Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e35322e302f32322d3234203d3e20323034373635.roa
File:                     3231312e3134392e35322e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          GCkEDrmVp4u/o7GoYL0QbYoBa/NYp5XMq7IfyDKLAVI=
Subject key identifier:   F5:7A:ED:0D:07:4F:6D:A5:52:6A:EF:01:83:86:FD:2E:48:F0:03:80
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       045A95F31060F64D1D8986F4832822492AF4FBF5
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e35322e302f32322d3234203d3e20323034373635.roa
Signing time:             Wed 06 May 2026 06:41:11 +0000
ROA not before:           Wed 06 May 2026 06:36:11 +0000
ROA not after:            Wed 05 May 2027 06:41:11 +0000
asID:                     204765
IP address blocks:        211.149.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5a:95:f3:10:60:f6:4d:1d:89:86:f4:83:28:22:49:2a:f4:fb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May  6 06:36:11 2026 GMT
            Not After : May  5 06:41:11 2027 GMT
        Subject: CN=F57AED0D074F6DA5526AEF018386FD2E48F00380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:49:9c:90:25:66:eb:5d:a1:b7:3b:c5:ab:45:
                    6d:1a:46:07:61:60:dc:bc:39:2b:f4:e2:99:cb:a4:
                    b7:bd:63:3a:c5:7f:da:77:f3:a7:1b:c5:8d:22:11:
                    1d:74:b9:be:81:5c:d3:18:ca:6c:92:b8:46:e8:77:
                    40:86:68:66:36:96:60:43:eb:70:ef:2f:ac:be:b6:
                    28:38:9f:e7:ca:70:8b:c0:7c:4a:bb:9b:80:38:91:
                    c3:37:97:13:30:61:a0:be:1b:b8:e4:02:68:99:61:
                    87:07:57:48:99:1a:b5:dc:09:35:e9:b6:09:cf:e8:
                    b9:3e:a5:f9:ac:5b:7e:a2:c3:a4:68:d3:91:5e:98:
                    58:b9:f8:f5:70:a5:8d:e9:eb:0c:f7:bb:9c:c8:f2:
                    39:cf:62:6e:20:36:61:38:72:d5:c8:23:24:c9:ab:
                    26:1a:0a:82:0c:98:df:6f:46:12:88:ec:c4:9a:95:
                    3f:b7:2a:c8:ef:fa:fa:48:dc:e9:17:91:78:d7:90:
                    48:a3:e8:21:f6:66:de:85:b7:ad:11:a2:c3:28:a9:
                    bf:15:a0:be:89:d2:36:83:52:a6:37:6e:90:9c:c3:
                    fe:ac:a6:ff:c9:2b:1a:6a:18:13:6b:4c:66:db:d8:
                    52:e5:80:51:e0:98:e2:02:87:fd:53:be:6b:82:5a:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7A:ED:0D:07:4F:6D:A5:52:6A:EF:01:83:86:FD:2E:48:F0:03:80
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e35322e302f32322d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.149.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:bc:30:4e:93:a2:55:bb:43:ff:42:f4:17:49:55:ce:a8:a1:
         3c:21:3e:95:f4:da:d3:0b:ce:c4:d3:49:f6:b8:3d:13:e2:f6:
         27:09:28:0c:db:a2:03:82:62:a9:39:66:b0:c6:94:18:d7:97:
         ac:4b:6f:a1:bb:ce:09:f2:da:09:7d:40:5c:61:33:f1:d3:b1:
         08:9b:c4:cc:e4:8d:26:b1:69:eb:0a:55:32:bf:50:4d:d8:f4:
         84:42:b6:ae:55:ab:2a:6a:e9:7b:ba:71:a2:24:14:3e:68:c6:
         f9:62:53:f1:e1:cc:0a:79:49:bd:68:3f:78:19:3b:d8:ec:61:
         c3:8d:91:87:d5:ca:ce:bf:3a:32:ae:9e:3c:37:7e:7a:03:a4:
         82:5e:e7:c7:9a:29:6d:6d:ef:ab:38:d2:9c:23:79:5f:a4:27:
         58:51:f9:58:a0:c2:63:4b:f3:53:a3:ca:f0:f7:40:93:66:7e:
         88:25:5b:86:bd:39:eb:2f:56:d7:ee:e6:ff:d4:af:e3:df:c9:
         95:87:82:d8:70:39:e6:f5:a2:07:f2:15:6b:55:ea:42:c9:4d:
         0f:6f:0a:dd:6f:13:5d:04:08:aa:57:94:e6:ed:60:bb:d2:5e:
         17:fe:53:90:bf:63:47:4b:e7:4e:ff:d8:25:e9:d1:7a:30:82:
         eb:43:c6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:36:33 2026 by rpki-client