Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131362e3235312e36342e302f31382d3234203d3e203435313032.roa
File:                     3131362e3235312e36342e302f31382d3234203d3e203435313032.roa (raw, json)
Hash identifier:          LjfpxDo4n9DURJySPAVdSCss5Og9jbyQxEU2rPQE7mg=
Subject key identifier:   B0:CD:1B:CC:FD:BA:F0:3B:F1:AA:31:A1:19:69:16:8F:83:F2:5E:A7
Certificate issuer:       /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
Certificate serial:       4295183E0073C3295B96A0724309C32DCFBB952F
Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131362e3235312e36342e302f31382d3234203d3e203435313032.roa
Signing time:             Mon 11 May 2026 09:05:01 +0000
ROA not before:           Mon 11 May 2026 09:00:01 +0000
ROA not after:            Mon 10 May 2027 09:05:01 +0000
asID:                     45102
IP address blocks:        116.251.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:95:18:3e:00:73:c3:29:5b:96:a0:72:43:09:c3:2d:cf:bb:95:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0
        Validity
            Not Before: May 11 09:00:01 2026 GMT
            Not After : May 10 09:05:01 2027 GMT
        Subject: CN=B0CD1BCCFDBAF03BF1AA31A11969168F83F25EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:15:06:36:bc:3d:49:6e:be:3a:92:96:f8:
                    19:83:7e:9c:91:3f:c9:47:4f:74:12:4c:f4:10:e5:
                    6c:bb:84:68:1d:5f:10:1e:6c:e8:0e:b3:7d:bf:69:
                    dc:13:88:f9:e1:ef:89:cf:c8:d4:47:11:52:1f:f1:
                    24:9e:f1:45:bb:3a:24:be:d8:68:9f:bd:60:b9:9b:
                    79:f5:b9:e4:6e:68:f5:0f:33:a8:7d:23:b1:5e:d9:
                    d6:b9:b9:7a:cf:86:b3:e8:16:0f:49:3b:87:ef:c1:
                    f4:9c:8b:07:45:54:61:f4:a6:60:2e:0e:dc:ed:37:
                    2f:64:3d:69:a2:d9:4f:9a:d7:51:d3:3a:2d:ee:6f:
                    af:3d:d6:ab:6f:70:eb:38:54:89:3d:a2:99:9a:3f:
                    25:a5:dd:e9:eb:a6:82:17:54:f8:9c:ce:70:65:64:
                    27:a0:f7:d6:61:c2:51:9d:e4:11:11:5d:bd:91:6e:
                    7c:36:56:dd:95:f4:fd:b4:fc:23:9d:f2:dc:e1:a3:
                    01:b7:5f:39:01:71:22:53:01:5d:72:73:83:bc:2f:
                    2b:30:77:26:57:7d:c7:78:45:b3:4f:8f:0a:1a:d9:
                    c6:94:29:72:ee:ed:2f:ae:79:02:97:8d:75:98:2d:
                    67:52:80:f6:d7:a3:5b:3f:5e:10:f6:68:31:70:91:
                    7b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CD:1B:CC:FD:BA:F0:3B:F1:AA:31:A1:19:69:16:8F:83:F2:5E:A7
            X509v3 Authority Key Identifier:
                keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/3131362e3235312e36342e302f31382d3234203d3e203435313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.251.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:88:d6:00:93:17:eb:b6:88:5e:60:4b:ed:79:ef:d4:4b:aa:
         d0:97:5a:3b:4e:52:53:3b:10:72:82:1c:6b:15:57:6f:bf:f0:
         de:10:9b:b5:79:4e:39:32:54:44:ef:b1:c4:a7:f0:3f:07:ca:
         6c:cf:51:15:4b:1f:d8:df:30:c8:6e:ac:76:52:c0:9e:40:e3:
         3a:76:cf:3e:f3:b4:de:24:67:e9:50:6b:8c:25:64:53:42:28:
         53:a8:10:b8:aa:0e:48:6f:7d:75:b3:c0:fe:5c:cb:59:9a:c3:
         91:85:a3:de:3f:43:0d:4b:00:58:1e:c8:ca:79:8e:5a:cd:df:
         ad:11:c7:6f:b6:17:54:1f:20:a4:cc:dd:53:a6:01:0a:bf:68:
         06:19:76:f5:1c:73:c7:d9:20:6d:78:1b:79:8f:39:d9:3a:22:
         17:bd:e8:58:fc:54:3e:e4:a1:b2:a5:93:a9:36:3e:95:9d:46:
         4c:24:7e:4f:cc:15:1a:f4:41:fa:47:4d:40:f0:d2:98:cd:fc:
         1a:14:5f:36:58:87:29:8d:1c:ad:c1:1e:e0:96:4e:dc:90:a6:
         48:5e:5a:48:18:4b:79:14:da:a4:81:5b:7d:81:64:64:00:49:
         81:4f:9c:2a:95:dd:84:bc:fb:12:cb:4f:8e:c7:6c:5c:7f:7f:
         24:c0:db:1b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUQpUYPgBzwylblqByQwnDLc+7lS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0
NjczREFDMDAeFw0yNjA1MTEwOTAwMDFaFw0yNzA1MTAwOTA1MDFaMDMxMTAvBgNV
BAMTKEIwQ0QxQkNDRkRCQUYwM0JGMUFBMzFBMTE5NjkxNjhGODNGMjVFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnhUGNrw9SW6+OpKW+BmDfpyR
P8lHT3QSTPQQ5Wy7hGgdXxAebOgOs32/adwTiPnh74nPyNRHEVIf8SSe8UW7OiS+
2GifvWC5m3n1ueRuaPUPM6h9I7Fe2da5uXrPhrPoFg9JO4fvwfSciwdFVGH0pmAu
DtztNy9kPWmi2U+a11HTOi3ub6891qtvcOs4VIk9opmaPyWl3enrpoIXVPicznBl
ZCeg99ZhwlGd5BERXb2Rbnw2Vt2V9P20/COd8tzhowG3XzkBcSJTAV1yc4O8Lysw
dyZXfcd4RbNPjwoa2caUKXLu7S+ueQKXjXWYLWdSgPbXo1s/XhD2aDFwkXtfAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUsM0bzP268DvxqjGhGWkWj4PyXqcwHwYDVR0j
BBgwFoAUCtNMBeiNEsMO1/4d0qvqVkZz2sAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODQwMjY5MS8wLzBBRDM0QzA1RTg4RDEyQzMwRUQ3RkUxREQyQUJF
QTU2NDY3M0RBQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0NjczREFDMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0ODQwMjY5MS8wLzMxMzEzNjJlMzIz
NTMxMmUzNjM0MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzQzNTMxMzAzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBnT7QDANBgkqhkiG9w0BAQsFAAOCAQEAeojWAJMX67aIXmBL7Xnv1Euq
0JdaO05SUzsQcoIcaxVXb7/w3hCbtXlOOTJURO+xxKfwPwfKbM9RFUsf2N8wyG6s
dlLAnkDjOnbPPvO03iRn6VBrjCVkU0IoU6gQuKoOSG99dbPA/lzLWZrDkYWj3j9D
DUsAWB7IynmOWs3frRHHb7YXVB8gpMzdU6YBCr9oBhl29Rxzx9kgbXgbeY852Toi
F73oWPxUPuShsqWTqTY+lZ1GTCR+T8wVGvRB+kdNQPDSmM38GhRfNliHKY0crcEe
4JZO3JCmSF5aSBhLeRTapIFbfYFkZABJgU+cKpXdhLz7EstPjsdsXH9/JMDbGw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:46:37 2026 by rpki-client