Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39362e302f32322d3232203d3e203338303139.roa
File:                     34352e3235312e39362e302f32322d3232203d3e203338303139.roa (raw, json)
Hash identifier:          4T6XRtxPs6ZSsCkIbcBkih9Lcmxqq8lhG6rNbcuTYQQ=
Subject key identifier:   66:19:2F:AC:C1:44:95:EB:4D:F1:EF:95:54:F7:3C:AF:63:BC:B7:95
Certificate issuer:       /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial:       4FAD01D6F75EA63D520618DE210A8AC323AD7001
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39362e302f32322d3232203d3e203338303139.roa
Signing time:             Thu 16 Jul 2026 01:50:01 +0000
ROA not before:           Thu 16 Jul 2026 01:45:01 +0000
ROA not after:            Thu 15 Jul 2027 01:50:01 +0000
asID:                     38019
IP address blocks:        45.251.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ad:01:d6:f7:5e:a6:3d:52:06:18:de:21:0a:8a:c3:23:ad:70:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
        Validity
            Not Before: Jul 16 01:45:01 2026 GMT
            Not After : Jul 15 01:50:01 2027 GMT
        Subject: CN=66192FACC14495EB4DF1EF9554F73CAF63BCB795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dd:0c:83:b9:19:7c:ac:7a:55:55:cf:62:78:
                    33:1a:10:ef:f5:0f:50:d2:2f:51:f8:77:80:d4:d3:
                    0a:b1:57:48:94:43:09:f5:65:cf:54:a7:0c:34:3a:
                    45:7b:d7:54:06:7e:09:b9:a4:65:fb:7a:88:36:6a:
                    a4:94:a7:7d:07:ff:f8:ef:17:ed:19:02:55:34:d7:
                    37:56:67:22:11:da:88:14:ad:79:07:3c:2a:18:6a:
                    ad:cf:46:87:a3:82:74:90:3e:eb:2d:bc:ee:dc:dd:
                    2a:95:75:2f:8c:fe:18:15:38:ba:1c:be:a3:c2:49:
                    da:83:cb:ba:73:53:05:6a:c0:9e:12:3b:f6:04:8e:
                    81:6a:3c:d9:59:1f:b8:3f:f1:ae:91:df:af:1b:e3:
                    b3:a4:31:bd:29:0d:14:a4:1b:41:97:0e:b4:8b:21:
                    00:77:9c:0b:25:19:a0:ea:16:ab:e9:ad:d7:c0:9a:
                    f2:23:f4:19:71:de:2a:a7:06:c2:d6:0d:be:46:fc:
                    f1:41:36:58:c0:f9:e6:42:be:f1:ea:6b:af:87:71:
                    c6:42:e5:1d:80:ef:ee:38:a7:b9:f6:35:59:da:f1:
                    fc:cb:1c:36:91:3f:ef:57:bf:6f:f6:d6:12:23:c5:
                    2d:87:d4:df:3f:33:a4:63:10:56:5d:8b:9d:f4:4f:
                    7c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:19:2F:AC:C1:44:95:EB:4D:F1:EF:95:54:F7:3C:AF:63:BC:B7:95
            X509v3 Authority Key Identifier:
                keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39362e302f32322d3232203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.251.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:de:38:3f:7d:ea:2c:bc:22:d1:01:e2:4a:16:68:e3:9a:b8:
         98:8e:3a:f5:f0:f7:35:c5:34:a8:aa:c4:7f:27:1c:c0:ad:80:
         11:45:05:9b:19:a3:6c:aa:0f:88:38:89:a4:e3:8d:8f:d2:d2:
         29:ca:e4:77:cb:4b:97:ee:c6:12:be:28:04:d9:cd:70:54:d1:
         d6:2b:eb:dc:8c:44:ec:11:96:92:4a:a3:7b:4d:4f:c0:eb:77:
         df:fc:83:c0:b2:94:e4:90:63:ca:6c:3f:37:1e:72:4f:93:6e:
         72:47:cc:c3:c6:80:1c:c5:58:80:2b:51:67:2a:3d:54:80:91:
         ef:9a:b8:51:90:e7:7a:5d:3d:7a:16:57:ce:74:bc:1d:ff:75:
         5c:4e:be:7b:a2:db:4f:03:5c:8e:aa:bd:d2:c3:16:6c:0e:5c:
         29:4f:c2:2b:98:85:e5:59:c2:f2:fa:7e:58:53:95:15:37:65:
         30:0d:33:e0:3d:54:a0:c7:fd:c6:e2:d5:ca:3a:6d:65:e1:51:
         8d:40:d5:8a:e2:45:69:8a:2d:7e:a8:50:64:7c:51:92:18:b4:
         aa:92:1b:fd:3f:e5:1f:8a:c5:0d:31:1d:1e:5f:07:70:f5:f8:
         fa:48:72:79:94:9e:3f:17:b7:7e:ea:22:de:5d:b6:1d:7c:7b:
         d5:d0:b5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:18 2026 by rpki-client