Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa
File:                     3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          Idjjoy5317eBYu+nyDOXXCnOhaPQ4lKa05rCZCo6iv0=
Subject key identifier:   AB:E7:82:1E:67:0B:90:89:AB:F5:8D:FD:7D:13:B0:F3:64:D9:1A:FE
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       495B273710C07920D9EB5CCC87DD04BD96B2A0BC
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa
Signing time:             Mon 13 Jul 2026 03:46:38 +0000
ROA not before:           Mon 13 Jul 2026 03:41:38 +0000
ROA not after:            Mon 12 Jul 2027 03:46:38 +0000
asID:                     204765
IP address blocks:        101.232.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 03:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5b:27:37:10:c0:79:20:d9:eb:5c:cc:87:dd:04:bd:96:b2:a0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:38 2026 GMT
            Not After : Jul 12 03:46:38 2027 GMT
        Subject: CN=ABE7821E670B9089ABF58DFD7D13B0F364D91AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:af:4c:b1:f5:6b:14:69:88:82:4f:4a:88:
                    69:a1:fc:6b:2c:93:b8:9d:bd:6d:51:97:f8:67:96:
                    f3:27:98:da:85:fe:8a:f6:47:8a:24:59:07:9b:80:
                    18:07:1e:b0:6f:c0:ae:2e:7f:c2:03:16:da:98:65:
                    32:33:b5:1f:dc:ef:ee:c7:d7:ef:66:54:5c:41:f9:
                    be:05:a7:5f:df:2a:21:e0:bb:e7:e2:87:f6:df:34:
                    2e:71:ee:61:1b:4b:9e:2b:d0:60:b1:24:5f:af:b9:
                    5b:c6:a4:6c:6b:78:fa:19:d6:7e:8d:66:78:98:78:
                    47:b7:eb:98:f5:06:65:58:79:ff:32:f0:9e:da:66:
                    58:cd:62:6d:53:fd:f3:7c:23:48:7d:11:3c:02:5b:
                    33:fc:37:e9:e7:e6:60:0b:62:26:69:e7:cc:c4:40:
                    1c:5c:bf:38:d4:f0:3c:9b:21:c7:47:94:68:b9:4d:
                    28:7c:ef:de:76:2c:55:fb:9e:93:5c:b2:de:94:e8:
                    bd:5f:36:e2:fd:53:6e:1d:6f:48:ff:2d:72:07:66:
                    9f:a3:25:01:d4:dd:ad:6e:5e:e7:21:f9:4e:1c:49:
                    d0:53:77:99:1c:f2:2d:ab:c4:1f:a0:c6:b6:a3:bf:
                    3e:07:29:5f:06:d3:4b:59:86:2e:c8:1a:b4:34:db:
                    bc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E7:82:1E:67:0B:90:89:AB:F5:8D:FD:7D:13:B0:F3:64:D9:1A:FE
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.232.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:eb:d9:8f:ab:8c:9a:2c:a2:81:a7:d0:a9:e4:e9:2f:d1:9e:
         ee:6e:61:b3:66:de:6f:bc:a4:e2:8b:9f:08:49:e2:45:98:94:
         95:f7:46:6d:a5:2e:15:a0:48:b0:96:88:65:24:18:0d:ac:5d:
         00:36:76:9a:46:9e:55:fe:9c:0c:80:33:6f:21:70:71:ae:e8:
         77:9f:d9:d8:6d:bf:f7:f3:42:cd:61:9c:3e:b2:2f:2c:f8:d2:
         70:ad:8a:27:81:37:09:00:ca:1a:df:4a:e2:a1:5b:f6:55:2e:
         c4:d1:c3:91:3c:51:86:10:d7:62:2a:25:6c:54:21:16:25:a1:
         74:83:31:27:66:c5:ee:f6:c2:6f:ed:65:6f:0f:b5:98:96:1e:
         6a:25:9a:dd:d9:fa:91:a9:d0:34:71:00:38:d1:2d:b1:f4:97:
         a2:6f:92:8f:c1:30:71:86:9a:a7:da:82:04:45:05:16:17:9a:
         64:d5:38:3d:3d:85:dc:f2:26:55:39:12:b2:6c:8b:5b:7a:81:
         bd:09:fd:94:17:42:25:a2:57:9c:47:91:16:e9:21:c0:08:16:
         b8:58:69:e2:a4:2a:e4:6b:9c:c9:d9:6f:69:81:27:9b:cf:21:
         f5:a5:e9:10:82:8d:ce:73:15:a8:f1:1b:6b:12:79:9e:cc:61:
         ce:c0:d4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:34:48 2026 by rpki-client