Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa
File:                     3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          0d3U+ubk0JOJdQzBBX1BzvDs83O6VewFfTp4TtLiFCI=
Subject key identifier:   B9:FC:45:B3:7D:9C:30:43:8E:FA:CC:E6:5B:B8:FB:EB:25:61:EB:43
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       37128163C5988BE69F9625267BDAB0C510D87788
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa
Signing time:             Wed 06 May 2026 06:40:54 +0000
ROA not before:           Wed 06 May 2026 06:35:54 +0000
ROA not after:            Wed 05 May 2027 06:40:54 +0000
asID:                     204765
IP address blocks:        211.149.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:12:81:63:c5:98:8b:e6:9f:96:25:26:7b:da:b0:c5:10:d8:77:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May  6 06:35:54 2026 GMT
            Not After : May  5 06:40:54 2027 GMT
        Subject: CN=B9FC45B37D9C30438EFACCE65BB8FBEB2561EB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:d1:b6:87:60:03:b1:9d:20:05:23:42:44:
                    7d:5b:16:bf:ca:d9:08:94:85:91:8a:53:55:0d:ab:
                    3f:ee:14:26:b5:95:db:4a:38:e4:42:ff:da:16:3e:
                    84:07:71:1f:3d:05:a1:aa:6c:bb:21:8a:de:f7:7f:
                    bf:52:56:91:6c:52:01:7e:a1:cf:07:04:c1:14:4e:
                    e0:cd:aa:12:1d:34:7e:07:39:a9:05:fa:6a:d5:3b:
                    24:a0:bb:5d:96:a6:78:23:2d:fc:e0:ae:1f:14:19:
                    88:0b:81:25:36:d9:93:91:8e:c6:eb:dd:8f:61:7f:
                    18:fc:48:e7:9f:3e:69:ac:17:41:cb:c2:a2:a1:90:
                    e8:8d:56:26:b0:ae:8a:dd:c6:df:06:ab:b9:29:d1:
                    14:c3:cd:af:71:0e:a9:be:8f:f9:56:0f:dd:c2:2b:
                    cb:87:0b:e2:57:d3:cd:43:19:6d:fb:67:ff:d6:14:
                    67:94:e9:54:6c:dc:7b:81:10:3d:12:dd:1f:56:c7:
                    e6:e0:62:03:00:03:e7:33:0c:63:23:07:50:37:9e:
                    ad:2f:a9:8e:8f:d2:bd:6c:b9:a8:60:ac:d9:38:cb:
                    ed:1e:e4:7f:c0:a2:10:19:ea:0f:aa:93:ae:fa:33:
                    5b:d5:55:d3:21:a6:13:88:5f:f0:0b:e1:92:c5:1f:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FC:45:B3:7D:9C:30:43:8E:FA:CC:E6:5B:B8:FB:EB:25:61:EB:43
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.149.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:f3:75:81:9e:7d:4d:63:3b:38:09:55:a9:04:b6:24:47:6e:
         35:a5:b1:73:68:33:a4:59:cc:da:15:83:83:8a:af:17:7d:40:
         3a:87:fa:17:7c:0c:50:e1:59:0c:05:8a:b6:67:c8:59:61:bd:
         89:05:1e:01:1d:bf:e3:84:76:e1:a7:49:93:d3:ab:c2:7c:56:
         32:43:f5:dd:4d:ff:b4:ec:e8:01:92:cf:b9:d0:af:90:de:a2:
         99:5a:25:d5:c6:0b:8b:af:1b:95:d0:b2:d9:ed:fd:cc:66:a9:
         39:8e:19:85:b3:0f:72:70:a0:62:1d:36:13:24:c4:de:79:36:
         d1:d0:36:c6:52:4f:d9:a7:60:a3:fd:07:6b:b6:73:14:e4:8b:
         42:12:10:70:a2:76:64:b0:33:e4:10:49:45:cb:ec:04:f3:f7:
         9f:8a:a5:1d:3c:1f:d1:4b:09:6e:cf:3a:96:d2:37:17:7d:85:
         c6:eb:13:f9:3c:26:e6:a0:64:df:5f:e7:52:c1:2a:58:af:35:
         d0:aa:fe:f1:2a:da:27:ad:44:71:c4:98:6a:34:2d:30:91:e3:
         45:18:a0:72:a8:18:e6:9f:7e:68:ab:5e:c5:90:fc:a1:84:3e:
         20:ad:10:62:6e:d2:f5:78:e3:d4:16:48:08:2e:37:de:14:8d:
         37:0e:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:46:03 2026 by rpki-client