Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134362e302f32332d3234203d3e20313334383130.roa
File:                     3232332e3136302e3134362e302f32332d3234203d3e20313334383130.roa (raw, json)
Hash identifier:          KIRzEcRSBVnyXDN0hStRJVXGjfXok39JjCzTBkRzSfE=
Subject key identifier:   F9:43:77:09:4B:BD:C4:5D:D1:CE:2E:43:43:C5:C0:B9:F9:B4:3B:AD
Certificate issuer:       /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial:       7C1B27AC2BE7D0071A1CD0CF2E3060A1A5A5C115
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134362e302f32332d3234203d3e20313334383130.roa
Signing time:             Wed 27 May 2026 07:34:56 +0000
ROA not before:           Wed 27 May 2026 07:29:56 +0000
ROA not after:            Wed 26 May 2027 07:34:56 +0000
asID:                     134810
IP address blocks:        223.160.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1b:27:ac:2b:e7:d0:07:1a:1c:d0:cf:2e:30:60:a1:a5:a5:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
        Validity
            Not Before: May 27 07:29:56 2026 GMT
            Not After : May 26 07:34:56 2027 GMT
        Subject: CN=F94377094BBDC45DD1CE2E4343C5C0B9F9B43BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:59:aa:cd:ee:58:51:d6:37:5b:15:00:4e:
                    47:e0:a9:f2:05:a4:df:e0:7a:64:06:23:34:69:88:
                    5d:ac:a1:2b:90:8e:a1:09:ce:b5:29:2a:9e:0c:d2:
                    54:01:5d:2e:90:f9:fd:6c:80:af:7d:6c:9e:cd:fe:
                    b0:87:af:97:3c:e3:b6:e2:5d:45:f3:41:dd:c4:a7:
                    4f:20:14:2c:cd:a4:8a:85:67:f4:d4:ba:e3:16:86:
                    7f:97:94:10:07:68:d5:c1:ff:af:cd:0f:8e:2c:39:
                    26:d0:bf:32:0b:62:91:77:51:fb:e6:4d:53:0a:ec:
                    d6:20:19:a3:c1:4a:68:55:a9:cb:09:68:68:74:c8:
                    09:61:20:36:81:e1:03:60:5b:b3:60:f5:e5:fa:6b:
                    bb:65:89:2b:72:25:9c:50:69:05:f9:fc:5d:b6:16:
                    af:0a:72:0d:d5:30:1d:38:8d:2f:b2:71:2b:15:fb:
                    dd:0e:1a:95:55:7a:3e:e7:09:e0:10:9c:57:55:50:
                    40:d8:51:a5:97:e5:d1:3e:f0:4b:df:63:5a:a5:03:
                    ca:b5:f6:9f:cb:f1:f9:55:23:f7:5e:4d:32:a3:b8:
                    fc:e1:4d:5a:48:c4:c5:16:6c:8d:e4:53:d1:20:45:
                    42:ec:6e:fa:80:52:f0:c0:ba:37:da:e3:90:d1:b9:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:43:77:09:4B:BD:C4:5D:D1:CE:2E:43:43:C5:C0:B9:F9:B4:3B:AD
            X509v3 Authority Key Identifier:
                keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3134362e302f32332d3234203d3e20313334383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.160.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:8c:d0:b7:93:a7:0e:37:c7:2f:06:ac:15:6e:20:3c:a3:a8:
         59:86:35:ab:e8:48:3c:f2:82:e9:d6:2d:15:79:e8:7c:29:4d:
         5b:03:e4:14:e0:51:9b:43:3b:b9:f7:4c:1c:f0:6e:c7:8e:9a:
         d6:ab:b3:ab:6b:90:0a:24:40:49:cd:6a:3d:5f:7e:c6:bc:4d:
         34:69:e8:29:c0:8a:12:7b:b1:9b:4a:75:d6:7a:b7:df:1b:00:
         bd:5b:48:02:6d:d1:3d:cc:ba:3b:09:fa:eb:5e:e8:24:75:b3:
         a6:46:71:9f:07:6f:ca:d1:7d:e4:41:d5:4c:74:e3:0d:a1:51:
         5d:08:d6:5d:e4:34:52:30:fb:2c:cf:e9:76:d0:b6:3e:d8:e5:
         9c:67:4c:d1:f4:44:70:7c:e3:d4:bd:97:f5:b9:d9:47:2e:c7:
         24:fd:a5:33:8e:f3:1a:b8:d1:00:da:d6:6b:53:0f:23:5a:03:
         b7:5b:de:3c:4c:36:99:a0:b4:00:49:a0:da:5a:bc:95:0d:c1:
         f3:19:ac:ca:92:30:fa:5c:81:5d:4e:6c:01:f3:43:f8:3b:42:
         b4:9a:03:a6:51:23:98:be:ba:74:9a:49:8c:f2:72:65:7f:f7:
         36:d7:9d:70:1a:d9:e9:00:8e:f5:a3:29:8d:a5:13:80:01:9b:
         e2:8b:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:01:45 2026 by rpki-client