Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33352e302f32342d3234203d3e20313336393538.roa
File:                     34352e3131362e33352e302f32342d3234203d3e20313336393538.roa (raw, json)
Hash identifier:          peLFbPaYay0LuzMzJlXfkUbU5TVbXKkiA9QhHEtSqvo=
Subject key identifier:   4C:15:7C:AE:D5:7E:84:AF:BC:56:BA:CE:2C:91:48:CB:2C:7B:06:46
Certificate issuer:       /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial:       4A9A10874EAC8830BB71F7D47AF83F4244257E4F
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33352e302f32342d3234203d3e20313336393538.roa
Signing time:             Sat 09 May 2026 01:56:50 +0000
ROA not before:           Sat 09 May 2026 01:51:50 +0000
ROA not after:            Sat 08 May 2027 01:56:50 +0000
asID:                     136958
IP address blocks:        45.116.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9a:10:87:4e:ac:88:30:bb:71:f7:d4:7a:f8:3f:42:44:25:7e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
        Validity
            Not Before: May  9 01:51:50 2026 GMT
            Not After : May  8 01:56:50 2027 GMT
        Subject: CN=4C157CAED57E84AFBC56BACE2C9148CB2C7B0646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:95:ff:de:ac:5f:97:85:0e:12:26:2c:91:6a:
                    af:3d:b8:e1:68:52:48:04:57:aa:c5:a6:f8:99:36:
                    cb:e5:c6:3c:ff:30:6f:d9:8d:14:6f:f8:26:13:cd:
                    a6:00:4a:df:67:d4:b8:14:35:4e:11:6f:be:a0:ef:
                    aa:00:fd:c4:7c:88:e7:60:a5:e2:b4:55:67:a2:72:
                    ca:a1:fa:2f:c5:b2:92:53:39:03:d5:de:27:da:9f:
                    dd:50:b6:a8:ff:c0:9b:ac:a3:a5:4c:af:0c:69:8e:
                    48:db:5c:2e:91:95:4e:28:23:22:af:ff:0c:52:57:
                    00:5a:22:f2:80:86:e3:01:ff:86:88:96:90:ef:a9:
                    50:47:29:18:f0:fb:53:cd:4e:aa:37:43:1d:52:d3:
                    83:8d:cc:95:fb:f8:32:64:fe:83:62:20:3c:1d:59:
                    23:be:93:d8:f4:ae:c9:d3:10:d1:c6:92:65:b9:11:
                    71:dd:6d:df:ff:e8:00:7e:44:71:e8:07:89:c6:a7:
                    d7:aa:61:18:96:5c:8a:c8:91:3d:3c:57:5b:a8:2d:
                    b6:e8:2e:05:43:1a:9b:28:a5:0a:43:f5:df:2a:5b:
                    25:de:cc:b8:b3:cd:4e:8e:03:52:2e:67:b2:6b:04:
                    e7:a6:fc:ca:4f:7e:92:25:08:e6:5b:ae:86:af:e2:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:15:7C:AE:D5:7E:84:AF:BC:56:BA:CE:2C:91:48:CB:2C:7B:06:46
            X509v3 Authority Key Identifier:
                keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33352e302f32342d3234203d3e20313336393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:a1:da:c4:90:b5:a8:b7:59:02:5c:ca:90:45:5d:1c:d3:
         d2:a9:2c:92:14:96:ee:a0:f6:66:50:a6:f1:51:21:f2:4b:03:
         fa:1b:e9:a8:1b:9f:c5:b9:18:68:bb:09:18:97:5b:2e:27:ab:
         9f:da:3a:39:c7:50:d8:a7:73:31:4b:eb:90:c2:13:90:2c:84:
         8e:f8:e9:49:c2:4f:7f:7e:9e:1a:f1:48:07:f7:71:9e:37:92:
         f1:8a:18:2c:4f:c9:c0:c3:91:a8:48:00:ee:7b:98:8e:4a:91:
         a9:31:11:71:15:0e:16:ec:e4:92:52:39:09:7e:69:7b:c7:e8:
         82:30:87:ca:c6:97:b0:1e:28:f9:e5:4d:81:0e:f7:21:82:84:
         96:47:88:e3:03:6d:62:dd:32:3f:b5:73:cb:90:94:b8:b9:5b:
         c1:69:ff:e1:26:b0:d9:d7:2e:b5:54:22:d0:38:60:ac:ee:b3:
         cd:25:d4:07:86:2c:7b:46:5d:a2:17:53:de:1d:32:6a:17:6d:
         df:dd:86:53:80:e2:a2:38:56:2e:ec:35:ef:d9:75:a8:28:fd:
         0e:6f:48:ca:55:68:fd:65:33:cc:cc:9b:5c:9e:32:57:a8:7b:
         3f:7b:f6:20:59:d5:b1:9d:6a:db:60:b2:38:19:73:04:f2:1c:
         80:aa:60:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:58:43 2026 by rpki-client