Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233372e302e302f31362d3233203d3e203137343239.roa
File:                     3231392e3233372e302e302f31362d3233203d3e203137343239.roa (raw, json)
Hash identifier:          IvqK9IhlSBKeDfnV4C0e1s5MiL+5wuhXzyEJy9f4QHY=
Subject key identifier:   03:1E:BB:42:3D:AD:F2:AC:ED:6F:93:AD:12:61:77:4E:89:12:3E:1C
Certificate issuer:       /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial:       2DD000591C7606AC076484977DD65B9BCC2ABC24
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233372e302e302f31362d3233203d3e203137343239.roa
Signing time:             Mon 20 Apr 2026 01:26:31 +0000
ROA not before:           Mon 20 Apr 2026 01:21:31 +0000
ROA not after:            Mon 19 Apr 2027 01:26:31 +0000
asID:                     17429
IP address blocks:        219.237.0.0/16 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d0:00:59:1c:76:06:ac:07:64:84:97:7d:d6:5b:9b:cc:2a:bc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
        Validity
            Not Before: Apr 20 01:21:31 2026 GMT
            Not After : Apr 19 01:26:31 2027 GMT
        Subject: CN=031EBB423DADF2ACED6F93AD1261774E89123E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:55:a9:75:ef:dd:88:f3:cd:9c:a5:6a:2a:
                    77:59:6d:df:72:bb:f2:9f:4e:fa:cd:fb:78:97:c9:
                    65:f3:91:28:f5:5f:1e:30:3f:9d:9d:22:9f:f6:98:
                    c6:c4:83:4d:0b:73:89:cd:e8:ef:59:1b:c8:f1:86:
                    08:42:68:85:f0:43:0b:02:4b:81:83:f2:1f:97:4b:
                    23:f2:14:72:f3:01:c6:39:a0:ea:8b:87:f6:fa:ed:
                    5b:5c:4b:ce:01:ac:4d:42:f4:c3:ef:b8:7f:d5:38:
                    3e:e9:c5:0c:7b:49:bd:d7:60:21:83:00:5f:48:ad:
                    83:a6:06:a2:96:4c:6c:f1:0e:3b:fe:9b:40:ff:8c:
                    44:f1:a2:3c:8f:1e:42:2c:8f:dd:6a:11:8a:11:f5:
                    b6:3c:74:88:51:0b:d7:5c:f3:53:1a:c9:eb:c4:f8:
                    d8:8d:b0:fb:ac:cd:f8:38:5b:33:95:75:5b:40:bd:
                    f1:58:3f:49:54:26:c0:e6:c0:07:39:41:63:28:be:
                    28:fd:2a:1c:03:2d:22:3b:54:93:df:d3:e1:40:60:
                    11:a5:06:97:39:8f:f1:ae:7a:ee:f1:8a:a6:b2:c2:
                    fb:27:dd:83:9f:e7:bc:26:41:70:44:bd:82:36:d6:
                    9a:7c:a6:8f:fc:c2:1d:09:e6:f4:c6:8c:8a:1c:cc:
                    75:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1E:BB:42:3D:AD:F2:AC:ED:6F:93:AD:12:61:77:4E:89:12:3E:1C
            X509v3 Authority Key Identifier:
                keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3231392e3233372e302e302f31362d3233203d3e203137343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.237.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:00:55:8f:1d:f7:b8:f4:b2:52:36:5f:6b:2a:9c:32:16:2a:
         ef:e1:89:84:c0:48:c4:e7:20:44:a5:f0:44:91:3b:c9:9c:a6:
         87:49:ae:90:1b:7c:34:83:74:84:ec:a9:8a:5a:48:ca:b7:8e:
         9a:13:ec:8e:57:2d:05:5e:04:c8:64:52:bc:ef:13:46:a5:c2:
         78:c0:3f:cb:a7:63:29:6a:c3:e6:ca:b9:95:b6:40:54:82:9c:
         8f:40:9a:02:19:a9:e7:36:c3:9e:37:6c:ad:93:dd:a4:e1:ec:
         78:3c:69:5e:51:d6:10:28:7e:d6:4c:49:26:c5:14:a6:69:3d:
         4e:8b:c9:8d:6a:97:14:9b:6b:ba:55:38:80:84:05:d8:9f:e7:
         68:b9:bb:5b:a7:77:f7:0f:f0:b5:0a:74:c0:91:8e:f7:6b:e8:
         d5:21:df:b9:3b:5a:18:4c:e0:38:ed:d9:be:c8:50:69:a0:dc:
         2f:97:11:7a:1f:00:63:01:cc:f8:37:cc:53:6f:c2:81:18:76:
         ec:b2:cf:54:b3:80:7c:f5:d8:57:e5:3f:d0:fa:db:40:ed:cb:
         4f:d0:eb:06:ff:e4:0e:5c:ce:df:56:5b:37:5b:85:fc:54:33:
         d7:f3:1d:02:f1:91:54:0c:96:23:ca:53:89:c4:8c:1c:6e:d7:
         36:03:b3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:15 2026 by rpki-client