Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f32302d3230203d3e20313334373733.roa
File:                     3231302e37362e36342e302f32302d3230203d3e20313334373733.roa (raw, json)
Hash identifier:          X9Byg2oL+7mZQskfgy5P6xBTJ1S+jZleGKd0EhY2nXM=
Subject key identifier:   FE:46:C2:10:E6:BC:6E:AD:16:9A:86:C4:D3:41:07:19:D7:41:5E:12
Certificate issuer:       /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial:       224E9BEC99FDD47C0BB61FBDB39D9EFD55450F04
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f32302d3230203d3e20313334373733.roa
Signing time:             Mon 27 Apr 2026 08:06:15 +0000
ROA not before:           Mon 27 Apr 2026 08:01:15 +0000
ROA not after:            Mon 26 Apr 2027 08:06:15 +0000
asID:                     134773
IP address blocks:        210.76.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:48:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4e:9b:ec:99:fd:d4:7c:0b:b6:1f:bd:b3:9d:9e:fd:55:45:0f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
        Validity
            Not Before: Apr 27 08:01:15 2026 GMT
            Not After : Apr 26 08:06:15 2027 GMT
        Subject: CN=FE46C210E6BC6EAD169A86C4D3410719D7415E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:35:db:89:1c:75:7d:e4:c8:32:78:42:ca:
                    43:c1:d0:ea:e5:2b:0c:24:e4:d6:ba:d8:fc:26:9f:
                    09:ec:08:9a:d0:b4:75:ad:4f:73:25:cf:f3:f2:ad:
                    8e:71:f9:f0:3a:3e:5a:50:fc:7a:86:34:c5:b2:9e:
                    8a:e8:da:66:1b:fb:a1:bb:5b:b2:d2:60:0e:66:38:
                    a2:7f:d7:7a:ac:96:f1:ae:90:30:31:ff:0a:68:4e:
                    c0:bf:88:3b:c3:ba:a4:f2:7f:67:0d:43:f2:58:28:
                    0b:04:73:6a:c2:d7:b4:03:b4:1f:88:8e:fa:8f:46:
                    d9:87:42:2e:7d:19:75:72:28:4a:70:57:50:7e:0c:
                    6c:3f:0b:31:6f:3d:3f:98:89:d2:c1:05:c1:fd:d8:
                    2f:ef:04:b8:0c:3b:fc:5d:b0:8d:85:9b:62:dd:27:
                    b8:06:f1:1b:90:ab:4d:3a:ac:c4:a1:30:1e:65:49:
                    71:0e:25:6b:23:6f:59:a6:3c:84:e6:38:7d:46:d5:
                    e3:9d:36:74:5d:e7:38:c1:da:d8:2e:05:e4:5b:27:
                    ce:f7:a9:fb:ce:15:c6:e5:c5:5b:fd:c0:34:f1:0b:
                    1e:fa:2a:b1:b3:ce:21:f5:d0:00:2d:79:5d:34:23:
                    9a:c1:d7:96:e8:ee:0b:91:1f:5a:7f:e8:90:c5:84:
                    5d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:46:C2:10:E6:BC:6E:AD:16:9A:86:C4:D3:41:07:19:D7:41:5E:12
            X509v3 Authority Key Identifier:
                keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3231302e37362e36342e302f32302d3230203d3e20313334373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:fe:9a:86:b4:db:73:32:e5:8b:7b:5a:9b:4c:88:e5:a3:af:
         01:76:a8:a0:9f:bd:8e:f0:71:4d:52:6e:68:3d:ae:26:46:86:
         d0:61:01:4b:8c:d7:e2:98:86:12:ed:fe:18:16:aa:04:0f:40:
         c2:47:3b:6d:28:2e:b9:ae:56:97:a8:75:66:2d:f1:0c:b6:b0:
         ef:1b:69:eb:4b:38:da:c8:47:5c:f5:7f:e3:86:d3:96:bd:89:
         d6:04:ab:bd:12:1a:52:7d:c7:55:4f:b4:ef:6e:d2:c4:6e:3a:
         08:3e:37:ab:e7:05:e6:c7:ac:8f:91:f7:b3:22:99:b5:69:40:
         46:5a:a3:b8:6b:6b:20:bf:eb:2d:52:8a:15:31:5a:22:63:e1:
         c8:74:5a:f0:e4:25:48:bf:cb:ef:cd:45:a2:57:7a:7c:1a:38:
         8d:a6:c6:e2:a2:27:24:b3:4f:4a:19:d4:19:ac:32:ec:f7:52:
         16:cd:31:d5:5b:5b:e3:26:20:55:3a:6d:43:70:f1:8b:ea:5d:
         3f:50:97:3e:60:df:6c:36:37:5c:7a:19:60:6a:99:ff:58:23:
         bd:65:2f:78:36:5a:b7:81:af:59:9b:c1:bd:3d:5c:78:ef:3e:
         64:e8:c6:6e:f3:8f:44:b0:00:ad:e0:22:02:17:87:27:9e:2a:
         fd:27:2a:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:40:24 2026 by rpki-client