Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f31392d3139203d3e20313334373733.roa
File:                     3231302e37362e36342e302f31392d3139203d3e20313334373733.roa (raw, json)
Hash identifier:          us7GnuSdY3zKMXwmCkSqs755xEWQfRCvuiuGZb18nyI=
Subject key identifier:   6A:EF:0B:21:B9:C0:62:A6:74:80:1A:FE:FA:CF:D5:4A:DD:88:A9:7E
Certificate issuer:       /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial:       3173EF4B5F8315C68CFA5C394F6DAE0F1076FD37
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f31392d3139203d3e20313334373733.roa
Signing time:             Mon 27 Apr 2026 08:06:16 +0000
ROA not before:           Mon 27 Apr 2026 08:01:16 +0000
ROA not after:            Mon 26 Apr 2027 08:06:16 +0000
asID:                     134773
IP address blocks:        210.76.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:73:ef:4b:5f:83:15:c6:8c:fa:5c:39:4f:6d:ae:0f:10:76:fd:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
        Validity
            Not Before: Apr 27 08:01:16 2026 GMT
            Not After : Apr 26 08:06:16 2027 GMT
        Subject: CN=6AEF0B21B9C062A674801AFEFACFD54ADD88A97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:71:02:82:c6:4b:47:c3:54:80:02:db:06:bf:
                    ae:48:48:43:fe:9c:e6:67:07:d2:8a:35:95:68:0d:
                    bf:c0:d8:ad:2b:4d:bc:b4:d7:0e:bd:cf:76:43:73:
                    4a:d5:d2:eb:cb:57:8a:a3:d3:81:95:66:3a:23:de:
                    d7:ac:9b:1c:d0:28:c2:78:68:0a:e4:58:5e:9a:46:
                    dc:fe:4b:34:a5:3d:0c:af:f8:50:d7:5c:01:d6:93:
                    84:89:7f:50:07:35:e6:6b:1d:32:91:f9:41:9e:a5:
                    53:bd:c6:f9:e5:16:89:fa:ec:e2:c1:ad:ce:13:f2:
                    66:4c:8e:ad:f5:64:77:ac:94:bb:74:a7:ee:41:13:
                    8c:43:48:8b:66:4a:00:64:68:34:41:e4:99:fc:f8:
                    95:0a:b7:a6:98:22:75:33:9f:08:1e:10:a3:05:5a:
                    b5:b6:80:2b:d1:6a:df:94:dd:4e:42:84:55:0f:c8:
                    ba:b9:fd:74:9a:9b:0f:45:40:2f:04:b5:0c:6c:6f:
                    65:ea:55:58:84:b7:b5:1e:98:7b:0b:54:aa:aa:5a:
                    40:89:34:d5:4a:a2:e9:5a:7d:d6:ac:d1:1f:ec:b6:
                    3a:03:86:82:cc:7e:11:66:af:b0:8f:52:f5:64:02:
                    0e:55:58:a8:35:19:0d:bd:a8:78:23:b1:3a:24:bc:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EF:0B:21:B9:C0:62:A6:74:80:1A:FE:FA:CF:D5:4A:DD:88:A9:7E
            X509v3 Authority Key Identifier:
                keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f31392d3139203d3e20313334373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:eb:ba:73:88:75:4a:d7:52:32:ce:cc:2b:1e:28:fe:b2:f7:
         72:86:b4:ca:a6:55:d0:32:e0:ae:d2:b0:6a:0c:a3:66:4b:66:
         24:4f:39:25:29:77:ba:14:58:bc:bc:ba:fc:b4:30:25:95:1a:
         cc:66:a6:31:56:db:93:1c:3f:15:fe:58:a9:c8:70:d9:66:03:
         00:05:6a:f0:e9:d1:34:52:92:d5:12:8c:a9:70:c1:b2:70:27:
         03:27:67:0b:26:b8:da:34:30:58:ae:29:ea:0f:45:aa:ab:cb:
         ab:26:02:8a:a2:65:02:e6:57:01:a1:a6:77:19:08:f9:15:c3:
         a0:0e:02:ec:6a:bb:45:48:5e:8b:5c:a0:41:ea:2f:3c:c5:5e:
         4b:57:0c:06:3b:e9:ff:fb:ef:6c:7f:64:4e:18:17:33:78:08:
         cf:48:ba:92:b8:9e:e4:a5:c2:9f:d3:6c:64:f8:60:6e:c7:d9:
         c1:e2:c6:8f:e2:54:7f:67:73:36:ae:2a:0c:62:bf:1d:c9:4a:
         c9:4f:55:95:fb:cd:a7:fb:16:cd:08:40:62:97:46:51:88:93:
         7c:17:63:be:a4:51:91:56:b4:bd:8b:f8:f9:80:a8:05:a7:09:
         d6:97:94:0a:0a:3f:75:90:21:b8:74:b3:a9:d3:a9:47:78:84:
         7f:02:e3:c7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUMXPvS1+DFcaM+lw5T22uDxB2/TcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURF
RjRDMkNFNjAeFw0yNjA0MjcwODAxMTZaFw0yNzA0MjYwODA2MTZaMDMxMTAvBgNV
BAMTKDZBRUYwQjIxQjlDMDYyQTY3NDgwMUFGRUZBQ0ZENTRBREQ4OEE5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxcQKCxktHw1SAAtsGv65ISEP+
nOZnB9KKNZVoDb/A2K0rTby01w69z3ZDc0rV0uvLV4qj04GVZjoj3tesmxzQKMJ4
aArkWF6aRtz+SzSlPQyv+FDXXAHWk4SJf1AHNeZrHTKR+UGepVO9xvnlFon67OLB
rc4T8mZMjq31ZHeslLt0p+5BE4xDSItmSgBkaDRB5Jn8+JUKt6aYInUznwgeEKMF
WrW2gCvRat+U3U5ChFUPyLq5/XSamw9FQC8EtQxsb2XqVViEt7UemHsLVKqqWkCJ
NNVKoulafdas0R/stjoDhoLMfhFmr7CPUvVkAg5VWKg1GQ29qHgjsTokvOlBAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUau8LIbnAYqZ0gBr++s/VSt2IqX4wHwYDVR0j
BBgwFoAURa5R8xjTVTK+tv/8Yioqre9MLOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzA2MTI0OS8wLzQ1QUU1MUYzMThEMzU1MzJCRUI2RkZGQzYyMkEy
QUFERUY0QzJDRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURFRjRDMkNFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0NzA2MTI0OS8wLzMyMzEzMDJlMzcz
NjJlMzYzNDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMxMzMzNDM3MzczMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBdJMQDANBgkqhkiG9w0BAQsFAAOCAQEAC+u6c4h1StdSMs7MKx4o/rL3
coa0yqZV0DLgrtKwagyjZktmJE85JSl3uhRYvLy6/LQwJZUazGamMVbbkxw/Ff5Y
qchw2WYDAAVq8OnRNFKS1RKMqXDBsnAnAydnCya42jQwWK4p6g9FqqvLqyYCiqJl
AuZXAaGmdxkI+RXDoA4C7Gq7RUhei1ygQeovPMVeS1cMBjvp//vvbH9kThgXM3gI
z0i6krie5KXCn9NsZPhgbsfZweLGj+JUf2dzNq4qDGK/HclKyU9VlfvNp/sWzQhA
YpdGUYiTfBdjvqRRkVa0vYv4+YCoBacJ1peUCgo/dZAhuHSzqdOpR3iEfwLjxw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:13 2026 by rpki-client