Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa
File:                     3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          HEwAd0nj5bFeFaoNIckOA0gq0Cceqt89wodnPXmiVb0=
Subject key identifier:   54:78:4E:DA:E5:6D:E5:2D:A1:14:71:0C:A5:49:BE:F8:25:9F:FC:8A
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       5FD15D94E785DADB533E3749A758FC41DE760203
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa
Signing time:             Wed 06 May 2026 06:42:49 +0000
ROA not before:           Wed 06 May 2026 06:37:49 +0000
ROA not after:            Wed 05 May 2027 06:42:49 +0000
asID:                     204765
IP address blocks:        211.149.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d1:5d:94:e7:85:da:db:53:3e:37:49:a7:58:fc:41:de:76:02:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: May  6 06:37:49 2026 GMT
            Not After : May  5 06:42:49 2027 GMT
        Subject: CN=54784EDAE56DE52DA114710CA549BEF8259FFC8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b9:59:4e:56:61:c9:41:74:c1:91:61:91:9b:
                    49:9a:32:3c:eb:f6:91:6a:d6:a9:82:66:e7:40:91:
                    69:47:2f:95:9e:98:07:47:96:cc:ca:f6:ac:e9:6d:
                    f1:6a:1f:be:6a:a4:0d:ff:60:b2:6d:29:f5:f1:3f:
                    c4:c4:cc:dc:3b:7a:9c:1e:98:ae:72:53:b1:b0:7c:
                    60:eb:fe:05:48:7e:22:24:f5:7e:cd:c9:53:b2:48:
                    ed:8f:ad:c4:68:a3:2f:c4:3c:b1:d3:93:e9:2c:12:
                    77:1c:4a:80:b6:ae:37:37:af:e8:54:76:64:f8:39:
                    97:46:b9:27:0a:e1:7a:8e:9b:d1:1c:33:8b:e4:f9:
                    53:cc:f8:dc:f6:b7:b8:d1:f1:38:b3:e4:5c:44:72:
                    f7:a4:a5:97:19:09:a3:9e:a7:fe:33:7d:c1:73:5f:
                    b6:1c:fe:62:61:d5:4f:5b:b5:cb:ef:9a:5e:8b:9a:
                    f9:c0:16:a0:1d:7c:d6:0e:51:f3:ae:4e:92:a2:72:
                    59:6f:2c:99:9c:0d:a8:99:4b:b3:12:63:2f:8d:18:
                    f7:72:b9:55:a7:eb:90:eb:a4:0d:e7:98:25:4c:06:
                    a3:aa:81:73:9f:bc:71:1a:88:0f:f4:ab:d5:93:ef:
                    60:ea:49:4d:b7:a3:be:d5:40:5f:70:f7:c9:14:ad:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:78:4E:DA:E5:6D:E5:2D:A1:14:71:0C:A5:49:BE:F8:25:9F:FC:8A
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.149.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:97:b6:2a:c0:56:7a:71:d2:2e:59:ff:c5:ec:7b:c2:b8:
         b4:9a:68:da:32:17:8f:e3:03:ee:ff:13:49:f3:6c:75:ac:8c:
         b3:af:11:a4:5e:89:7f:1a:09:3b:bc:a6:73:1e:2a:9d:a8:7b:
         46:dd:f7:b7:76:89:37:9f:f7:4e:d4:61:ad:2b:98:cb:24:89:
         5b:cc:29:5c:3c:90:b0:2d:52:e4:ea:fa:f6:fa:ad:dd:4f:68:
         25:43:14:03:38:f1:ef:a0:4e:7a:58:bc:8c:41:a0:40:74:ae:
         72:a0:35:4f:7a:61:8e:02:1f:2d:9d:81:11:a2:0b:7f:be:7e:
         72:05:97:02:8f:e9:47:34:3b:a1:d9:62:95:9d:4d:3c:03:ea:
         68:31:90:08:13:b5:78:8d:eb:91:a0:d3:17:11:7e:02:de:1c:
         48:96:88:37:6f:eb:d2:05:07:3e:07:06:bd:3f:8c:1e:d2:ad:
         de:3a:86:10:1d:8d:e1:b1:8d:f1:27:f6:c3:ba:53:78:b8:2c:
         48:4b:82:79:d6:c6:f8:8d:66:9e:30:6a:c7:f4:4a:3b:90:c9:
         a8:9f:4f:bb:9d:66:5e:df:cb:04:4c:c5:46:e4:55:54:03:df:
         82:54:8e:ca:95:b4:7b:a9:4b:1a:ee:05:05:b7:41:97:17:38:
         40:e7:20:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:36:59 2026 by rpki-client