Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa
File:                     34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          X1XBrJsS49WZ6bG4bL3EOgaPFPPikSE/xQlm1+RZYr8=
Subject key identifier:   FA:15:CB:70:73:69:F5:ED:86:B6:80:E3:98:08:D6:26:4E:8B:3E:37
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       4277F739E6791E8EBFDC9184282171493EBDA0A1
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa
Signing time:             Sat 06 Jun 2026 15:50:39 +0000
ROA not before:           Sat 06 Jun 2026 15:45:39 +0000
ROA not after:            Sat 05 Jun 2027 15:50:39 +0000
asID:                     134543
IP address blocks:        45.249.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:77:f7:39:e6:79:1e:8e:bf:dc:91:84:28:21:71:49:3e:bd:a0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 15:45:39 2026 GMT
            Not After : Jun  5 15:50:39 2027 GMT
        Subject: CN=FA15CB707369F5ED86B680E39808D6264E8B3E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:3e:e0:5b:6c:84:a0:be:35:14:e2:d2:c2:
                    dd:97:07:af:d9:4c:11:75:21:c8:72:92:6f:d0:70:
                    8c:95:b0:08:3d:84:62:4f:89:ee:bc:b2:8c:14:41:
                    9c:03:b1:80:ca:53:6a:78:4c:f0:22:3e:f1:90:1d:
                    89:06:67:75:af:a5:84:fc:ec:66:8c:66:ea:c7:cb:
                    10:84:84:b8:b3:c0:14:37:6f:8f:65:cd:13:f2:7e:
                    e4:2b:37:32:f6:77:87:4c:53:8d:c3:89:ca:a7:ed:
                    97:87:51:f5:e5:d8:90:3f:23:45:80:55:99:9b:da:
                    ed:d2:29:35:a3:d9:3f:cc:86:3d:af:d8:31:e2:ab:
                    67:9e:85:6e:6b:58:7c:33:c8:4c:d5:91:c3:62:01:
                    cb:61:6a:cd:86:9f:e5:26:dd:eb:56:a1:ed:1f:8e:
                    77:df:75:d0:66:b0:4d:72:61:3e:e6:5b:56:80:6e:
                    4c:59:fc:94:51:50:ea:50:a9:03:2f:4b:17:d5:e9:
                    bd:2a:da:c5:16:d3:46:b2:31:e6:94:5e:a0:ab:3c:
                    ed:01:26:c0:02:75:a3:a7:5a:90:e1:84:0b:b9:ca:
                    4c:65:f1:18:4e:af:f1:11:59:66:5f:59:10:fd:55:
                    04:d6:33:a1:41:87:a8:54:94:9b:50:81:62:90:ec:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:CB:70:73:69:F5:ED:86:B6:80:E3:98:08:D6:26:4E:8B:3E:37
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:de:79:e7:24:d4:4f:07:f5:ea:da:3a:82:06:92:9e:7e:cf:
         e2:31:53:2a:d5:a7:96:c9:5e:fd:d1:8a:30:ac:a8:93:4a:09:
         96:1e:69:cb:7b:3e:3c:33:9d:2c:2b:b8:b1:a2:82:f1:f6:81:
         c3:3c:8c:ff:ff:46:7f:c9:e5:e3:a0:79:6a:5c:37:6d:a6:8a:
         17:ac:15:80:6c:d4:86:62:be:d5:5c:41:47:36:67:49:af:5d:
         2a:d7:39:77:58:a6:f9:b0:c7:e7:05:dd:60:90:b1:3b:e6:df:
         5d:0f:e4:1d:3e:09:10:d2:6f:fc:55:6c:0a:57:aa:b4:45:f6:
         f9:f0:91:7b:ea:01:24:29:14:bc:1a:0a:54:2e:1f:f5:88:bc:
         e3:e5:c9:2c:32:36:0e:1a:d6:c7:b0:99:0b:52:2d:ea:67:96:
         e1:76:b4:40:b4:92:f7:39:74:73:82:cf:5c:f5:a9:da:22:8f:
         b8:9e:b1:cb:d3:22:d1:99:87:f1:ae:13:77:88:58:c2:71:62:
         07:5f:4d:20:24:6a:12:fb:8b:b3:2f:1d:23:ae:1d:e9:c5:ea:
         21:df:3d:30:06:f2:c0:2b:e3:bc:51:d5:f6:8c:73:78:d8:0e:
         df:cd:ad:9f:c3:e4:9c:06:15:10:28:f3:8a:9c:ad:38:e8:c0:
         7c:20:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:18:31 2026 by rpki-client