d:e4:ae:71:be:ce:2b:54:10:
                    b8:26:39:78:cd:a8:c9:dd:b5:ba:d6:ce:17:90:f9:
                    22:e9:f8:0b:e6:51:c9:cb:c2:ce:5e:cc:be:cc:70:
                    48:1f:43:71:e8:2f:2e:e3:3e:ac:cb:ad:96:8c:3a:
                    4c:a6:a9:66:93:ff:17:d8:b6:dd:22:9c:2c:15:1e:
                    f6:ab:dc:ac:ca:b0:04:f6:c8:82:e0:e2:2c:1c:14:
                    9a:52:3f:a7:25:96:20:56:d8:de:18:53:3b:85:87:
                    ba:9d:9a:f0:2b:c0:25:b5:c4:af:3a:4d:bd:68:7b:
                    21:cd:24:18:10:93:e8:af:32:34:80:ef:f8:76:0f:
                    d4:32:04:06:6a:7a:5d:73:c5:df:b0:9e:20:8e:3f:
                    ce:3d:1c:80:61:f0:a2:38:d2:b3:5f:f6:3a:8d:e9:
                    22:49:bb:5f:8b:b0:4b:60:03:c2:d3:c7:d1:13:74:
                    01:32:0a:cb:1b:a5:f7:de:98:0b:e1:a2:f5:23:f3:
                    9c:92:2f:81:ff:b8:b1:eb:85:2e:6e:96:de:f3:01:
                    7d:55:42:07:b5:f4:46:c7:71:83:22:b1:e3:ae:ac:
                    be:09:07:5c:fb:31:33:60:5d:78:52:04:8d:9f:77:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:68:91:B2:28:D9:CA:B6:8B:4D:61:8F:58:D6:0D:7D:42:5E:2D:60
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:81:6d:2f:40:04:c9:ee:d9:31:d6:c7:01:03:54:9f:de:9e:
         76:b8:45:b9:24:a3:00:e0:d6:2b:e7:fc:64:eb:39:e7:5b:81:
         b3:8b:0a:9b:b0:85:e3:1f:15:67:74:f4:ce:aa:04:61:74:96:
         d5:22:8e:dd:ae:cf:aa:ab:1f:7a:28:03:56:84:06:ab:80:5f:
         8a:47:22:f9:66:e5:6e:82:62:35:6e:6e:6a:a1:e5:16:a7:a9:
         cd:a3:d1:d7:38:11:a3:00:b0:e7:5c:15:21:60:81:9b:28:9e:
         b3:cb:e0:dc:70:51:7b:10:44:11:68:dd:f6:c6:b9:1a:8b:0d:
         11:a9:c2:d6:78:b9:ca:dd:80:de:71:99:7c:ad:13:da:5c:0e:
         a3:76:1e:2b:8a:1a:13:5f:e4:7d:66:02:67:4e:5e:57:18:09:
         68:7a:45:f6:4d:ef:f3:14:be:19:8e:4f:23:44:06:d6:de:ef:
         28:5f:63:48:37:fc:af:4f:32:a4:9a:a5:92:ad:97:2b:3c:b6:
         a7:20:19:32:93:2a:71:89:98:5d:ee:fb:b9:d9:b8:6b:5f:dc:
         e1:5d:9b:d4:02:8f:f6:19:8e:b9:37:8f:c1:5a:1f:16:52:c6:
         7b:ee:c7:63:cb:91:47:6a:a5:bb:39:c0:c9:cd:b3:a3:e6:7a:
         5b:5d:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:12:35 2026 by rpki-client