Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa
File:                     3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa (raw, json)
Hash identifier:          NOufZeeVBWAEETKbJl+H6zHNtoZyY/S4SDIVSid74d0=
Subject key identifier:   F2:7E:0F:F9:F8:BE:6D:9E:7B:AE:20:72:A9:FC:DE:85:08:36:55:DF
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       75175C76B82B81BB4DF1A140ABEF6E159FC462BD
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa
Signing time:             Mon 11 May 2026 02:50:14 +0000
ROA not before:           Mon 11 May 2026 02:45:14 +0000
ROA not after:            Mon 10 May 2027 02:50:14 +0000
asID:                     58541
IP address blocks:        211.155.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:17:5c:76:b8:2b:81:bb:4d:f1:a1:40:ab:ef:6e:15:9f:c4:62:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 11 02:45:14 2026 GMT
            Not After : May 10 02:50:14 2027 GMT
        Subject: CN=F27E0FF9F8BE6D9E7BAE2072A9FCDE85083655DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9c:09:3d:7b:b1:47:04:7c:a8:ed:ab:e8:e7:
                    70:d9:78:fb:db:47:57:6f:1b:95:10:8e:19:2e:55:
                    3b:6c:b4:72:87:be:06:45:43:33:57:57:6c:16:f2:
                    9e:bc:d0:11:7b:12:f4:ea:48:1c:87:09:7e:1c:7a:
                    5a:ee:cf:ca:1f:f5:04:7e:f3:a5:5d:0d:9f:3c:c3:
                    a8:c4:16:34:63:86:eb:7c:84:2e:58:40:f8:4a:4c:
                    e0:35:07:da:bd:1c:c1:a3:ae:28:9d:79:17:ee:6c:
                    6d:0b:61:ae:09:42:df:95:db:18:a5:e3:14:31:5c:
                    13:82:89:e4:55:98:8d:2d:24:be:44:f1:be:bf:6a:
                    84:9d:33:f3:5e:1e:1a:60:ed:40:08:db:69:42:dc:
                    20:bd:80:58:f3:6e:3e:70:ba:03:15:d4:da:a8:f3:
                    06:48:d1:58:41:eb:22:b8:d2:32:4e:f4:da:80:e7:
                    39:3c:64:f2:97:94:a0:54:a6:33:64:bf:92:19:2d:
                    50:92:b1:4d:5e:15:8a:83:80:d1:2c:0c:69:50:55:
                    5c:ec:4a:0e:45:bd:b6:97:95:a7:4e:cb:e2:d7:ee:
                    f1:bf:1b:8b:88:c7:88:8a:50:7f:c4:16:99:db:bc:
                    18:31:44:ff:73:e5:78:ec:67:ef:c7:25:8d:68:38:
                    e0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7E:0F:F9:F8:BE:6D:9E:7B:AE:20:72:A9:FC:DE:85:08:36:55:DF
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3132342e302f32322d3232203d3e203538353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:f5:87:46:83:51:62:e5:fa:bc:e8:52:12:11:73:92:f7:56:
         41:a9:32:13:1a:34:09:56:79:eb:e5:be:f4:f1:1b:4d:e9:8f:
         aa:37:63:4c:d1:dd:b2:14:57:47:ce:cc:55:65:ce:8a:97:3d:
         37:f6:6c:37:a0:be:46:2c:0b:fa:41:9e:bc:44:cc:c9:42:42:
         2c:b5:bc:a6:0e:09:08:b3:4d:9d:f7:d8:e1:4c:fd:57:db:30:
         e5:fe:05:63:01:c7:a5:56:63:ec:cf:60:2d:d4:44:e5:7e:52:
         fb:97:12:7b:2e:33:be:29:8c:b7:b2:a3:03:70:4b:a2:8c:9f:
         3b:bb:d2:93:de:76:58:d5:9f:c6:33:12:73:7c:c9:a6:23:36:
         a7:c9:f7:f0:0d:6d:48:96:fb:60:f3:e5:85:67:e9:6a:a0:65:
         ec:63:e0:b0:92:c7:2b:07:eb:8d:ac:90:68:fb:35:ca:d6:2c:
         15:d1:c6:75:28:52:3a:a0:b0:b5:c2:dd:13:a9:6b:d1:75:c7:
         54:2b:17:71:fb:be:81:4e:5c:9e:93:bf:34:33:a2:51:f8:ee:
         79:c3:2d:c7:22:d8:64:63:21:fb:5a:71:0c:ee:50:36:cb:52:
         25:6a:a8:a1:65:6f:e5:72:f2:c8:e6:31:af:d9:a2:67:08:1a:
         70:a3:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:22 2026 by rpki-client