Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa
File:                     34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          UWm2lEscXePQ9xWxmXherZFoyJG6dcvQ2KwTIX+Ed3Y=
Subject key identifier:   A3:7E:C5:BB:12:E2:A1:4F:15:35:F6:74:CC:B8:40:17:AC:2D:D5:78
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       180CCC035CF8BCE9F36ED827A7D9273F1CAE3746
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa
Signing time:             Sat 06 Jun 2026 15:50:39 +0000
ROA not before:           Sat 06 Jun 2026 15:45:39 +0000
ROA not after:            Sat 05 Jun 2027 15:50:39 +0000
asID:                     134543
IP address blocks:        45.249.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0c:cc:03:5c:f8:bc:e9:f3:6e:d8:27:a7:d9:27:3f:1c:ae:37:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 15:45:39 2026 GMT
            Not After : Jun  5 15:50:39 2027 GMT
        Subject: CN=A37EC5BB12E2A14F1535F674CCB84017AC2DD578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:46:ce:c6:89:61:9f:9c:24:68:6d:6a:61:
                    1d:00:aa:90:36:9c:d7:82:bf:51:15:ca:16:9c:09:
                    71:62:f0:80:80:31:c9:f0:06:33:62:a9:7f:c7:36:
                    52:7a:51:df:03:8e:7a:e7:75:5e:8f:c2:36:0f:91:
                    55:42:cd:97:f4:b7:1d:a7:3b:eb:bc:68:d4:42:51:
                    a5:ba:3f:49:77:ed:cb:4f:03:3c:f6:50:5f:35:0d:
                    93:f8:cb:7e:fe:23:29:fd:24:50:82:6d:76:e3:56:
                    0a:02:72:0d:1d:db:cb:0b:ee:b2:2c:2e:33:5a:7a:
                    00:6e:f8:56:e8:d9:64:d3:61:47:00:11:d9:93:bc:
                    ae:81:57:10:78:d8:78:e4:fd:7f:ac:d1:9f:bb:8e:
                    db:0f:7f:a7:48:38:44:5a:c7:16:bd:f9:c1:66:00:
                    40:ae:c4:af:7c:f7:d1:7c:e3:a6:cd:ce:1e:59:f6:
                    cb:95:73:91:8a:68:0e:4e:ed:eb:b5:0f:a9:79:22:
                    88:f4:50:97:b0:08:41:31:fd:3f:71:14:2c:da:a6:
                    d1:00:ec:7e:96:d5:f3:b7:5f:df:fd:e2:a2:9d:26:
                    78:29:d7:f6:96:bc:06:10:ed:dc:72:b1:4d:49:7e:
                    c2:be:61:e6:b8:75:1a:fd:87:a4:ad:1f:bc:b7:45:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7E:C5:BB:12:E2:A1:4F:15:35:F6:74:CC:B8:40:17:AC:2D:D5:78
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.249.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e5:7e:15:5c:d4:a1:d4:e1:20:df:3a:4b:3b:4d:cd:38:a2:
         b5:9e:92:7a:ad:2b:be:2e:97:07:da:56:3e:91:1c:1b:2d:f5:
         cd:8a:e7:25:71:79:0b:79:30:c4:aa:72:41:0d:d5:9a:9d:55:
         4c:d1:12:16:82:47:77:3e:92:df:57:a6:d4:88:89:88:4c:9f:
         ec:6f:fb:17:25:27:d5:e9:cc:6a:8d:06:a1:10:2e:8b:0d:f7:
         50:75:e7:6b:93:54:02:11:3f:4a:7c:ba:38:d1:78:13:54:43:
         0f:a2:c3:5f:d5:27:7a:d9:5e:a4:3a:6a:40:9b:d0:6e:d9:11:
         29:45:40:51:4e:e1:69:60:c9:f6:c5:9d:dc:c0:ed:b3:13:cf:
         fa:1d:d9:8d:0a:12:89:c5:cf:bb:e8:14:30:57:f0:88:c0:27:
         23:26:b0:1f:2c:41:79:35:a0:1a:8c:fe:58:c2:ea:3a:ab:14:
         7e:ca:16:89:4a:96:1a:f5:fc:d6:f2:4e:f5:53:ce:46:91:c8:
         5a:33:b0:82:c2:73:15:41:80:7a:cc:95:77:1f:5c:ee:49:b7:
         bd:67:ee:b5:0f:58:e3:cb:04:2a:08:1e:29:7d:2a:89:b3:9b:
         bb:0e:aa:78:87:8d:dd:eb:99:60:76:ba:da:ee:84:06:c9:21:
         23:60:67:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:23:17 2026 by rpki-client