Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/34352e3132342e34342e302f32322d3234203d3e20313333393438.roa
File:                     34352e3132342e34342e302f32322d3234203d3e20313333393438.roa (raw, json)
Hash identifier:          W2W+xhdN9PF6a7mxKiNnIobZLPOTheU9GKZlZMyeevI=
Subject key identifier:   1D:CD:C1:00:1C:AC:A2:F6:12:B5:EC:82:AC:F2:67:19:6A:DD:6B:A8
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       418E99E8591439FE73B4E986C1A4E3CCB0F4F2F8
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/34352e3132342e34342e302f32322d3234203d3e20313333393438.roa
Signing time:             Fri 06 Mar 2026 05:06:25 +0000
ROA not before:           Fri 06 Mar 2026 05:01:25 +0000
ROA not after:            Fri 05 Mar 2027 05:06:25 +0000
asID:                     133948
IP address blocks:        45.124.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 20:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8e:99:e8:59:14:39:fe:73:b4:e9:86:c1:a4:e3:cc:b0:f4:f2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: Mar  6 05:01:25 2026 GMT
            Not After : Mar  5 05:06:25 2027 GMT
        Subject: CN=1DCDC1001CACA2F612B5EC82ACF267196ADD6BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:46:76:40:5c:f7:94:1b:d1:e5:57:30:e6:
                    1c:75:0b:7e:15:9b:4d:e3:bf:a9:6c:57:96:5d:3b:
                    d9:0c:02:c9:57:0a:7e:2d:f2:70:83:14:6b:7f:1c:
                    81:dd:35:45:d4:96:00:08:1f:41:9f:a0:e6:50:cb:
                    6a:55:6a:4a:1c:b6:87:b9:16:40:40:75:5a:f2:70:
                    3d:da:fe:c5:24:55:14:48:de:54:fc:a9:de:a7:58:
                    da:3f:d6:93:73:d8:69:2a:35:8b:57:99:9a:d8:55:
                    1b:7e:5e:91:1e:80:46:e1:c8:cf:9b:29:03:80:f7:
                    65:b6:57:77:5f:93:2f:78:da:13:07:88:f6:4a:a1:
                    8b:83:db:d7:cf:0e:ce:8e:bb:30:db:bc:44:54:85:
                    09:39:05:49:af:c0:0f:f9:83:e2:e8:43:ab:6c:25:
                    03:f0:f2:4b:80:41:5b:f9:0e:17:18:7a:bc:7c:52:
                    a5:25:50:d4:7e:77:f7:76:fd:ef:5e:82:c5:62:f1:
                    11:97:eb:c8:db:b1:47:55:98:e8:6f:74:18:1b:58:
                    0d:d1:41:a1:e8:a7:2f:cf:7a:bc:57:28:0b:cd:10:
                    d1:e0:45:3d:6e:af:d7:fb:d6:68:72:37:98:6b:35:
                    06:87:ac:6d:69:78:e1:b4:68:27:e5:bc:ea:31:f6:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CD:C1:00:1C:AC:A2:F6:12:B5:EC:82:AC:F2:67:19:6A:DD:6B:A8
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/34352e3132342e34342e302f32322d3234203d3e20313333393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:c9:3b:84:6d:b8:42:4a:60:71:a5:77:26:02:7e:03:0b:81:
         ee:12:f1:17:08:c6:2b:89:4d:32:f0:10:90:a5:b3:5f:41:8a:
         51:2d:12:d7:36:da:20:7e:bd:b5:bd:53:88:7d:9b:8d:03:7e:
         68:22:0f:1e:b8:9a:fa:59:9e:5e:6b:c6:5f:3f:c4:f0:2c:a9:
         18:a5:f9:49:73:10:59:e7:61:04:e4:34:1d:fd:07:82:d4:5d:
         17:14:69:83:72:52:78:5b:03:ef:1c:7a:ee:ae:ce:95:85:91:
         fb:57:b9:34:4d:bb:25:1d:f0:67:b1:39:a3:03:e9:a2:7b:ce:
         46:28:d6:48:70:cd:20:18:ac:89:ab:53:ae:33:0e:92:95:74:
         20:42:f5:36:08:b3:b4:55:d7:2d:d4:52:fb:42:82:20:4e:0d:
         76:e3:b3:e2:ea:89:6b:a2:98:7b:07:8b:f5:03:8b:20:da:22:
         53:f9:b3:51:00:1f:d4:5c:1e:d1:68:6b:f1:b1:d0:06:4a:da:
         21:d7:8d:91:f0:54:90:94:2e:e1:5a:c3:98:9c:04:d9:d0:95:
         09:0b:e2:2a:fe:c1:34:62:9b:38:3e:00:8a:08:ab:5d:d5:4e:
         34:d3:f4:40:b8:a9:dc:24:c5:01:93:89:6f:59:0b:47:0e:55:
         57:e4:6f:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:15:38 2026 by rpki-client