Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/34352e3131362e3130302e302f32322d3232203d3e203233363530.roa
File:                     34352e3131362e3130302e302f32322d3232203d3e203233363530.roa (raw, json)
Hash identifier:          w5GVmCPvagQwJruDKnWKoFjQ/Sy9hjjY2UMdNO5sgZI=
Subject key identifier:   D1:36:1A:50:FC:0C:09:8C:D4:19:C3:76:40:D6:A8:A9:7B:B5:1A:00
Certificate issuer:       /CN=128A765795FE2957B26881E441F8240B52742BED
Certificate serial:       58B89C90B3C308647FE0CC64394F5EC1FCB29B81
Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/34352e3131362e3130302e302f32322d3232203d3e203233363530.roa
Signing time:             Fri 08 May 2026 10:07:02 +0000
ROA not before:           Fri 08 May 2026 10:02:02 +0000
ROA not after:            Fri 07 May 2027 10:07:02 +0000
asID:                     23650
IP address blocks:        45.116.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b8:9c:90:b3:c3:08:64:7f:e0:cc:64:39:4f:5e:c1:fc:b2:9b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128A765795FE2957B26881E441F8240B52742BED
        Validity
            Not Before: May  8 10:02:02 2026 GMT
            Not After : May  7 10:07:02 2027 GMT
        Subject: CN=D1361A50FC0C098CD419C37640D6A8A97BB51A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:31:eb:52:72:23:b7:ba:82:e2:75:89:ac:
                    09:52:c5:01:44:9c:8d:fe:4e:f2:bc:f5:ed:7a:80:
                    fb:d9:ff:54:f9:18:6e:31:10:a2:4b:f4:cb:88:ca:
                    0f:4b:5e:3f:b3:a6:9f:bd:2a:cc:67:d5:51:97:8f:
                    3b:ec:ad:64:24:95:ef:63:1d:90:ff:d7:e9:4a:e8:
                    73:78:da:91:89:5f:50:ee:8c:98:cf:9d:15:b7:37:
                    1f:fa:7a:de:cd:5a:cf:ad:20:a9:6e:eb:ec:c1:b4:
                    d6:2b:2a:01:f3:2d:e0:e1:2c:e0:62:b3:df:71:65:
                    54:5f:c0:f6:ba:be:2d:28:62:eb:a8:29:ca:98:29:
                    b4:db:f5:96:0f:7d:70:fc:a4:ac:74:e3:84:b6:e5:
                    71:c6:87:49:8a:99:8f:a2:f4:2e:0b:c3:1a:a0:3f:
                    60:09:0a:d0:de:c8:17:41:c4:44:21:e6:0a:28:37:
                    ad:8b:d2:00:fd:34:a5:fe:d5:f3:bd:aa:88:4f:b8:
                    91:5a:38:93:9c:66:94:4d:3a:aa:4a:50:73:fb:1c:
                    bd:91:d4:6d:35:c7:bf:6a:60:a7:79:0a:5e:9a:38:
                    d4:6c:02:5a:47:b6:e5:d0:ab:da:42:42:65:57:84:
                    1b:88:9a:b6:d1:49:df:97:86:a2:4a:88:be:99:2f:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:36:1A:50:FC:0C:09:8C:D4:19:C3:76:40:D6:A8:A9:7B:B5:1A:00
            X509v3 Authority Key Identifier:
                keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/34352e3131362e3130302e302f32322d3232203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:94:cd:5a:c8:78:8c:fa:27:02:54:b7:28:48:77:3b:62:20:
         c2:d7:70:97:86:90:a7:eb:84:ae:19:b3:29:da:3a:3e:60:57:
         16:41:9e:35:1c:bd:f4:74:f9:0d:c5:7a:ac:a3:92:71:62:f4:
         a4:6c:74:1e:64:94:cf:b8:25:7a:5b:35:fe:f0:49:fc:22:a3:
         45:93:81:0e:e4:96:b6:a8:6e:54:21:63:30:fe:46:31:cb:5e:
         38:53:df:a7:a1:ca:f2:5c:63:c5:a0:f2:38:11:5d:ab:e8:ea:
         41:66:8a:8d:9e:e3:99:c2:31:17:b8:29:93:8d:10:56:44:23:
         6a:f5:04:77:ef:4e:c2:97:32:64:7b:c8:83:c1:af:63:66:61:
         cd:1f:60:7e:90:21:46:92:5a:0f:c4:bd:2d:e1:fb:90:7c:c4:
         ad:ba:6b:d4:3d:f5:73:e7:81:a9:e4:39:c2:d8:73:14:24:52:
         82:20:d6:49:43:1b:b6:c9:fe:77:47:fc:7a:1a:ca:82:89:ad:
         44:7e:06:70:9b:b5:ed:3e:c7:8d:ac:a0:36:e7:ec:33:15:1b:
         07:e2:80:73:5c:16:a2:9a:5b:b3:77:2b:ae:cf:3b:56:fe:ab:
         a3:9d:df:bc:22:66:cf:73:af:5a:3e:60:ef:ce:b0:09:9b:3a:
         ee:e2:1d:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:58:37 2026 by rpki-client