Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa
File:                     3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa (raw, json)
Hash identifier:          5x/Vxtm5m5rkP6zFckDqlG3l/AjZ13Z5TGq14rxe+2s=
Subject key identifier:   B9:2D:62:96:E9:0E:18:51:A6:38:B6:1A:8B:15:36:77:36:89:2B:24
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       0A3345020DE7490F482AD4D9D327C320C9DCBEB5
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa
Signing time:             Mon 13 Jul 2026 03:46:34 +0000
ROA not before:           Mon 13 Jul 2026 03:41:34 +0000
ROA not after:            Mon 12 Jul 2027 03:46:34 +0000
asID:                     197646
IP address blocks:        211.149.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:33:45:02:0d:e7:49:0f:48:2a:d4:d9:d3:27:c3:20:c9:dc:be:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:34 2026 GMT
            Not After : Jul 12 03:46:34 2027 GMT
        Subject: CN=B92D6296E90E1851A638B61A8B15367736892B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:71:7d:e2:23:bb:73:8f:9b:ef:6a:ae:df:c3:
                    0a:a5:bd:15:41:d5:e2:64:4b:92:da:07:69:54:e8:
                    ad:f4:a1:f4:7a:4f:f2:79:dd:45:4c:d9:b5:1c:42:
                    49:c6:30:e6:7a:01:5b:63:b8:1e:ad:97:b6:25:b0:
                    26:72:13:6b:5a:a8:0f:a1:10:a0:cb:c2:fb:45:ef:
                    f8:d2:d3:25:a9:9c:00:0b:b3:25:16:61:93:bb:dc:
                    62:c0:da:1a:42:9c:32:d3:b2:61:de:72:da:13:7d:
                    c5:ae:be:5c:98:8b:d0:8a:8e:dc:eb:6f:a8:24:e6:
                    aa:b6:52:da:00:b9:d7:78:51:ba:bb:a2:4b:7e:2f:
                    f2:bc:90:98:1b:20:0b:a2:37:96:27:46:a8:b6:84:
                    b1:3a:97:22:0e:a6:28:b8:0f:2d:80:01:6b:58:9c:
                    0e:e8:14:5a:0d:5d:be:8c:18:82:7d:f9:42:96:fc:
                    99:24:1c:b3:9d:c7:1a:74:b3:2a:cf:9b:c3:6d:7b:
                    71:bb:bd:7f:d6:df:d9:0e:9c:63:bb:a3:6b:6f:13:
                    2f:db:49:25:79:52:0c:fa:5a:49:96:06:df:af:78:
                    c0:0f:8d:fc:6b:24:42:60:26:ae:12:ce:a0:03:2c:
                    ae:3f:7d:2b:fc:60:d9:18:a1:9f:e8:f8:4a:ae:a4:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2D:62:96:E9:0E:18:51:A6:38:B6:1A:8B:15:36:77:36:89:2B:24
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.149.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:98:a6:b6:2a:55:90:3e:8c:28:20:dd:29:bf:3c:53:2c:
         da:dd:8c:d7:53:66:7a:4c:30:9e:09:e1:ee:f1:c0:21:18:52:
         3d:85:cc:73:40:76:8c:79:86:e4:11:2d:a8:6c:13:8a:d2:15:
         b1:46:5f:56:07:24:f3:72:3d:b3:73:e2:a9:f5:27:a0:6c:76:
         7b:1f:4b:f9:18:93:69:f7:48:79:0d:25:bb:2e:c9:79:fa:46:
         d8:44:49:5b:68:02:de:86:ce:d9:18:72:f9:2b:c2:cb:7e:cf:
         79:b4:bb:75:72:87:4b:7e:2a:02:d2:90:23:0f:dd:35:9f:de:
         d5:34:61:37:53:e1:7c:68:86:3b:19:62:16:e2:6e:aa:98:93:
         07:dc:01:1d:00:ad:3b:4f:07:26:59:fc:c4:f1:8f:d2:b2:06:
         d8:e0:86:87:54:84:bb:bb:f3:fa:7e:26:9a:96:87:35:48:0f:
         5c:64:e4:ee:8c:22:7e:7f:87:ec:26:b1:74:5e:dc:79:e5:d7:
         e6:b9:94:23:50:f3:76:70:01:5b:09:ca:ac:37:8a:d1:b3:10:
         75:3b:d2:2c:41:b0:2f:28:6b:aa:1f:78:8c:17:d6:0d:71:3e:
         fd:5c:62:72:36:f3:a6:06:d0:d9:87:1d:f7:b7:c3:78:48:a7:
         0f:30:d4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:03:32 2026 by rpki-client