Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa
File:                     3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          2b991MAvDvpzk4iuLjGYGQrUcY+E3hnHdVgOoDYc9N4=
Subject key identifier:   4B:E9:97:2D:02:94:23:4C:C8:91:FB:AE:C3:2C:D0:1B:5A:7B:9D:59
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       23351E3E8258690E4B28D1B3860EE2155B5A0AE5
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa
Signing time:             Wed 06 May 2026 06:42:05 +0000
ROA not before:           Wed 06 May 2026 06:37:05 +0000
ROA not after:            Wed 05 May 2027 06:42:05 +0000
asID:                     204765
IP address blocks:        211.149.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:35:1e:3e:82:58:69:0e:4b:28:d1:b3:86:0e:e2:15:5b:5a:0a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May  6 06:37:05 2026 GMT
            Not After : May  5 06:42:05 2027 GMT
        Subject: CN=4BE9972D0294234CC891FBAEC32CD01B5A7B9D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:3a:89:35:df:d1:ff:93:a8:c3:66:0b:d2:
                    76:be:89:56:80:73:6d:dd:c8:e8:7d:17:03:67:5f:
                    62:de:32:c8:8d:16:f9:4b:cd:93:3f:ec:14:2a:1d:
                    3c:ef:d3:70:e0:f1:de:86:e5:45:48:17:88:09:2f:
                    de:8e:e6:a2:31:4a:19:ba:b2:ab:5a:4b:48:4a:1c:
                    21:a8:38:9a:7a:9f:81:c0:c6:d9:ce:d0:b5:ae:17:
                    78:24:83:83:43:c3:ce:35:50:3b:02:ba:c0:a3:40:
                    cf:f5:fa:e1:22:94:8a:90:8b:8e:c0:94:fb:ec:66:
                    3d:82:45:71:c1:7c:40:21:8d:48:ce:33:58:12:c4:
                    db:e2:0b:06:1f:3b:db:e5:ff:36:80:d4:6c:6a:ca:
                    65:5d:f1:49:09:99:70:5f:4f:95:36:ee:a3:6a:6b:
                    c4:af:26:10:8d:97:3e:14:2d:e2:07:79:59:9a:68:
                    fa:da:29:14:23:f2:21:fd:d6:39:ff:c4:17:e0:05:
                    62:b9:54:fc:60:4b:f6:ab:11:bb:fa:0b:f8:9f:14:
                    db:9a:cb:20:e5:15:b5:d2:0e:ff:54:c0:4f:3b:70:
                    a5:cc:16:af:12:c0:3e:88:a1:5d:4e:b0:82:ef:73:
                    b7:fa:6e:20:ee:20:35:96:71:c2:84:d2:7c:3d:bf:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E9:97:2D:02:94:23:4C:C8:91:FB:AE:C3:2C:D0:1B:5A:7B:9D:59
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.149.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:d7:09:db:75:b0:0b:97:2f:18:0b:1d:a1:31:82:c3:01:e9:
         f2:04:7e:eb:5c:8f:0f:f5:88:f2:3f:cf:14:26:4d:ec:3e:85:
         75:ea:22:00:1f:98:38:24:5b:28:15:ea:3a:48:11:59:66:73:
         f7:7d:01:aa:9c:64:7b:39:2b:0f:71:6c:b4:c1:b5:1c:1b:c3:
         aa:dc:b8:11:c2:73:14:d8:86:74:67:69:04:64:0f:c3:17:a7:
         f6:47:11:55:f3:1d:dc:af:b0:48:86:64:35:6d:77:ad:2c:72:
         8b:74:93:a2:b5:2d:9e:50:a8:c1:b8:f8:a5:ff:da:d6:66:a4:
         fd:f1:ad:e1:d3:92:b9:20:75:60:d2:81:c5:a3:40:0c:fd:ed:
         d6:49:8c:50:e7:c9:bc:86:87:eb:10:8d:fe:20:0a:d2:bf:71:
         af:dd:2f:af:ac:cc:db:58:4e:6b:0d:19:7e:7c:e4:30:08:f6:
         d1:8e:12:39:1c:81:b6:6b:be:e8:36:1c:70:18:86:3f:12:28:
         53:18:8b:10:f2:60:87:e5:39:f3:23:1d:ab:55:e4:5b:fb:eb:
         6a:e2:bd:2a:28:0d:ce:b0:69:7e:d4:ed:75:20:88:6c:7a:59:
         d0:8f:89:3c:0b:04:15:89:2a:4c:e1:1b:73:cd:b1:a7:59:a6:
         18:8e:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:46 2026 by rpki-client