Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa
File:                     3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa (raw, json)
Hash identifier:          SMfJ3ccRR85cUJWA/glf6EnXeV8oQMhgCdzAdGSdZgE=
Subject key identifier:   CE:99:14:23:A7:46:AD:7C:1D:B5:B2:41:30:9C:40:97:17:BB:3B:97
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       612165A0E97DC73797AF59DAF8B445DEC48000E2
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa
Signing time:             Mon 11 May 2026 06:48:53 +0000
ROA not before:           Mon 11 May 2026 06:43:53 +0000
ROA not after:            Mon 10 May 2027 06:48:53 +0000
asID:                     138915
IP address blocks:        211.155.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:21:65:a0:e9:7d:c7:37:97:af:59:da:f8:b4:45:de:c4:80:00:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 11 06:43:53 2026 GMT
            Not After : May 10 06:48:53 2027 GMT
        Subject: CN=CE991423A746AD7C1DB5B241309C409717BB3B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:7f:a2:c0:e5:58:da:f0:a1:b2:72:79:b8:
                    63:7d:fe:f3:a5:5f:b7:69:fc:44:a9:a7:44:6a:a4:
                    e4:26:09:27:d0:40:70:e0:b6:94:df:b7:0f:32:93:
                    09:0c:d8:aa:42:9f:b3:bd:8f:d6:4c:d8:e9:f7:34:
                    86:6b:03:81:aa:42:0f:5d:50:27:05:96:39:c8:6c:
                    0e:19:e3:ab:5f:32:d7:c5:5a:9f:bf:e2:36:40:73:
                    50:f7:49:c8:d9:f4:95:49:da:13:00:81:0e:d3:b5:
                    13:10:d8:43:71:41:28:62:e2:4f:68:5a:b2:c9:ee:
                    09:52:8f:14:0c:8b:19:62:fb:6a:57:42:9b:d4:40:
                    2a:68:70:01:e4:11:16:a9:0d:68:88:2a:81:13:ac:
                    96:73:4d:1c:df:50:70:5a:24:c3:45:4e:da:54:48:
                    0c:15:2b:58:e9:b5:cb:3a:46:f7:15:8a:dc:f1:2f:
                    c7:c4:7b:9a:88:ca:dd:16:5f:29:9c:e7:ca:04:68:
                    61:58:95:25:17:b2:44:54:55:21:2b:1b:ef:70:0b:
                    56:c4:0b:c9:ad:37:41:03:3f:87:4a:1a:29:e5:4c:
                    4d:0a:82:1d:e9:0d:52:1b:ef:f2:4c:8b:5f:af:c3:
                    95:7e:60:28:5c:9d:0f:27:72:75:ec:e7:de:95:61:
                    24:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:99:14:23:A7:46:AD:7C:1D:B5:B2:41:30:9C:40:97:17:BB:3B:97
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130302e302f32322d3232203d3e20313338393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:f4:41:10:03:26:1f:16:06:3c:db:e7:70:24:66:52:f5:19:
         80:22:d7:e7:f2:d3:51:09:8e:2e:ee:b4:6a:2b:f0:5d:ce:a7:
         47:fa:17:2a:cd:24:ec:8a:5d:f8:52:b4:dd:7c:b1:3c:92:bf:
         87:eb:61:09:bd:0e:42:84:de:e6:7e:96:3e:1f:f4:48:be:bc:
         0d:e1:72:22:39:75:99:da:f1:a7:83:c5:0a:9d:6d:b3:96:f4:
         b2:26:a6:a1:bc:27:3d:f1:82:7b:e9:2f:ae:81:03:a5:43:08:
         3f:43:f7:35:c4:a5:7e:c3:15:66:4b:84:b5:76:e3:3f:ed:06:
         72:7f:4e:0d:5d:f6:9c:9d:e9:3b:84:c0:f3:ac:4c:3f:e5:09:
         2f:07:57:63:0e:ec:c1:59:9e:ef:40:31:b4:58:dc:ed:a7:ce:
         5d:a6:ba:c5:05:dd:de:76:e0:17:57:5f:e9:38:fd:08:1e:fa:
         c0:bf:13:e0:ac:b5:10:89:01:8c:35:7e:f1:d3:f1:f2:08:da:
         27:06:4b:7d:a5:7d:6f:1b:d0:cf:92:76:97:46:6d:4c:77:03:
         c7:73:88:9c:29:24:7d:bc:26:08:4f:7f:d9:66:87:36:61:8e:
         87:7b:e4:91:2d:30:f6:b7:ed:e4:4b:77:ea:74:a4:44:16:9c:
         3a:59:24:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:58:21 2026 by rpki-client