Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105370877056253965/0/34352e3132312e35322e302f32342d3234203d3e203633353330.roa
File:                     34352e3132312e35322e302f32342d3234203d3e203633353330.roa (raw, json)
Hash identifier:          MNGTiHV2NzvYS3MQd9CssunlWa/3AOgu8HFnKTzLd+I=
Subject key identifier:   B1:8A:A2:46:1D:22:F8:82:22:7A:0F:3C:45:5F:B3:B9:1C:4E:B0:9A
Certificate issuer:       /CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Certificate serial:       202D9516F60C03A0E20E54A9DC518D7EEBC18C55
Authority key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/34352e3132312e35322e302f32342d3234203d3e203633353330.roa
Signing time:             Sat 09 May 2026 06:08:03 +0000
ROA not before:           Sat 09 May 2026 06:03:03 +0000
ROA not after:            Sat 08 May 2027 06:08:03 +0000
asID:                     63530
IP address blocks:        45.121.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2d:95:16:f6:0c:03:a0:e2:0e:54:a9:dc:51:8d:7e:eb:c1:8c:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
        Validity
            Not Before: May  9 06:03:03 2026 GMT
            Not After : May  8 06:08:03 2027 GMT
        Subject: CN=B18AA2461D22F882227A0F3C455FB3B91C4EB09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ff:ac:f7:31:63:23:af:72:fc:1e:00:b0:14:
                    c8:ec:01:64:da:02:c4:72:91:70:4e:44:97:75:fa:
                    fc:e3:20:93:78:d8:f0:1f:25:cb:29:4e:49:13:4e:
                    39:9b:99:02:86:bd:66:27:51:ee:87:35:fe:95:7c:
                    ff:0a:f5:ea:a9:1b:3f:34:df:8c:26:aa:22:fa:95:
                    9d:59:25:dd:c5:c3:dc:15:bd:ec:18:22:da:d6:35:
                    95:91:e1:97:95:63:18:be:70:51:8b:51:c0:55:4a:
                    b7:43:01:f5:f3:60:8a:8d:f8:bd:01:82:6a:65:13:
                    69:a5:d1:df:f0:b2:1c:44:09:5c:a9:95:6c:4e:12:
                    3d:e6:ea:b0:69:c4:61:12:51:f0:f8:af:17:01:0e:
                    18:fa:cc:71:b0:c7:5a:c6:29:d2:9e:16:7e:53:74:
                    68:dc:43:a4:6e:84:b1:26:9d:0a:22:7d:59:b3:6d:
                    ce:ea:56:94:65:1f:8e:ab:68:c5:1a:c8:8f:99:60:
                    93:8d:27:94:80:e8:36:7e:e5:5b:1f:7e:2a:35:48:
                    29:69:2c:84:1c:84:47:68:17:c1:ce:7f:56:32:67:
                    3b:5f:ab:d7:e9:a8:20:bd:fe:37:8b:72:5f:07:26:
                    7f:95:5a:85:f9:7e:03:46:ac:8e:8c:ef:ba:54:09:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8A:A2:46:1D:22:F8:82:22:7A:0F:3C:45:5F:B3:B9:1C:4E:B0:9A
            X509v3 Authority Key Identifier:
                keyid:6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/34352e3132312e35322e302f32342d3234203d3e203633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:de:09:19:13:e5:ed:58:da:77:99:d5:a1:5c:9e:c1:d5:13:
