Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa
File:                     3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          VO5OJNSEUdlOs/FaBLyF/tc16MYOe09oXKs+dmGlCvI=
Subject key identifier:   32:63:C4:49:94:E7:22:91:CE:2F:B2:82:0C:DE:78:D0:F9:CE:00:7A
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       09940EE76E194F97BF0BCA8A07D39A82FA762ABA
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa
Signing time:             Wed 06 May 2026 06:40:47 +0000
ROA not before:           Wed 06 May 2026 06:35:47 +0000
ROA not after:            Wed 05 May 2027 06:40:47 +0000
asID:                     204765
IP address blocks:        211.149.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:94:0e:e7:6e:19:4f:97:bf:0b:ca:8a:07:d3:9a:82:fa:76:2a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May  6 06:35:47 2026 GMT
            Not After : May  5 06:40:47 2027 GMT
        Subject: CN=3263C44994E72291CE2FB2820CDE78D0F9CE007A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:92:28:52:3c:2e:0a:89:f8:30:29:6d:16:9e:
                    36:f5:6a:71:73:94:36:93:65:bc:e8:c0:3c:e0:4c:
                    76:61:16:66:e8:bd:5d:97:72:fa:25:39:ed:f6:0c:
                    d4:fb:98:aa:1c:2d:79:10:b6:cc:65:8c:0b:59:a3:
                    da:f2:1f:75:e5:10:c3:ce:93:4a:34:c8:61:b6:3d:
                    db:85:73:60:d1:95:ce:23:9e:b2:4f:b6:8f:d4:91:
                    66:56:6f:6e:68:71:4b:78:1f:3b:b0:46:d2:53:f2:
                    e8:0c:f9:09:f9:1b:c1:4d:0c:7b:4b:9b:c5:a7:2d:
                    d8:66:0f:2b:92:8e:65:4c:e9:cc:17:39:ea:57:2e:
                    b4:43:18:07:7c:94:b4:8e:cf:7e:5e:84:d7:4a:94:
                    7b:e2:ec:e8:9e:aa:33:18:07:b4:9b:55:03:16:da:
                    15:b4:4a:59:05:7b:01:dd:c2:11:a5:3b:5f:ad:fc:
                    24:50:39:47:83:7d:0a:03:e1:52:f6:3f:3f:a6:92:
                    2d:b1:28:0d:d1:ce:8f:93:0b:a2:18:72:1a:a3:53:
                    dc:0b:19:40:7d:c0:b7:3c:33:d5:ff:5f:c0:63:b0:
                    cd:8e:94:55:d4:43:59:92:30:0e:6a:3e:69:fe:95:
                    25:c9:83:a6:d5:a0:e6:0a:df:1e:b1:7a:3f:31:5e:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:63:C4:49:94:E7:22:91:CE:2F:B2:82:0C:DE:78:D0:F9:CE:00:7A
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.149.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:af:49:55:57:77:76:e7:eb:b5:c9:58:89:05:96:08:50:10:
         c4:d7:68:b5:4d:40:33:d6:d1:0a:a8:69:3b:e2:28:cd:24:17:
         cc:65:aa:2a:be:d3:b9:9c:12:07:4c:42:8e:c2:51:43:96:22:
         55:ad:67:f7:09:e6:e1:8f:91:11:54:8d:80:dc:88:53:30:fa:
         3e:40:67:71:0b:f9:22:ee:c0:05:0f:98:a8:2f:3b:e5:9e:93:
         09:29:0c:00:e7:13:7a:4b:32:4f:13:02:e9:49:2b:2e:7f:aa:
         18:0b:29:57:13:46:1b:a6:eb:a5:c0:c0:29:67:dd:e8:c3:03:
         31:50:c8:ba:da:35:65:d8:a1:59:b1:08:69:55:d4:43:5e:5c:
         a7:ca:39:b6:af:33:be:7b:38:46:23:26:7f:6a:f8:87:c0:ef:
         2a:e6:3b:66:61:73:7a:30:47:a6:29:cd:4b:c4:63:77:2a:88:
         11:30:2f:e4:b3:98:9c:d6:06:62:5d:1d:b4:03:41:6f:ca:d5:
         4b:87:59:6e:af:9a:b5:64:35:b0:dd:a4:bd:1c:0e:f4:a1:7d:
         a6:68:ac:ed:cc:5e:34:77:f1:4f:bd:b3:96:91:2a:fa:2e:15:
         f0:f9:68:0f:b7:6e:0b:c6:6d:a7:68:12:d3:a0:37:a7:f8:37:
         f8:1b:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:24:06 2026 by rpki-client