Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa
File:                     3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa (raw, json)
Hash identifier:          mGhhS9V+FPXHBGr0eZP7LW1/tN5GxJ8237aMyOgPCuA=
Subject key identifier:   97:24:AA:14:02:56:93:F4:C8:3E:A8:D8:89:92:56:AB:15:86:2F:D6
Certificate issuer:       /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
Certificate serial:       4A918266BF2B20BA7A780443EDA1AE18D4067E81
Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa
Signing time:             Fri 08 May 2026 08:29:37 +0000
ROA not before:           Fri 08 May 2026 08:24:37 +0000
ROA not after:            Fri 07 May 2027 08:29:37 +0000
asID:                     63631
IP address blocks:        119.161.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:91:82:66:bf:2b:20:ba:7a:78:04:43:ed:a1:ae:18:d4:06:7e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953
        Validity
            Not Before: May  8 08:24:37 2026 GMT
            Not After : May  7 08:29:37 2027 GMT
        Subject: CN=9724AA14025693F4C83EA8D8899256AB15862FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:c6:0e:df:60:98:78:28:a3:f3:c7:84:e8:
                    c2:06:39:33:1d:56:13:4c:fe:f0:d5:23:0d:d2:f1:
                    3f:98:fd:04:65:1a:91:f4:0f:f5:b0:a7:86:a7:25:
                    52:d6:1a:0f:2d:9a:c9:a5:b1:f7:5f:3b:55:e4:c6:
                    96:70:1a:61:12:3c:71:bb:e3:00:b1:4f:b9:90:07:
                    ba:92:17:e8:4e:42:f2:c8:97:81:50:06:a7:71:3f:
                    46:e2:50:fa:1d:e3:c7:d6:c3:4f:1a:62:35:9a:e2:
                    dd:96:8f:9b:bb:6c:9d:51:71:00:3e:74:ea:b8:c7:
                    82:cc:49:a6:07:61:80:d0:90:8e:f6:8b:5d:06:aa:
                    89:13:b7:3b:64:0d:93:80:98:48:87:74:7f:81:e9:
                    7c:d9:cc:b8:d4:3a:15:41:bf:f1:c0:c2:5d:29:f0:
                    01:02:9b:f8:54:94:a1:b5:dc:90:0e:c8:94:e8:0a:
                    82:52:ca:75:ec:73:6c:78:df:6c:0c:c7:5d:99:8c:
                    51:f5:e5:87:a0:e0:10:92:31:dd:0e:49:bf:de:16:
                    84:ab:5f:73:eb:fc:37:68:ce:f1:17:2a:f3:9f:8b:
                    f1:2e:c0:b0:4e:65:e9:cd:45:fe:09:38:9d:24:d2:
                    c2:ee:f0:28:78:ec:f1:df:07:cf:2d:88:56:a4:6d:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:24:AA:14:02:56:93:F4:C8:3E:A8:D8:89:92:56:AB:15:86:2F:D6
            X509v3 Authority Key Identifier:
                keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3131392e3136312e3135362e302f32322d3232203d3e203633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.161.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:85:d8:28:c3:b3:59:67:d5:e8:59:5c:39:72:db:e4:97:d7:
         cf:b7:09:8e:1c:26:d2:d7:c1:d7:81:a5:37:50:81:b4:38:3b:
         c7:75:51:db:ea:e9:ba:e4:cd:72:b6:70:e3:7f:a9:fd:c9:ec:
         c2:9f:76:e0:d9:32:4f:60:a4:f8:10:79:d2:ee:93:b8:5e:08:
         d4:a8:26:b8:59:ee:59:b6:98:01:c7:ac:29:b7:ab:c5:fc:62:
         72:82:22:03:4a:18:94:f2:81:43:80:a6:d3:24:c4:ba:aa:ad:
         96:fe:b6:cf:12:68:b1:7c:a2:79:39:27:a9:35:ae:69:0f:75:
         52:4f:48:6e:cf:50:74:e8:b2:c0:56:47:17:bc:15:c4:80:97:
         e1:2c:76:92:ee:62:af:86:7d:67:32:5b:17:74:e6:fa:f1:6d:
         00:8d:d6:3c:9c:05:ad:e0:af:c7:9d:d9:10:b8:33:0f:02:02:
         2b:10:a6:0b:93:f9:ba:c3:a7:bb:0a:8e:36:5b:a4:e1:e7:e2:
         7d:87:ea:b7:41:9f:f9:03:99:1c:a1:6e:ea:9f:46:7c:a1:d1:
         9d:c3:ec:ee:e8:8a:f9:4c:f9:4a:50:61:59:41:9d:fa:bd:8c:
         80:f5:19:c0:5d:12:32:3d:c5:02:3b:0f:38:a4:bf:2e:19:bb:
         42:b4:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:07 2026 by rpki-client