Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/34352e3131392e36302e302f32322d3232203d3e20313333373734.roa
File:                     34352e3131392e36302e302f32322d3232203d3e20313333373734.roa (raw, json)
Hash identifier:          Sm4T6PdlaWK5L2THDkzzGLZz2EgkHdch3D9qDQ6YrT4=
Subject key identifier:   CD:19:FA:1D:DB:ED:62:A0:C6:04:AD:D0:3E:38:8C:70:90:9B:EB:1E
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       65BEA76052B97ED970A563BC5EBB912E0094C8EF
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/34352e3131392e36302e302f32322d3232203d3e20313333373734.roa
Signing time:             Mon 11 May 2026 02:49:04 +0000
ROA not before:           Mon 11 May 2026 02:44:04 +0000
ROA not after:            Mon 10 May 2027 02:49:04 +0000
asID:                     133774
IP address blocks:        45.119.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:be:a7:60:52:b9:7e:d9:70:a5:63:bc:5e:bb:91:2e:00:94:c8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 11 02:44:04 2026 GMT
            Not After : May 10 02:49:04 2027 GMT
        Subject: CN=CD19FA1DDBED62A0C604ADD03E388C70909BEB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:26:a1:e5:af:fb:a3:14:64:9d:cc:89:b0:
                    2f:49:4b:fb:63:79:1e:a8:b5:df:94:8d:b6:5c:5d:
                    27:22:cd:42:4d:c1:18:03:92:0b:c4:39:4a:57:dc:
                    9f:ae:f3:ec:79:05:e2:9e:d0:a9:3d:4a:06:54:9f:
                    00:7f:b6:90:9e:93:99:21:5e:7b:5a:97:42:4c:94:
                    f8:67:50:31:c2:8e:83:83:eb:6b:6e:47:aa:00:4c:
                    bc:8e:2a:b4:ea:9f:fa:44:2a:3e:7a:2d:57:ff:00:
                    62:75:ae:ce:eb:b1:e9:21:0a:2a:bc:c6:00:82:14:
                    34:63:6b:07:a4:5c:b5:fd:66:2e:1d:aa:03:0e:39:
                    ba:3a:35:fe:0f:54:35:fa:2a:f8:af:f5:6f:a2:ea:
                    34:9a:46:0b:25:2a:17:4e:83:50:f0:27:64:bf:e2:
                    af:f7:a0:d4:1f:8d:78:af:ef:26:82:67:1e:b4:48:
                    0e:ef:fc:d7:cd:05:05:fd:38:60:74:fe:24:e5:c7:
                    30:85:9b:6e:d1:0e:d2:b9:1f:e5:d3:c1:51:28:bf:
                    da:f8:1e:8b:b9:47:25:b0:9f:00:f5:3e:4d:8d:e7:
                    4b:0e:d5:cb:33:9c:2f:81:a9:b8:2f:59:3b:6d:23:
                    ba:98:d5:90:79:9a:1d:ee:30:30:4b:4d:04:f1:40:
                    50:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:19:FA:1D:DB:ED:62:A0:C6:04:AD:D0:3E:38:8C:70:90:9B:EB:1E
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/34352e3131392e36302e302f32322d3232203d3e20313333373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.119.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:61:7b:39:1e:c5:a8:4a:69:53:5a:08:f4:3e:d9:da:b4:
         59:ae:7e:28:7a:3f:77:b4:aa:40:a4:a9:84:6b:ba:d8:11:8c:
         66:66:4c:56:df:09:b8:aa:b3:46:0b:86:17:68:f1:c7:09:64:
         90:d2:4f:9c:7f:de:fb:ab:77:03:9c:5b:2c:cc:eb:65:2d:f1:
         4d:bd:57:89:8c:b7:8b:91:64:72:f3:59:2c:33:7f:19:aa:e4:
         d6:d9:d9:89:5f:20:15:8c:03:81:8b:6e:22:16:1a:9f:ea:aa:
         65:13:de:bc:08:4b:8d:0a:87:48:59:7f:29:4e:a4:d1:a5:8d:
         b6:2e:14:3e:77:52:00:21:a7:54:08:45:86:65:a5:00:a3:55:
         a1:81:5f:01:12:93:ce:42:52:be:28:af:fb:b3:11:1f:de:4d:
         9f:28:2d:36:cb:d2:81:40:5f:a2:c8:62:a8:28:8f:27:4d:06:
         d7:ce:c9:c7:a9:08:1b:00:f9:ec:50:6b:e6:9b:25:e0:b2:00:
         83:2b:44:9f:59:bf:2a:a5:82:c3:2b:9e:bc:12:e1:67:20:74:
         82:91:df:c1:4d:9a:86:3b:b9:58:f4:df:e2:42:23:de:a8:11:
         bb:de:cb:46:42:c1:4d:e4:d8:d3:48:9d:cb:31:90:b1:55:41:
         e8:80:36:32
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUZb6nYFK5ftlwpWO8XruRLgCUyO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE
NzgxMDFENDAeFw0yNjA1MTEwMjQ0MDRaFw0yNzA1MTAwMjQ5MDRaMDMxMTAvBgNV
BAMTKENEMTlGQTFEREJFRDYyQTBDNjA0QUREMDNFMzg4QzcwOTA5QkVCMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbHyah5a/7oxRkncyJsC9JS/tj
eR6otd+UjbZcXScizUJNwRgDkgvEOUpX3J+u8+x5BeKe0Kk9SgZUnwB/tpCek5kh
Xntal0JMlPhnUDHCjoOD62tuR6oATLyOKrTqn/pEKj56LVf/AGJ1rs7rsekhCiq8
xgCCFDRjawekXLX9Zi4dqgMOObo6Nf4PVDX6Kviv9W+i6jSaRgslKhdOg1DwJ2S/
4q/3oNQfjXiv7yaCZx60SA7v/NfNBQX9OGB0/iTlxzCFm27RDtK5H+XTwVEov9r4
Hou5RyWwnwD1Pk2N50sO1csznC+BqbgvWTttI7qY1ZB5mh3uMDBLTQTxQFAlAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUzRn6HdvtYqDGBK3QPjiMcJCb6x4wHwYDVR0j
BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0
RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDQ4NzgwOS8wLzM0MzUyZTMxMzEz
OTJlMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3MzczNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAi13PDANBgkqhkiG9w0BAQsFAAOCAQEAKYphezkexahKaVNaCPQ+2dq0
Wa5+KHo/d7SqQKSphGu62BGMZmZMVt8JuKqzRguGF2jxxwlkkNJPnH/e+6t3A5xb
LMzrZS3xTb1XiYy3i5FkcvNZLDN/Gark1tnZiV8gFYwDgYtuIhYan+qqZRPevAhL
jQqHSFl/KU6k0aWNti4UPndSACGnVAhFhmWlAKNVoYFfARKTzkJSviiv+7MRH95N
nygtNsvSgUBfoshiqCiPJ00G187Jx6kIGwD57FBr5psl4LIAgytEn1m/KqWCwyue
vBLhZyB0gpHfwU2ahju5WPTf4kIj3qgRu97LRkLBTeTY00idyzGQsVVB6IA2Mg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:17:47 2026 by rpki-client