Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3135302e3234322e3131322e302f32322d3232203d3e203435303836.roa
File:                     3135302e3234322e3131322e302f32322d3232203d3e203435303836.roa (raw, json)
Hash identifier:          hEg2s0VwxNa3G9IrIGxFGXJ9m7NvlBxjn9sJKiZtSug=
Subject key identifier:   EB:44:1C:CA:5D:92:D7:69:2A:87:35:47:D3:20:2C:8A:F8:8E:D2:C1
Certificate issuer:       /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial:       6F2F01A870715ADD08FCFE8C930848F83FF6C1E5
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3135302e3234322e3131322e302f32322d3232203d3e203435303836.roa
Signing time:             Thu 07 May 2026 01:28:40 +0000
ROA not before:           Thu 07 May 2026 01:23:40 +0000
ROA not after:            Thu 06 May 2027 01:28:40 +0000
asID:                     45086
IP address blocks:        150.242.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2f:01:a8:70:71:5a:dd:08:fc:fe:8c:93:08:48:f8:3f:f6:c1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
        Validity
            Not Before: May  7 01:23:40 2026 GMT
            Not After : May  6 01:28:40 2027 GMT
        Subject: CN=EB441CCA5D92D7692A873547D3202C8AF88ED2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:b1:fa:20:92:12:99:14:fe:1f:05:4b:15:
                    36:d9:df:3f:1f:32:29:84:9c:b4:69:9a:4e:69:ae:
                    62:44:71:3b:6f:c2:9d:d2:28:34:50:6f:99:a5:82:
                    2f:ae:23:0b:4d:fa:b7:51:88:51:5b:60:84:8f:53:
                    9f:6b:0d:0c:35:4c:e1:55:c8:ca:10:db:a0:23:7a:
                    74:3e:2b:c1:6e:28:36:e2:55:5e:81:21:b3:5a:ff:
                    95:1c:3a:92:2e:fc:56:34:bb:6a:a3:82:56:f5:f1:
                    42:ca:83:08:65:b0:36:a7:ae:bd:77:06:8d:78:e6:
                    50:84:43:ae:4a:6d:13:1c:13:25:ac:0c:c3:a1:33:
                    64:15:3f:88:0f:81:29:9e:86:09:7c:50:d7:e3:1d:
                    b5:98:d0:f0:7c:51:30:a2:4f:4d:5d:cd:b1:72:ac:
                    63:fe:50:3b:0d:7f:3e:93:82:d5:c1:5c:92:8a:b9:
                    d2:fb:ce:90:e4:21:b2:fc:5f:c9:97:fb:57:9c:bb:
                    a7:ae:8f:62:f9:3e:9b:a2:75:0a:41:1d:8c:83:16:
                    de:76:37:be:c4:57:94:ae:88:7d:58:c6:92:08:55:
                    4f:54:37:46:2c:c9:cb:c3:4c:39:22:73:e9:fa:55:
                    d5:d5:5a:71:39:33:e3:ce:97:61:3b:18:73:c4:5e:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:44:1C:CA:5D:92:D7:69:2A:87:35:47:D3:20:2C:8A:F8:8E:D2:C1
            X509v3 Authority Key Identifier:
                keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3135302e3234322e3131322e302f32322d3232203d3e203435303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:58:2c:75:d7:79:40:69:bb:43:41:4a:ac:fc:53:52:55:25:
         88:f9:31:c6:b5:db:6d:2e:33:97:28:b1:51:59:68:43:8e:44:
         dc:45:e6:8a:8c:e5:78:ff:95:3b:74:3f:88:0d:f9:7f:18:20:
         03:0b:02:5a:49:93:60:53:15:98:03:6d:07:07:42:fe:89:63:
         59:5c:4c:44:ba:bf:93:02:5d:69:55:45:88:fa:c3:30:29:25:
         47:db:92:e0:7c:92:b5:37:ab:81:8d:77:1c:55:7a:bd:27:a9:
         c2:a2:2a:e7:a3:6b:92:9c:01:6f:38:5b:ab:ab:c6:85:5b:13:
         b8:01:0a:97:36:fc:69:dd:06:fc:e9:d2:26:79:b8:6d:c4:fd:
         fd:5c:7e:fe:fd:12:c0:54:c4:6c:0a:29:a7:55:c8:b4:9e:c5:
         a4:83:97:cd:2f:d3:7e:f9:f4:96:ff:8c:3d:3d:9d:ce:88:25:
         26:32:d2:89:b6:04:3a:a2:aa:11:ca:d3:08:08:21:15:b3:fa:
         01:21:28:e2:cf:c6:d5:6a:d9:ba:c9:0e:73:25:97:56:7c:31:
         d5:9f:57:f1:ee:85:44:b2:a4:79:de:40:d8:f1:e4:25:e0:9b:
         91:89:f8:aa:96:d0:96:da:cb:8a:66:45:6d:81:95:7d:8a:83:
         a7:4a:b5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:36:52 2026 by rpki-client