Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e39362e302f32322d3232203d3e203538383534.roa
File:                     3231312e3135352e39362e302f32322d3232203d3e203538383534.roa (raw, json)
Hash identifier:          vVLRo+HKLvh/kXcauZdzM35qZL4rcz/wF9d38NpTTv0=
Subject key identifier:   58:33:19:4E:32:9C:77:13:1B:4E:1B:8E:3D:A2:2C:D0:BA:AC:B3:45
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       74FA8B522B9064092801000C471A0600647DBB73
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e39362e302f32322d3232203d3e203538383534.roa
Signing time:             Tue 12 May 2026 08:27:50 +0000
ROA not before:           Tue 12 May 2026 08:22:50 +0000
ROA not after:            Tue 11 May 2027 08:27:50 +0000
asID:                     58854
IP address blocks:        211.155.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fa:8b:52:2b:90:64:09:28:01:00:0c:47:1a:06:00:64:7d:bb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: May 12 08:22:50 2026 GMT
            Not After : May 11 08:27:50 2027 GMT
        Subject: CN=5833194E329C77131B4E1B8E3DA22CD0BAACB345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:33:76:53:ff:6e:df:26:8c:25:a0:1b:2e:16:
                    57:21:c5:87:ed:29:3f:6f:9a:2e:db:ae:8d:95:4a:
                    cd:f3:ee:e4:8e:39:45:1d:9d:78:6a:5f:ca:0e:2c:
                    37:c2:c1:51:2d:90:65:14:ec:30:fa:1b:d6:7e:8c:
                    08:51:1b:5b:6a:89:c4:ef:d9:b0:22:c9:67:d1:87:
                    ba:3a:6d:1f:36:d8:53:3d:bd:26:bf:41:0f:f0:c5:
                    09:2d:3b:c3:ef:33:d1:34:49:54:53:a6:00:cd:ba:
                    76:ae:c4:1e:95:85:16:8b:8c:3a:22:d4:3b:9f:9c:
                    a2:c0:29:d7:b0:30:3f:37:4f:6c:d4:a8:24:71:d2:
                    b9:04:2e:a3:45:1e:97:ee:a5:89:0b:d3:e1:e1:68:
                    7e:bb:07:b5:e5:58:30:c9:18:15:f3:8a:0e:1c:67:
                    14:f4:48:65:43:f1:7b:02:a6:2c:2d:63:ba:c7:b1:
                    11:7e:8a:c9:ae:4d:73:ae:13:ef:f8:23:a7:08:5c:
                    4b:7d:a7:da:94:fb:c7:bb:6b:93:f3:38:d3:5d:d0:
                    55:4e:a2:ae:b6:9f:34:75:db:49:88:b6:b7:c2:5e:
                    6d:ad:77:bc:a2:0f:02:0c:29:05:df:1c:8f:ed:2f:
                    58:95:8d:c5:bb:7f:55:87:2e:4e:88:cf:f8:e3:83:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:33:19:4E:32:9C:77:13:1B:4E:1B:8E:3D:A2:2C:D0:BA:AC:B3:45
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e39362e302f32322d3232203d3e203538383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:72:ca:1a:28:8d:49:4b:51:04:6b:3a:c1:d6:9e:11:db:91:
         a2:4e:c9:ff:fa:c1:84:41:68:36:1a:d8:f0:b4:ac:ca:67:22:
         98:57:64:3b:5d:34:8e:ce:1d:01:d2:76:fb:26:f6:47:e9:77:
         81:cb:13:d8:6c:6d:a7:3d:1b:e2:79:c9:ae:c5:b7:02:7b:fe:
         7a:7b:37:48:11:b0:95:ff:fb:d2:4f:48:ee:10:5e:ee:d5:e1:
         3c:8c:32:1a:4a:ef:03:34:c1:73:1c:b5:3c:13:77:72:f7:af:
         82:49:63:70:a0:3d:3b:7b:a4:77:04:2f:b7:97:c5:13:fe:c4:
         12:b6:3c:1f:74:8c:78:5a:e2:34:60:0e:7c:fe:29:ba:a9:95:
         20:b4:e7:a5:4e:f6:83:bf:b8:1d:cc:84:a4:d8:f0:7f:01:20:
         9c:bd:80:3d:8e:75:96:d8:27:9b:2c:be:be:d9:d3:09:a2:d0:
         6d:71:d9:cf:08:3a:9a:ab:ba:e2:ff:97:9d:8e:cd:e4:98:86:
         e3:d2:fd:08:97:76:cc:82:f4:39:48:41:e1:1a:e2:90:38:ec:
         cc:b4:69:35:ac:5e:fc:7f:0b:94:47:c3:57:3d:52:89:6c:38:
         93:79:4b:a1:44:f8:8c:93:74:07:81:63:03:67:68:e7:66:03:
         76:3f:c9:97
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdPqLUiuQZAkoAQAMRxoGAGR9u3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE
NzgxMDFENDAeFw0yNjA1MTIwODIyNTBaFw0yNzA1MTEwODI3NTBaMDMxMTAvBgNV
BAMTKDU4MzMxOTRFMzI5Qzc3MTMxQjRFMUI4RTNEQTIyQ0QwQkFBQ0IzNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUM3ZT/27fJowloBsuFlchxYft
KT9vmi7bro2VSs3z7uSOOUUdnXhqX8oOLDfCwVEtkGUU7DD6G9Z+jAhRG1tqicTv
2bAiyWfRh7o6bR822FM9vSa/QQ/wxQktO8PvM9E0SVRTpgDNunauxB6VhRaLjDoi
1DufnKLAKdewMD83T2zUqCRx0rkELqNFHpfupYkL0+HhaH67B7XlWDDJGBXzig4c
ZxT0SGVD8XsCpiwtY7rHsRF+ismuTXOuE+/4I6cIXEt9p9qU+8e7a5PzONNd0FVO
oq62nzR120mItrfCXm2td7yiDwIMKQXfHI/tL1iVjcW7f1WHLk6Iz/jjg+PZAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUWDMZTjKcdxMbThuOPaIs0Lqss0UwHwYDVR0j
BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0
RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDQ4NzgwOS8wLzMyMzEzMTJlMzEz
NTM1MmUzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM4MzUzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAtObYDANBgkqhkiG9w0BAQsFAAOCAQEAe3LKGiiNSUtRBGs6wdaeEduR
ok7J//rBhEFoNhrY8LSsymcimFdkO100js4dAdJ2+yb2R+l3gcsT2Gxtpz0b4nnJ
rsW3Anv+ens3SBGwlf/70k9I7hBe7tXhPIwyGkrvAzTBcxy1PBN3cvevgkljcKA9
O3ukdwQvt5fFE/7EErY8H3SMeFriNGAOfP4puqmVILTnpU72g7+4HcyEpNjwfwEg
nL2APY51ltgnmyy+vtnTCaLQbXHZzwg6mqu64v+XnY7N5JiG49L9CJd2zIL0OUhB
4RrikDjszLRpNaxe/H8LlEfDVz1SiWw4k3lLoUT4jJN0B4FjA2do52YDdj/Jlw==
-----END CERTIFICATE-----
Generated at Wed May 13 20:17:15 2026 by rpki-client