Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e32372e302f32342d3234203d3e203233373731.roa
File:                     3230322e3135302e32372e302f32342d3234203d3e203233373731.roa (raw, json)
Hash identifier:          pMIkgXSvnS+fjKcM78SyYZBSI45Dga3NdAM06tCX0ks=
Subject key identifier:   71:3E:95:03:D7:A1:FB:98:B9:7C:BA:D1:89:37:97:69:74:5F:8C:B6
Certificate issuer:       /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial:       54F59F7EDDF0956E18180B597BEBC240374186CF
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e32372e302f32342d3234203d3e203233373731.roa
Signing time:             Mon 20 Apr 2026 02:21:57 +0000
ROA not before:           Mon 20 Apr 2026 02:16:57 +0000
ROA not after:            Mon 19 Apr 2027 02:21:57 +0000
asID:                     23771
IP address blocks:        202.150.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f5:9f:7e:dd:f0:95:6e:18:18:0b:59:7b:eb:c2:40:37:41:86:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
        Validity
            Not Before: Apr 20 02:16:57 2026 GMT
            Not After : Apr 19 02:21:57 2027 GMT
        Subject: CN=713E9503D7A1FB98B97CBAD189379769745F8CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:06:6a:3e:95:ae:a1:72:e9:fe:8d:cb:cb:
                    4c:df:62:13:21:0c:79:dd:92:23:79:cb:05:a6:87:
                    07:39:2f:c3:fd:f4:4e:9b:95:3c:ad:31:a1:a0:7e:
                    87:11:d8:b5:9d:72:91:44:c8:85:55:e0:e2:84:f0:
                    2e:8f:4d:c8:41:ec:f4:f6:b4:ac:1d:a8:6e:17:3d:
                    62:5a:1b:37:ce:ae:1f:b2:d4:72:4d:0c:0b:96:bf:
                    b3:21:7f:43:c4:d9:39:a4:e5:3c:11:66:d4:96:89:
                    58:4c:7d:07:f2:c8:a0:bd:22:08:9b:de:d9:11:2e:
                    86:5f:b7:f4:1c:d5:ef:37:a2:79:ec:4b:ed:64:f8:
                    40:88:cf:2c:15:a7:dc:a2:33:d5:63:ec:8d:55:b8:
                    0d:25:88:f6:df:30:62:b6:67:a2:4b:17:89:a0:f0:
                    89:a3:55:c4:15:4a:96:5a:22:5c:40:8a:ac:b1:78:
                    60:3a:03:ef:ce:0b:86:7a:66:43:8d:74:a2:0b:b1:
                    22:9c:7f:f6:ed:46:65:87:2b:9b:1a:8a:73:bf:41:
                    0d:93:f4:d2:18:e4:85:83:fa:ea:f9:81:10:db:03:
                    ef:1b:72:12:3b:bc:77:be:75:40:41:ea:a8:dd:ac:
                    72:8a:39:e2:c6:bb:46:bb:35:c6:e8:37:7c:e1:ff:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3E:95:03:D7:A1:FB:98:B9:7C:BA:D1:89:37:97:69:74:5F:8C:B6
            X509v3 Authority Key Identifier:
                keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e32372e302f32342d3234203d3e203233373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:c6:86:55:8b:99:b3:45:e9:ae:2d:05:55:ab:ff:b9:83:28:
         18:52:f4:b5:bd:be:f2:c6:34:4e:32:6e:a0:45:88:b1:ce:22:
         1d:8b:c9:81:b2:34:fa:b4:0e:d7:f6:e2:fd:8c:90:15:f9:fc:
         65:3a:e2:a2:13:b0:bd:8a:de:35:96:88:40:a1:0b:1e:83:86:
         11:9c:6b:b2:30:8b:66:55:64:bb:6c:91:54:f7:a0:dc:a9:38:
         4f:12:6c:e9:f0:2e:12:9b:30:5f:d3:bb:41:e6:44:7f:a8:14:
         32:d9:53:4c:9b:d2:97:65:5f:99:71:d7:3c:d4:24:4a:6b:e0:
         bf:d0:ac:ea:1e:d6:5d:d6:d6:c1:2d:67:67:87:6d:e3:e3:d9:
         9e:1a:cf:d2:02:57:41:b7:71:26:69:84:cf:ee:66:be:63:49:
         11:9f:bb:68:7b:db:45:7e:01:c2:cc:ec:ca:89:5f:42:ac:5c:
         7e:2f:70:9e:1f:39:f1:c3:c1:0d:1b:70:57:0e:8d:7e:1d:11:
         7e:96:80:57:46:f1:8b:08:61:f0:4f:d0:69:80:a5:6b:94:d6:
         46:b4:2f:6b:cf:09:bb:1f:2a:c2:c1:7b:55:63:6d:41:8b:e9:
         f1:d2:1e:8c:15:a0:e0:36:00:3d:f8:12:80:0d:3a:e5:77:41:
         34:7a:79:90
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 19:53:44 2026 by rpki-client