Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/34352e3131332e34302e302f32322d3234203d3e203337393633.roa
File:                     34352e3131332e34302e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier:          RYG1LzDNVXadniGjV2YPBkb1yZ+D8ilLeSbEwZV6Eak=
Subject key identifier:   EB:5B:CB:40:90:75:81:13:73:B7:D8:10:C1:A9:58:2E:E5:0D:78:95
Certificate issuer:       /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial:       4CF79DA547B0C739854BB1F9CA06BAE67B716CBD
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/34352e3131332e34302e302f32322d3234203d3e203337393633.roa
Signing time:             Wed 25 Mar 2026 02:03:08 +0000
ROA not before:           Wed 25 Mar 2026 01:58:08 +0000
ROA not after:            Wed 24 Mar 2027 02:03:08 +0000
asID:                     37963
IP address blocks:        45.113.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 09:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f7:9d:a5:47:b0:c7:39:85:4b:b1:f9:ca:06:ba:e6:7b:71:6c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
        Validity
            Not Before: Mar 25 01:58:08 2026 GMT
            Not After : Mar 24 02:03:08 2027 GMT
        Subject: CN=EB5BCB409075811373B7D810C1A9582EE50D7895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:a1:b3:65:fa:55:5d:41:70:4d:18:cd:95:
                    79:7f:d3:89:d0:f8:93:ff:cc:86:5b:02:ae:cc:da:
                    77:b6:54:58:94:48:9e:86:cf:c7:12:24:ea:7a:02:
                    6b:15:2e:a7:63:05:6c:af:0a:06:6f:63:de:6f:aa:
                    56:79:6d:e6:75:20:1b:c8:2d:e3:5f:3f:ab:20:65:
                    68:bc:b9:46:e3:f6:69:66:c7:e9:f0:9a:3a:a8:c4:
                    2f:cf:36:8f:f6:2b:76:84:f2:66:80:12:0d:77:e1:
                    16:89:17:ba:17:8a:97:a2:16:a5:90:dd:c4:da:92:
                    8c:e0:d3:e0:09:8a:f4:ec:1f:24:7d:48:e9:e5:25:
                    4a:05:4d:3c:4b:d2:87:9f:f0:49:f9:f3:83:f4:15:
                    19:5f:30:2d:42:3c:f1:a8:8c:4e:40:eb:2f:8d:16:
                    00:ad:85:60:3a:f5:e9:88:0d:fe:88:59:4f:b6:d2:
                    62:d0:96:2c:10:4b:dd:c8:59:4d:13:72:02:8a:aa:
                    18:c7:17:97:9d:3f:a6:0f:32:e5:e0:d5:9f:77:1d:
                    e7:1f:55:41:0f:c5:86:dc:d5:e2:b1:50:d9:4d:75:
                    86:52:9b:c5:90:40:b1:2a:d9:b1:33:d6:68:5e:29:
                    47:90:51:e4:ec:25:4d:7b:3d:54:b6:18:fa:aa:40:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5B:CB:40:90:75:81:13:73:B7:D8:10:C1:A9:58:2E:E5:0D:78:95
            X509v3 Authority Key Identifier:
                keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/34352e3131332e34302e302f32322d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:70:5d:98:2f:58:b0:cf:fd:2f:fb:7a:a0:3d:fa:a1:0b:85:
         81:28:23:49:30:3b:e3:98:39:cb:87:9d:52:eb:70:96:39:ec:
         d6:82:08:cd:51:f9:b8:fe:c3:3d:12:19:b6:1d:ab:ce:78:5e:
         1e:60:6a:5b:75:b4:ed:a6:10:e0:19:65:ec:5a:fc:58:a6:89:
         1a:e5:85:9d:58:92:43:4e:f9:c8:3b:dd:d0:c8:44:62:c1:bd:
         b8:d0:2c:a5:0d:91:24:38:28:47:b0:76:cb:ba:cc:8d:2b:3a:
         54:ce:c9:2a:69:5a:43:67:14:40:d2:16:11:67:44:64:1e:66:
         58:90:70:a1:a3:fa:21:70:7a:fc:fc:35:80:7d:87:6b:24:01:
         8f:2d:1e:4a:62:55:b0:5a:7a:a6:f5:47:34:05:e5:c4:25:e2:
         c0:cc:47:15:5c:f6:4b:1d:93:a3:20:9d:c5:22:05:56:92:4a:
         ea:5e:f6:1a:28:bf:48:e8:6b:bb:cf:4a:cc:ac:32:bb:54:92:
         6d:c1:bf:52:e4:2a:3f:d2:ca:22:75:85:7d:ae:aa:44:e1:c5:
         76:ee:de:76:6a:79:70:e4:43:56:e9:6b:8c:2d:99:c0:ac:fd:
         f2:56:2c:fe:f3:65:da:a1:de:02:5d:5e:49:ba:c1:fc:fe:ca:
         d1:d0:b5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:25:40 2026 by rpki-client