Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38342e302f32322d3234203d3e20323034373635.roa
File:                     3231312e3134392e38342e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          cdrj0RMAvGPB1G0qyNz3ZFmQ6qDyR+94zeccEp7MM/o=
Subject key identifier:   0E:C3:EA:1D:B3:E5:0B:3F:EE:D6:00:DC:7B:6C:F6:3E:0E:B5:55:D5
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       575BCF170EDC3BB2EBDD87613CF454EB9395DF3C
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38342e302f32322d3234203d3e20323034373635.roa
Signing time:             Wed 06 May 2026 06:42:42 +0000
ROA not before:           Wed 06 May 2026 06:37:42 +0000
ROA not after:            Wed 05 May 2027 06:42:42 +0000
asID:                     204765
IP address blocks:        211.149.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5b:cf:17:0e:dc:3b:b2:eb:dd:87:61:3c:f4:54:eb:93:95:df:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May  6 06:37:42 2026 GMT
            Not After : May  5 06:42:42 2027 GMT
        Subject: CN=0EC3EA1DB3E50B3FEED600DC7B6CF63E0EB555D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:15:00:2d:b5:80:23:82:09:6e:09:9b:8d:47:
                    e0:c6:1d:b4:a0:eb:2c:ba:ac:47:6b:cc:78:da:65:
                    26:eb:b7:47:40:db:03:46:4e:be:44:9b:dd:d7:29:
                    7d:55:ec:d5:0e:ce:90:9b:92:ce:be:de:5e:6b:a8:
                    2a:0b:15:0f:00:ea:54:31:42:80:c3:a8:5b:02:bb:
                    19:3c:6f:d8:eb:93:32:5f:9a:f7:2e:d4:60:4f:60:
                    9b:b3:3a:49:ce:ce:74:9b:2e:16:fe:4f:08:48:c8:
                    87:0c:cb:9b:ae:d7:d0:d5:37:85:38:67:b6:a5:6e:
                    90:47:39:85:87:58:96:67:8d:ba:33:a2:36:18:12:
                    24:db:78:e0:92:74:aa:75:8f:58:42:97:39:cc:fe:
                    60:06:24:0a:6f:dc:9b:f6:1c:fb:55:0f:31:df:f9:
                    72:39:e4:6f:bc:3c:68:10:2a:8e:b6:e5:b6:9f:0a:
                    59:ee:f8:95:c3:e6:b5:93:6c:83:50:24:19:ba:8b:
                    e4:90:ce:f5:d6:91:dd:79:25:d8:eb:63:c2:c2:2b:
                    22:2c:e6:99:f0:05:de:d2:02:74:06:15:67:4b:93:
                    3d:ce:fc:7c:11:29:00:4a:2d:6e:59:8b:ce:0c:bf:
                    41:45:7a:e4:44:cc:1d:fe:a9:ca:91:64:d4:91:88:
                    12:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C3:EA:1D:B3:E5:0B:3F:EE:D6:00:DC:7B:6C:F6:3E:0E:B5:55:D5
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38342e302f32322d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.149.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:d1:6d:15:6b:1c:79:37:06:c5:d0:fc:12:f0:65:50:64:8f:
         4c:16:c9:a3:ce:34:c3:de:12:49:53:69:e0:47:ed:a9:8d:0c:
         a4:8e:7a:24:27:45:19:a6:3a:90:f0:92:9b:7e:33:0c:00:81:
         97:b9:e9:ab:97:d4:67:62:49:f7:cd:e4:0b:0b:cb:18:c0:ac:
         cb:81:e2:09:f0:9e:95:73:35:c9:f8:1d:aa:1d:c1:7f:3f:c2:
         94:1e:fb:99:94:82:9f:0a:47:43:24:f5:53:a9:b6:f7:a6:aa:
         ea:06:36:9e:a2:af:58:7a:74:ab:d0:a5:5b:1f:a7:50:4b:1a:
         c0:75:59:88:5d:d7:62:be:4d:40:a8:a4:ed:f4:7c:c6:1b:3a:
         16:60:96:68:20:67:db:c3:3d:ee:73:72:98:32:ac:97:33:dc:
         62:1a:1d:dc:cc:d7:f3:2f:73:15:35:56:70:03:43:22:ce:88:
         eb:f2:a9:87:17:21:8f:a2:4c:a2:d0:26:d9:ed:13:99:a3:81:
         3f:86:97:90:46:1a:96:e8:2a:f3:76:5e:54:f7:e5:94:14:ec:
         4f:66:7d:88:0f:da:7c:7b:28:b7:e8:11:e0:44:2a:06:83:76:
         43:c2:14:6c:99:8e:68:54:b0:8c:82:f7:f9:bb:39:1e:fc:1b:
         c7:43:f1:d5
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUV1vPFw7cO7Lr3YdhPPRU65OV3zwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA1MDYwNjM3NDJaFw0yNzA1MDUwNjQyNDJaMDMxMTAvBgNV
BAMTKDBFQzNFQTFEQjNFNTBCM0ZFRUQ2MDBEQzdCNkNGNjNFMEVCNTU1RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXFQAttYAjggluCZuNR+DGHbSg
6yy6rEdrzHjaZSbrt0dA2wNGTr5Em93XKX1V7NUOzpCbks6+3l5rqCoLFQ8A6lQx
QoDDqFsCuxk8b9jrkzJfmvcu1GBPYJuzOknOznSbLhb+TwhIyIcMy5uu19DVN4U4
Z7albpBHOYWHWJZnjbozojYYEiTbeOCSdKp1j1hClznM/mAGJApv3Jv2HPtVDzHf
+XI55G+8PGgQKo625bafClnu+JXD5rWTbINQJBm6i+SQzvXWkd15JdjrY8LCKyIs
5pnwBd7SAnQGFWdLkz3O/HwRKQBKLW5Zi84Mv0FFeuREzB3+qcqRZNSRiBIZAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUDsPqHbPlCz/u1gDce2z2Pg61VdUwHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMjMxMzEyZTMx
MzQzOTJlMzgzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAtOVVDANBgkqhkiG9w0BAQsFAAOCAQEAQ9FtFWsceTcGxdD8EvBl
UGSPTBbJo840w94SSVNp4EftqY0MpI56JCdFGaY6kPCSm34zDACBl7npq5fUZ2JJ
983kCwvLGMCsy4HiCfCelXM1yfgdqh3Bfz/ClB77mZSCnwpHQyT1U6m296aq6gY2
nqKvWHp0q9ClWx+nUEsawHVZiF3XYr5NQKik7fR8xhs6FmCWaCBn28M97nNymDKs
lzPcYhod3MzX8y9zFTVWcANDIs6I6/Kphxchj6JMotAm2e0TmaOBP4aXkEYalugq
83ZeVPfllBTsT2Z9iA/afHsot+gR4EQqBoN2Q8IUbJmOaFSwjIL3+bs5Hvwbx0Px
1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:34 2026 by rpki-client