Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131362e3235312e36342e302f31382d3234203d3e203337393633.roa
File:                     3131362e3235312e36342e302f31382d3234203d3e203337393633.roa (raw, json)
Hash identifier:          c0UPetqv4UH1FCrUJE1PkrN+kosNn3NSpLA0/9EQ7Og=
Subject key identifier:   FD:D8:12:AA:10:FB:12:DD:ED:FF:2B:E0:70:4E:39:4F:7E:1F:23:59
Certificate issuer:       /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial:       1E51C96A605A3716AF2507E50A4A644671918111
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131362e3235312e36342e302f31382d3234203d3e203337393633.roa
Signing time:             Mon 11 May 2026 09:05:01 +0000
ROA not before:           Mon 11 May 2026 09:00:01 +0000
ROA not after:            Mon 10 May 2027 09:05:01 +0000
asID:                     37963
IP address blocks:        116.251.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:51:c9:6a:60:5a:37:16:af:25:07:e5:0a:4a:64:46:71:91:81:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
        Validity
            Not Before: May 11 09:00:01 2026 GMT
            Not After : May 10 09:05:01 2027 GMT
        Subject: CN=FDD812AA10FB12DDEDFF2BE0704E394F7E1F2359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:64:af:35:5a:88:f6:21:66:e6:f6:da:64:
                    e0:d2:ad:0c:65:1e:41:f5:ae:1a:4c:2d:82:82:5b:
                    19:78:e1:a1:14:4e:3a:04:5e:1e:14:b7:6a:70:ed:
                    7d:1f:17:0a:f7:30:5a:27:55:0c:62:c6:d0:d7:7e:
                    53:92:0f:80:14:47:f4:8a:56:07:01:b7:6a:a0:93:
                    4d:bc:ae:5d:cb:53:2c:96:7d:d6:71:dc:7d:72:b4:
                    4c:2a:ba:a6:79:8a:e0:05:4b:e5:d1:90:8c:b5:04:
                    b2:a3:36:34:1a:3d:f3:f9:13:3c:ff:e5:33:64:83:
                    9e:78:5c:d7:4a:73:e2:9f:79:6a:69:32:e5:1d:6c:
                    85:1f:b4:7b:1b:6a:0c:4f:d4:11:ec:67:0b:34:b6:
                    19:79:fc:26:f4:6f:ef:8b:28:88:ca:c9:53:97:b8:
                    f8:60:16:bf:b1:7a:ef:17:2c:57:6f:8a:94:a1:85:
                    b3:34:59:75:e7:ee:c8:a3:1a:ca:25:97:09:66:fe:
                    50:56:d7:06:f3:b1:cb:11:49:30:43:52:bd:c5:24:
                    6f:f9:91:29:73:d0:f9:1c:51:e8:5a:41:80:39:34:
                    20:8b:65:45:a0:b2:3e:84:fc:3d:98:2e:50:2b:10:
                    d1:f9:a4:c5:f0:55:6d:50:f0:fc:c0:f1:6a:40:b3:
                    f8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D8:12:AA:10:FB:12:DD:ED:FF:2B:E0:70:4E:39:4F:7E:1F:23:59
            X509v3 Authority Key Identifier:
                keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131362e3235312e36342e302f31382d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.251.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:23:3f:2f:a6:92:4d:97:c8:8b:cf:41:c7:ba:fd:a7:d8:
         7d:b0:bb:b7:c9:c7:2b:97:8b:eb:db:95:6b:20:3c:ce:8e:7b:
         33:0b:56:95:11:19:53:fa:df:0f:e1:6e:7b:2f:57:e6:db:ad:
         06:e2:08:f0:d3:c4:21:c7:3c:64:ad:88:7b:18:8a:70:37:37:
         20:b2:61:8e:8c:d6:c3:73:88:e3:d1:e3:0f:11:e3:89:0b:ee:
         cf:96:64:f6:af:5e:c8:4d:c5:09:7f:61:15:35:8d:1d:db:03:
         80:8c:6d:9d:10:d0:5f:a8:ef:b9:bf:10:43:19:6b:7a:01:94:
         8a:1b:13:4b:07:c4:17:3c:7c:51:06:5a:f6:17:71:5e:68:80:
         33:8b:11:2a:16:d4:e3:86:ad:83:b6:d0:62:8a:8a:31:f1:71:
         3f:66:07:56:35:f7:1f:3c:67:6c:a7:c9:ef:f1:15:28:ca:6b:
         3d:0c:27:de:69:82:0e:d7:de:88:b3:77:2e:8f:49:94:4c:70:
         03:25:43:4b:74:e0:4f:b1:9b:fc:72:63:7c:e5:59:31:6c:86:
         fb:ad:0d:1f:ea:3c:b1:89:22:cd:2a:3e:b5:59:18:1a:f5:39:
         f3:cc:93:19:f7:7e:90:d0:6b:f1:72:be:e9:3c:10:25:46:d1:
         d6:ae:bb:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:56:19 2026 by rpki-client