Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34352e3132372e3134342e302f32312d3231203d3e2034383437.roa
File:                     34352e3132372e3134342e302f32312d3231203d3e2034383437.roa (raw, json)
Hash identifier:          91/lKxf1daLG7RqoCQBgCYnA95SLfNLn9WoHXQiHXYk=
Subject key identifier:   19:64:94:C0:F4:D0:4F:EF:58:9F:DB:E0:F9:42:41:35:61:B2:5B:F2
Certificate issuer:       /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial:       3EDE9321AA7B12AF3C39C05C5DBC08AF0B01EB37
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34352e3132372e3134342e302f32312d3231203d3e2034383437.roa
Signing time:             Tue 12 May 2026 09:01:32 +0000
ROA not before:           Tue 12 May 2026 08:56:32 +0000
ROA not after:            Tue 11 May 2027 09:01:32 +0000
asID:                     4847
IP address blocks:        45.127.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:de:93:21:aa:7b:12:af:3c:39:c0:5c:5d:bc:08:af:0b:01:eb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
        Validity
            Not Before: May 12 08:56:32 2026 GMT
            Not After : May 11 09:01:32 2027 GMT
        Subject: CN=196494C0F4D04FEF589FDBE0F942413561B25BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:fd:35:d8:b7:98:dc:74:5a:f8:2e:2e:a3:
                    de:ca:59:67:7a:bc:3a:cd:e4:83:f8:4f:4e:d6:75:
                    23:62:92:99:51:47:2d:03:bb:ec:2a:20:08:7f:24:
                    a7:78:77:cd:79:27:01:5a:d3:0c:f5:00:a0:5b:9f:
                    eb:1c:fc:ec:40:b1:2c:73:3e:6c:d5:df:56:0f:0b:
                    2a:e3:8e:b3:cf:65:8e:d8:9f:a1:58:e5:71:e1:70:
                    40:92:66:c8:1b:1f:f2:06:c9:84:24:69:95:e1:dd:
                    ab:40:38:c8:43:80:80:3c:3a:91:c7:a4:0f:47:fe:
                    f8:a7:2d:53:54:6e:0c:e3:8a:75:6a:66:14:7d:9f:
                    e4:ef:6c:60:9b:cd:71:07:1e:cf:4c:26:6d:ce:b8:
                    f1:f3:a6:00:82:0b:92:22:07:ab:ec:02:fb:a6:93:
                    59:4f:a9:90:86:cc:3d:72:e1:f6:fe:ed:6c:53:65:
                    46:ce:19:1e:c6:a9:ae:52:78:79:ce:e3:ce:9d:38:
                    da:e3:10:a0:f0:b6:76:c9:e3:4f:77:0c:d1:4a:79:
                    a3:ec:ee:09:50:dc:f5:8b:04:e6:0d:7f:3f:8c:df:
                    e2:68:aa:4e:46:d8:11:ca:7b:65:2e:fc:4a:c1:8f:
                    96:2d:21:77:2a:da:0c:42:40:c0:3b:61:0e:7a:58:
                    5d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:94:C0:F4:D0:4F:EF:58:9F:DB:E0:F9:42:41:35:61:B2:5B:F2
            X509v3 Authority Key Identifier:
                keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34352e3132372e3134342e302f32312d3231203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:b2:4e:1b:e9:f9:99:6b:98:89:9e:a8:8a:f0:68:5b:e5:9e:
         15:98:cc:c7:7a:7b:af:ef:3e:54:76:24:a5:92:90:7c:d1:05:
         3e:78:5a:fe:0f:45:5f:d8:b6:9c:6d:be:24:b2:43:99:d5:6b:
         15:4e:7d:19:d6:a2:dc:85:71:eb:c1:0a:51:ca:65:6c:ca:85:
         95:a7:eb:e4:3e:14:41:0f:30:2c:ad:88:35:09:33:77:03:73:
         df:21:70:2e:4a:da:b6:60:da:dd:5c:5d:a5:f2:ba:5d:e9:eb:
         50:c2:87:c0:9e:89:78:76:2b:04:ba:b3:dc:76:68:37:10:20:
         f3:a2:a1:be:19:ec:4f:bc:cd:ba:fd:27:2a:18:e0:8f:b1:e1:
         10:34:57:80:c8:27:b9:cd:99:9a:92:ad:92:e8:2b:14:ef:bd:
         65:a1:0e:c3:e0:d2:d6:8f:98:0f:8f:54:ad:de:d8:e3:e3:3e:
         c8:41:45:9d:2c:12:f7:d9:20:b6:91:28:df:02:7b:54:d4:9f:
         4d:c1:98:b6:34:9f:e8:3d:f4:9a:7f:cd:74:44:1e:c9:09:2e:
         35:1d:8a:05:32:4c:4c:ed:bb:f3:ba:24:d5:92:c7:83:97:48:
         3d:12:e6:05:4a:c4:9b:c3:56:27:d8:1b:30:09:e6:4b:27:4d:
         84:fb:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:41 2026 by rpki-client