Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3135362e3132382e302f31392d3234203d3e2037363431.roa
File:                     3231312e3135362e3132382e302f31392d3234203d3e2037363431.roa (raw, json)
Hash identifier:          nwo1y2OIIQLA5fZrx8c/78/di3igPTTbT3WdwOJaqTg=
Subject key identifier:   5F:31:6E:DE:17:BB:D3:AB:4D:62:B9:D8:FD:F0:D2:81:C3:80:57:FE
Certificate issuer:       /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial:       61859865E6A691A8D5F297C5AFE7107E055B677E
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3135362e3132382e302f31392d3234203d3e2037363431.roa
Signing time:             Wed 27 May 2026 07:34:56 +0000
ROA not before:           Wed 27 May 2026 07:29:56 +0000
ROA not after:            Wed 26 May 2027 07:34:56 +0000
asID:                     7641
IP address blocks:        211.156.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:85:98:65:e6:a6:91:a8:d5:f2:97:c5:af:e7:10:7e:05:5b:67:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
        Validity
            Not Before: May 27 07:29:56 2026 GMT
            Not After : May 26 07:34:56 2027 GMT
        Subject: CN=5F316EDE17BBD3AB4D62B9D8FDF0D281C38057FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:ae:25:6e:c9:ef:20:06:07:6a:68:83:31:
                    63:47:3a:cd:e1:e3:c9:de:31:93:1c:b0:be:e0:99:
                    c2:b3:a1:c3:f4:dd:ff:18:74:af:2b:00:d3:85:77:
                    c9:c5:b2:e7:9c:6c:92:75:90:ce:c6:d4:88:56:ec:
                    ad:ab:5e:62:6e:f5:2e:30:8b:fb:c9:81:d9:e2:1c:
                    01:05:93:81:03:93:2d:31:1a:54:dc:12:a7:2b:f8:
                    a1:a3:a7:f2:61:45:ff:8a:0d:bd:a5:4a:e2:eb:b5:
                    1f:1c:72:4c:ea:70:a1:67:e5:44:67:97:c6:da:1f:
                    ac:ec:ab:1b:9d:d2:55:f6:cd:e1:df:cc:a3:d7:1b:
                    3e:18:27:4f:41:98:53:64:8d:04:3d:0f:f2:f7:96:
                    9c:6d:18:82:dc:80:49:6a:93:f5:22:4e:1a:07:ed:
                    94:cd:81:98:24:ec:d5:35:8a:c2:29:c6:c6:05:de:
                    51:c0:6b:88:ad:ad:bd:9e:8f:f1:26:ae:aa:24:07:
                    c2:a1:55:e5:7b:09:83:60:85:d1:b0:af:33:9b:1d:
                    c9:e0:aa:bd:16:eb:07:a8:8e:80:00:64:49:3c:c7:
                    50:ab:d8:24:3d:ed:49:fd:f4:f3:a0:8c:ad:2f:d7:
                    82:91:5b:bc:55:d8:e3:3e:56:e3:a4:5a:f6:f1:45:
                    38:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:31:6E:DE:17:BB:D3:AB:4D:62:B9:D8:FD:F0:D2:81:C3:80:57:FE
            X509v3 Authority Key Identifier:
                keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3135362e3132382e302f31392d3234203d3e2037363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.156.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:91:92:99:2e:d1:2a:c9:28:4b:2d:b6:77:37:75:28:95:4e:
         46:cf:7a:fd:a0:a4:aa:61:cf:3f:16:9c:5a:a2:1c:4b:1d:6a:
         9f:c3:0c:57:1d:5f:92:d3:94:fc:6f:83:b0:94:77:8b:25:c5:
         ec:4f:50:04:93:9c:e1:90:2e:7a:fe:6c:6c:ff:99:79:3d:39:
         84:8f:5a:ea:81:62:40:46:ae:3a:34:18:05:24:af:d4:68:82:
         66:37:c6:3c:b4:42:36:46:f0:88:28:32:c0:ab:4f:bc:6f:d7:
         79:f8:28:40:c8:d9:0d:b5:79:cf:dc:38:80:48:43:e4:93:df:
         31:31:24:61:78:e8:f9:09:97:47:6b:c1:3e:e0:51:fb:8f:9f:
         cd:62:e9:23:30:c4:a4:c7:01:aa:54:f0:1d:db:37:e3:a5:3f:
         eb:a5:ef:a5:ef:fe:b6:f6:d3:09:2a:25:84:5d:4b:86:8c:45:
         80:b0:4e:49:9d:e4:25:ac:28:9c:d8:92:cc:77:11:64:8a:cc:
         11:b1:db:cb:16:67:e5:1f:ef:56:97:5e:03:0e:ef:88:b3:89:
         89:a2:d3:f3:28:44:19:5a:7e:ac:ae:05:df:ba:41:b5:12:ac:
         4d:19:58:ec:b0:a9:dc:e1:54:99:69:1d:dd:c4:1f:aa:95:cb:
         48:1a:f6:89
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUYYWYZeamkajV8pfFr+cQfgVbZ34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB
NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTZaFw0yNzA1MjYwNzM0NTZaMDMxMTAvBgNV
BAMTKDVGMzE2RURFMTdCQkQzQUI0RDYyQjlEOEZERjBEMjgxQzM4MDU3RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nK4lbsnvIAYHamiDMWNHOs3h
48neMZMcsL7gmcKzocP03f8YdK8rANOFd8nFsuecbJJ1kM7G1IhW7K2rXmJu9S4w
i/vJgdniHAEFk4EDky0xGlTcEqcr+KGjp/JhRf+KDb2lSuLrtR8cckzqcKFn5URn
l8baH6zsqxud0lX2zeHfzKPXGz4YJ09BmFNkjQQ9D/L3lpxtGILcgElqk/UiThoH
7ZTNgZgk7NU1isIpxsYF3lHAa4itrb2ej/EmrqokB8KhVeV7CYNghdGwrzObHcng
qr0W6weojoAAZEk8x1Cr2CQ97Un99POgjK0v14KRW7xV2OM+VuOkWvbxRThFAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUXzFu3he706tNYrnY/fDSgcOAV/4wHwYDVR0j
BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE
ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NDU2MDE0Mjc4NjU2MS8wLzMyMzEzMTJlMzEz
NTM2MmUzMTMyMzgyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNzM2MzQzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBdOcgDANBgkqhkiG9w0BAQsFAAOCAQEAFJGSmS7RKskoSy22dzd1KJVO
Rs96/aCkqmHPPxacWqIcSx1qn8MMVx1fktOU/G+DsJR3iyXF7E9QBJOc4ZAuev5s
bP+ZeT05hI9a6oFiQEauOjQYBSSv1GiCZjfGPLRCNkbwiCgywKtPvG/XefgoQMjZ
DbV5z9w4gEhD5JPfMTEkYXjo+QmXR2vBPuBR+4+fzWLpIzDEpMcBqlTwHds346U/
66Xvpe/+tvbTCSolhF1LhoxFgLBOSZ3kJawonNiSzHcRZIrMEbHbyxZn5R/vVpde
Aw7viLOJiaLT8yhEGVp+rK4F37pBtRKsTRlY7LCp3OFUmWkd3cQfqpXLSBr2iQ==
-----END CERTIFICATE-----
Generated at Sat May 30 00:46:03 2026 by rpki-client