Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e322e302f32332d3234203d3e203536303436.roa
File:                     3232332e3136302e322e302f32332d3234203d3e203536303436.roa (raw, json)
Hash identifier:          UO7HtsX/7Ew7s2vBvm7nveXtdS2kit1RUTSlulAIBSE=
Subject key identifier:   F1:4E:42:7A:B8:5E:CD:59:21:54:81:A7:6C:38:7A:78:22:DE:AC:9A
Certificate issuer:       /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial:       7926A05BBCA7B66F8F587C7F6F3CACCF1B418A8A
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e322e302f32332d3234203d3e203536303436.roa
Signing time:             Wed 27 May 2026 07:34:57 +0000
ROA not before:           Wed 27 May 2026 07:29:57 +0000
ROA not after:            Wed 26 May 2027 07:34:57 +0000
asID:                     56046
IP address blocks:        223.160.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:26:a0:5b:bc:a7:b6:6f:8f:58:7c:7f:6f:3c:ac:cf:1b:41:8a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
        Validity
            Not Before: May 27 07:29:57 2026 GMT
            Not After : May 26 07:34:57 2027 GMT
        Subject: CN=F14E427AB85ECD59215481A76C387A7822DEAC9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:50:d2:32:68:48:ce:28:b4:a3:36:0e:ae:fe:
                    4c:52:2c:d7:30:f0:28:58:9d:0d:bb:73:de:b7:98:
                    be:df:aa:c2:ad:e8:52:b4:f5:80:ed:c7:64:c4:2b:
                    61:e6:19:21:73:69:92:c6:50:ed:fb:7c:4c:fa:0c:
                    87:15:2f:e4:25:26:2a:3b:84:d8:fa:7f:8d:c2:e4:
                    43:f1:3a:37:f4:f8:39:04:d7:b2:75:6c:0d:3a:95:
                    40:ff:05:c8:3d:bd:29:18:02:8a:0f:f4:ad:fe:09:
                    a5:c4:5c:79:66:06:0a:e5:7c:95:e8:5a:ac:12:39:
                    d7:4c:5c:5b:fc:40:d3:58:74:59:a2:77:30:77:2d:
                    c7:18:65:2e:3c:53:b3:9e:ac:50:41:20:a8:10:35:
                    c2:b0:96:1f:1a:0e:00:03:b9:25:51:d7:2f:fa:e4:
                    de:58:d0:8d:73:4e:cc:09:17:79:bc:80:b3:56:b3:
                    be:6e:d7:7d:ca:4d:73:e2:47:8f:12:af:18:7a:53:
                    82:c3:6e:a6:1e:1b:24:87:c2:8b:a6:1f:41:74:c1:
                    14:6b:d7:a1:7a:5d:ed:8b:d7:0c:8d:cc:c8:8e:3a:
                    9b:d8:da:63:e5:9a:0d:e9:00:a1:0d:30:ef:da:56:
                    df:1c:97:c1:08:c9:2f:6e:d5:64:f5:a3:9f:13:93:
                    81:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4E:42:7A:B8:5E:CD:59:21:54:81:A7:6C:38:7A:78:22:DE:AC:9A
            X509v3 Authority Key Identifier:
                keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e322e302f32332d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.160.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:9c:e5:eb:79:5d:c7:a4:73:ad:d5:8b:2e:78:59:e8:1a:b3:
         01:bb:3a:1f:27:a7:72:81:44:d2:53:34:52:35:71:e8:cb:4f:
         38:df:05:62:a9:22:c6:9e:c7:23:62:a5:eb:a2:0c:41:fe:38:
         07:64:d6:01:54:3f:7a:2c:b6:dc:b2:58:7f:0d:a6:5c:3e:cb:
         90:a1:bd:db:7f:db:78:aa:f9:b6:a0:57:a4:9b:a1:ea:80:62:
         6c:d6:86:02:ba:13:0d:9b:e3:ee:83:06:38:cc:fa:e0:9d:43:
         c9:c7:13:22:c2:42:c3:3a:e4:90:df:1e:a2:02:ad:dd:08:42:
         2b:bb:e2:bf:e4:ea:a9:98:c7:14:95:16:7f:70:31:b5:e0:49:
         d8:ed:db:ae:95:87:05:d1:96:ce:9d:29:51:81:b0:3c:b6:76:
         66:e7:da:0e:53:91:00:86:0b:a1:24:6a:d1:68:b3:39:e7:d4:
         ee:16:79:a9:65:b7:ab:8d:1e:f2:ea:78:fa:9f:d7:dd:e6:ef:
         cd:34:d7:43:42:9b:93:f7:0e:5c:02:42:4d:3c:e7:e2:fa:af:
         3e:2c:34:69:5e:82:e6:73:55:98:93:94:8d:4e:d6:6d:c3:59:
         a3:ba:23:63:67:2d:fb:4d:b5:2b:b8:d2:24:79:73:d2:c7:60:
         cf:61:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:01:07 2026 by rpki-client