Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38302e302f32322d3234203d3e20323034373635.roa
File:                     3231312e3134392e38302e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          P/lCK0d/snjXruZt+9bYI8r3f8ZEF++aN53qlKj89wA=
Subject key identifier:   9A:E4:73:91:6B:0D:2C:7B:39:8E:27:84:58:8F:F5:46:E2:C5:CF:04
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       74472E790EE0EBA345FBE54CCBC568A0CF36A94D
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38302e302f32322d3234203d3e20323034373635.roa
Signing time:             Thu 16 Jul 2026 03:24:57 +0000
ROA not before:           Thu 16 Jul 2026 03:19:57 +0000
ROA not after:            Thu 15 Jul 2027 03:24:57 +0000
asID:                     204765
IP address blocks:        211.149.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 03:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:47:2e:79:0e:e0:eb:a3:45:fb:e5:4c:cb:c5:68:a0:cf:36:a9:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 16 03:19:57 2026 GMT
            Not After : Jul 15 03:24:57 2027 GMT
        Subject: CN=9AE473916B0D2C7B398E2784588FF546E2C5CF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:33:af:78:bf:1d:87:e6:28:2a:fd:1e:19:
                    01:30:87:c3:50:c8:f3:0f:3f:74:95:56:dc:af:81:
                    77:cd:45:c5:96:0b:e0:78:66:7b:e0:0c:09:03:b4:
                    a9:b3:86:92:4e:bd:3a:d4:ea:37:dc:40:71:e3:a5:
                    97:46:91:ff:a7:14:d0:67:dd:51:f8:ab:42:e9:16:
                    1b:9b:d9:9c:ee:fe:b4:69:b2:bc:00:a0:9f:53:da:
                    1e:58:21:c2:81:2d:71:db:50:97:19:14:a3:5e:b7:
                    fa:88:e4:13:1e:6c:9c:6b:5e:8d:81:4d:37:8d:2b:
                    e8:4a:dd:f5:52:61:55:67:34:9a:7d:bb:65:2d:b8:
                    75:23:cc:df:c7:02:7e:0b:e5:6f:da:8f:d6:92:0d:
                    e5:19:6f:a8:d8:4a:5b:8b:68:d8:8b:9a:4b:df:79:
                    5b:a7:49:b2:4f:09:c9:26:6d:04:d9:32:af:62:0f:
                    a8:51:34:73:a6:77:8e:2f:80:0b:48:21:5e:9a:c3:
                    bb:14:16:fb:ed:07:99:37:67:8c:ef:a6:25:1c:45:
                    eb:f3:27:93:9f:a0:c4:f6:a1:09:9d:0d:96:93:2e:
                    b5:ef:f5:12:cd:0e:de:b5:9b:87:bd:32:e3:aa:a2:
                    a3:41:3f:4b:89:81:4a:96:b6:62:cc:c8:6b:e7:de:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E4:73:91:6B:0D:2C:7B:39:8E:27:84:58:8F:F5:46:E2:C5:CF:04
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e38302e302f32322d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.149.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:10:e9:ef:f4:bc:49:11:88:5d:ef:c2:54:ae:e9:97:3e:
         77:5c:ca:25:4e:c3:96:2f:77:07:93:47:8f:96:38:e1:74:f0:
         55:88:85:9b:85:8a:58:01:2a:86:4c:c1:20:d8:1f:88:fe:3f:
         50:bb:1f:8a:e0:79:9f:63:c8:ec:c0:47:28:b8:d6:e7:37:c8:
         e0:45:1b:00:80:29:3d:01:06:b0:55:d1:3f:94:c8:ff:c7:52:
         b1:ad:8e:6b:c4:ad:78:ce:3c:f9:db:6a:18:fc:36:c3:72:ff:
         9e:30:aa:ce:03:de:39:63:d4:c0:c8:0c:a3:3f:06:83:4e:d5:
         02:2e:21:0d:0f:23:b4:5e:05:e3:5a:d5:30:a9:d3:d3:a4:87:
         51:80:4b:84:34:74:87:5b:cd:3a:14:d9:92:87:ef:85:cc:1a:
         5e:37:2d:ec:98:52:a2:3d:fd:c8:bb:8c:59:45:29:7a:51:db:
         4f:8e:a9:3d:80:e5:98:8a:26:e1:b4:65:2f:1b:07:ea:26:1e:
         2d:aa:00:e7:55:ac:31:e4:8e:53:09:63:db:7d:dd:5f:87:f2:
         5e:3b:19:4c:bf:8e:d2:cf:85:1d:92:95:4e:27:70:00:6f:17:
         6e:32:71:6d:32:1a:87:cf:89:99:d6:f7:d9:10:1d:04:69:5d:
         9d:bc:b2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:34:26 2026 by rpki-client