Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35352e302f32342d3234203d3e203633353939.roa
File:                     34352e3235312e35352e302f32342d3234203d3e203633353939.roa (raw, json)
Hash identifier:          Jeg+X5mimydK7xcUiFtmKKbOa2PTH3bkxmXeoztyTKI=
Subject key identifier:   02:98:C5:27:F8:CF:8A:F0:89:76:E0:96:8F:A7:F2:8C:7F:62:B8:71
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       7AFA20953C18832469D9E12C3C179EAD3290C355
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35352e302f32342d3234203d3e203633353939.roa
Signing time:             Thu 30 Apr 2026 07:05:04 +0000
ROA not before:           Thu 30 Apr 2026 07:00:04 +0000
ROA not after:            Thu 29 Apr 2027 07:05:04 +0000
asID:                     63599
IP address blocks:        45.251.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fa:20:95:3c:18:83:24:69:d9:e1:2c:3c:17:9e:ad:32:90:c3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: Apr 30 07:00:04 2026 GMT
            Not After : Apr 29 07:05:04 2027 GMT
        Subject: CN=0298C527F8CF8AF08976E0968FA7F28C7F62B871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:3b:9f:99:d7:2f:30:a6:d0:88:3f:8a:32:
                    b7:af:73:bd:a8:78:4c:ce:7e:87:e5:e2:b7:a0:05:
                    36:1d:70:45:07:45:cb:f9:d8:b2:7a:e8:40:d2:7c:
                    38:7d:b6:95:ac:b8:e4:25:96:ec:87:63:7e:d9:df:
                    2a:23:4d:4e:fa:23:0a:94:1a:66:a7:b9:ff:4c:a5:
                    ae:01:27:bd:10:dc:2a:e2:cd:d8:85:af:15:32:e1:
                    cc:72:1b:1c:46:17:fc:b6:c1:b2:63:d7:8b:6b:7f:
                    92:b9:0f:46:ff:1e:8b:b8:34:a2:41:5e:0a:23:07:
                    1d:f5:79:9e:6f:69:9c:1b:9f:90:83:8c:bf:d5:4f:
                    52:eb:44:0a:bd:58:8a:89:d6:3b:e5:76:05:47:65:
                    e1:72:fd:4b:8f:de:e5:8a:28:fa:04:b0:ca:d6:a6:
                    83:8e:f6:06:6b:70:9e:7b:84:73:ae:5f:52:e3:4c:
                    14:42:b7:d3:32:6c:d1:c8:0e:84:33:a6:43:ee:0b:
                    2b:79:f8:93:c7:05:81:51:47:9a:44:7b:bd:c6:07:
                    bd:34:82:0a:34:45:12:02:e7:ff:d1:85:23:26:46:
                    b0:6c:67:5e:7b:55:39:ac:74:e3:e6:05:91:e0:d9:
                    84:8a:d0:fd:b7:0b:24:87:da:9b:0a:de:f4:15:4d:
                    31:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:98:C5:27:F8:CF:8A:F0:89:76:E0:96:8F:A7:F2:8C:7F:62:B8:71
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35352e302f32342d3234203d3e203633353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:af:f4:ec:53:4b:7a:53:bc:a1:bc:99:92:e7:c1:94:1a:85:
         b7:6f:dd:0b:b6:3f:a2:3a:97:d6:ea:27:b3:68:23:79:b0:a4:
         c6:0d:5a:ec:88:00:c2:f2:e5:7f:91:24:78:8f:0e:76:27:81:
         26:b2:71:a7:d8:06:53:cc:1e:e8:49:3d:04:7e:68:93:ff:f9:
         f2:f8:96:63:a8:ba:18:89:c4:c7:fe:b3:68:28:bd:35:10:3b:
         66:25:31:4f:0a:1f:6c:ee:bd:04:1c:7c:9f:26:a5:1f:63:e8:
         07:a1:05:1c:7a:2c:6f:16:23:f0:2b:98:86:db:34:fb:47:a9:
         9a:b5:71:e5:81:9e:d2:e4:2e:61:a5:c2:92:ea:ed:7b:06:02:
         48:3a:33:55:33:15:39:22:29:76:24:62:94:20:63:4b:81:81:
         63:84:31:c0:66:22:72:9a:49:4d:d3:80:47:d2:4c:9c:c6:bb:
         c3:f6:13:93:39:f8:68:2e:fd:6f:45:d2:e5:4f:51:df:e3:db:
         90:41:d4:2f:19:67:da:6e:1d:d1:f7:5a:bd:78:ed:bc:e0:d8:
         e2:5e:58:65:11:a6:03:f6:b6:42:98:95:c8:cf:22:dd:1b:12:
         1d:fb:cb:57:65:fc:11:76:45:8d:9f:15:96:72:01:ca:b0:a8:
         85:14:27:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:56:45 2026 by rpki-client