Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130302e3232342e302f31392d3230203d3e2034383038.roa
File:                     3231312e3130302e3232342e302f31392d3230203d3e2034383038.roa (raw, json)
Hash identifier:          ZQIgPn2HgSe1U+5rh9WF3pvI7Z+J3APYv3wbUoq0U/E=
Subject key identifier:   80:31:C9:5F:14:B9:E0:A8:1F:B8:13:3A:D9:52:E4:53:08:45:31:35
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       17582043AE918EA7DD320F670562943AA21A0884
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130302e3232342e302f31392d3230203d3e2034383038.roa
Signing time:             Wed 13 May 2026 02:29:12 +0000
ROA not before:           Wed 13 May 2026 02:24:12 +0000
ROA not after:            Wed 12 May 2027 02:29:12 +0000
asID:                     4808
IP address blocks:        211.100.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:58:20:43:ae:91:8e:a7:dd:32:0f:67:05:62:94:3a:a2:1a:08:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 13 02:24:12 2026 GMT
            Not After : May 12 02:29:12 2027 GMT
        Subject: CN=8031C95F14B9E0A81FB8133AD952E45308453135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:6a:e8:35:a4:47:bb:68:fd:f4:81:58:4c:
                    d6:95:d0:73:4f:a8:2c:43:78:1d:02:5b:0c:69:05:
                    6a:84:9f:6b:1b:7d:81:3d:f3:9b:0f:d3:9f:f4:a4:
                    c9:0b:05:73:5e:db:8b:7a:00:30:a2:fc:37:d4:f9:
                    1d:de:3a:a4:a9:be:7f:b2:c8:75:84:30:04:8a:76:
                    4d:35:de:b5:de:e2:0e:d3:38:f0:bd:e4:ec:a9:d5:
                    95:89:98:53:f1:fc:dc:6e:f3:5c:bd:ba:ca:b0:6c:
                    ba:b0:51:0a:82:9f:09:50:e8:dd:e2:4e:db:12:8d:
                    ba:27:9c:33:07:b0:3c:69:45:a9:20:14:bf:87:66:
                    7a:f6:de:0d:56:54:8d:4e:d8:ed:c7:27:d9:9c:6e:
                    8a:a9:f6:cd:02:8d:3d:36:01:35:46:47:b4:ca:c0:
                    55:51:38:38:1f:d6:fd:00:55:02:31:a7:74:0c:ce:
                    7a:ab:ca:56:ea:35:7b:e9:c1:39:a5:81:fc:4d:1a:
                    68:7d:be:f3:eb:26:39:72:b6:a5:4f:7b:1a:fd:45:
                    d6:45:46:a2:7e:ab:54:df:78:cf:aa:6e:fc:b6:f9:
                    50:02:dd:7c:7c:c6:59:21:64:bf:e1:18:76:0f:fd:
                    4c:80:e8:09:65:db:45:18:74:7e:b4:f9:a8:c8:a9:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:31:C9:5F:14:B9:E0:A8:1F:B8:13:3A:D9:52:E4:53:08:45:31:35
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130302e3232342e302f31392d3230203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.100.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:86:54:aa:79:e6:80:c1:3b:22:ac:f8:ac:5f:b7:32:69:19:
         07:88:1f:ff:c8:d2:73:2f:b4:3b:6d:39:3e:1d:24:c8:2b:3e:
         df:e7:24:8a:ee:4a:5a:7a:30:a8:94:4f:2b:39:29:f3:4c:98:
         80:51:f9:22:0c:29:12:f2:67:6f:e7:63:86:92:4f:ad:e8:0f:
         60:5b:cc:e8:9e:20:56:0b:2c:c0:af:ed:b9:ac:37:f7:92:5d:
         ab:84:37:f2:eb:38:13:7a:7b:33:12:93:32:65:da:9b:74:99:
         60:3f:a6:03:0d:7f:b3:3b:52:60:90:e5:3c:fc:3d:f0:d2:31:
         78:39:0e:a9:e5:45:28:dc:4a:fe:f8:85:df:d9:25:a0:b2:e1:
         64:a8:45:33:1b:e2:7e:6a:b8:40:53:79:ac:5c:7e:d2:ea:77:
         20:70:44:53:f1:f7:de:47:6b:67:7b:5a:c9:8a:1e:87:18:69:
         59:4b:18:88:1c:e9:f5:99:ed:b1:32:fa:2e:98:07:05:38:cd:
         23:fa:bb:70:16:6b:d6:7a:b2:84:8c:d4:92:fc:3f:43:6a:bd:
         f3:07:ee:5d:53:fa:18:1f:ef:72:19:06:88:69:41:d0:57:45:
         8c:0e:10:d0:ac:a3:d9:0b:fc:dd:31:a2:93:57:be:e2:f1:2f:
         b4:94:17:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:09:31 2026 by rpki-client