         30:38:8b:b4:43:c1:7a:47:ce:bb:80:b2:12:6d:06:0c:4b:3b:
         57:b7:7a:8c:68:68:bd:e6:4e:57:a4:fb:e0:35:46:a8:b4:b8:
         89:dc:31:88:0c:e4:fc:28:bc:3a:fa:01:41:e6:86:10:3d:ec:
         dd:61:69:b7:6c:5a:d5:4a:a3:35:0c:dd:3d:6f:5a:b4:e9:47:
         04:d6:c7:ad:42:b5:a4:89:1f:ee:16:d8:ab:10:41:9e:aa:62:
         6d:8b:67:aa:99:f6:77:b8:2b:ae:5a:d4:93:0a:4d:47:36:bb:
         69:32:58:90:50:29:28:d4:82:66:b6:10:23:7d:88:78:8c:0d:
         80:81:71:d2:b6:f0:2f:40:e5:9f:3c:e2:ec:98:80:6f:e7:6a:
         d0:a3:bd:07:4b:4f:d3:cc:e9:74:54:84:2b:3b:b2:f6:17:a1:
         ad:f6:14:e6:58:c7:78:9a:bc:ed:3a:7e:89:b3:fe:04:7e:f8:
         3a:e5:4b:5b:92:bb:72:15:69:5f:b5:01:0d:9c:d4:2d:cb:13:
         57:b0:4a:f0:c5:60:10:28:66:99:b6:d5:44:f9:af:65:16:ef:
         66:b9:6b:f2:1a:1b:d6:1a:7e:40:0d:c5:ee:6e:8b:eb:0f:d5:
         50:df:18:79
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUIC2VFvYMA6DiDlSp3FGNfuvBjFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZCNzI4QkYzQ0I0MUEwMkYzREY1NUFDMjU5RjVERDEw
Qjc5RUU0MDAeFw0yNjA1MDkwNjAzMDNaFw0yNzA1MDgwNjA4MDNaMDMxMTAvBgNV
BAMTKEIxOEFBMjQ2MUQyMkY4ODIyMjdBMEYzQzQ1NUZCM0I5MUM0RUIwOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq/6z3MWMjr3L8HgCwFMjsAWTa
AsRykXBORJd1+vzjIJN42PAfJcspTkkTTjmbmQKGvWYnUe6HNf6VfP8K9eqpGz80
34wmqiL6lZ1ZJd3Fw9wVvewYItrWNZWR4ZeVYxi+cFGLUcBVSrdDAfXzYIqN+L0B
gmplE2ml0d/wshxECVyplWxOEj3m6rBpxGESUfD4rxcBDhj6zHGwx1rGKdKeFn5T
dGjcQ6RuhLEmnQoifVmzbc7qVpRlH46raMUayI+ZYJONJ5SA6DZ+5Vsffio1SClp
LIQchEdoF8HOf1YyZztfq9fpqCC9/jeLcl8HJn+VWoX5fgNGrI6M77pUCYWLAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUsYqiRh0i+IIieg88RV+zuRxOsJowHwYDVR0j
BBgwFoAUb7covzy0GgLz31WsJZ9d0Qt57kAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTM3MDg3NzA1NjI1Mzk2NS8wLzZGQjcyOEJGM0NCNDFBMDJGM0RGNTVBQzI1OUY1
REQxMEI3OUVFNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkZCNzI4QkYzQ0I0MUEwMkYzREY1NUFDMjU5RjVERDEwQjc5RUU0MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA1MzcwODc3MDU2MjUzOTY1LzAvMzQzNTJlMzEzMjMx
MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzMzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAC15NDANBgkqhkiG9w0BAQsFAAOCAQEAAN4JGRPl7Vjad5nVoVyewdUTMDiL
tEPBekfOu4CyEm0GDEs7V7d6jGhoveZOV6T74DVGqLS4idwxiAzk/Ci8OvoBQeaG
ED3s3WFpt2xa1UqjNQzdPW9atOlHBNbHrUK1pIkf7hbYqxBBnqpibYtnqpn2d7gr
rlrUkwpNRza7aTJYkFApKNSCZrYQI32IeIwNgIFx0rbwL0Dlnzzi7JiAb+dq0KO9
B0tP08zpdFSEKzuy9hehrfYU5ljHeJq87Tp+ibP+BH74OuVLW5K7chVpX7UBDZzU
LcsTV7BK8MVgEChmmbbVRPmvZRbvZrlr8hob1hp+QA3F7m6L6w/VUN8YeQ==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:44 2026 by rpki-client