Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233322e302f32322d3234203d3e2039383038.roa
File:                     3232332e3136302e3233322e302f32322d3234203d3e2039383038.roa (raw, json)
Hash identifier:          fj6pxW71Q8uxnkV18E9GOjTQeRXSeqS72LV000/jBYw=
Subject key identifier:   19:0D:34:F8:5A:4B:AC:DA:A8:93:10:BC:9D:9D:C6:82:EA:8E:C6:79
Certificate issuer:       /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial:       06013EABFCB53C35A712CBEA96CF868D125F2B23
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233322e302f32322d3234203d3e2039383038.roa
Signing time:             Wed 27 May 2026 07:34:53 +0000
ROA not before:           Wed 27 May 2026 07:29:53 +0000
ROA not after:            Wed 26 May 2027 07:34:53 +0000
asID:                     9808
IP address blocks:        223.160.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:01:3e:ab:fc:b5:3c:35:a7:12:cb:ea:96:cf:86:8d:12:5f:2b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
        Validity
            Not Before: May 27 07:29:53 2026 GMT
            Not After : May 26 07:34:53 2027 GMT
        Subject: CN=190D34F85A4BACDAA89310BC9D9DC682EA8EC679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:53:af:e6:4c:fd:2d:a8:46:b2:ba:39:aa:
                    47:2d:6e:67:cf:67:90:61:54:e7:48:23:68:0b:fa:
                    40:12:aa:40:d5:58:8c:65:02:e5:5d:00:06:20:bf:
                    00:e1:d3:84:b3:cb:e7:fa:7e:b8:9b:09:97:3d:24:
                    f9:05:48:a1:54:48:32:84:b7:c3:a9:cd:fb:7f:f6:
                    20:79:d8:16:a9:6b:a6:11:fa:dd:df:75:55:bc:ee:
                    04:76:2e:bc:01:50:c4:57:64:29:8e:dc:d7:8c:3c:
                    47:30:fb:bc:8e:c6:6c:fb:da:48:90:db:3a:76:b2:
                    96:bb:1d:33:68:a7:91:88:6a:ac:11:dd:93:33:65:
                    22:db:5e:37:df:6f:78:5e:67:76:b3:01:fb:34:87:
                    8d:27:dd:41:a3:ef:42:0f:f1:a5:dc:c4:26:97:42:
                    18:12:9c:60:b1:04:d3:07:bf:69:6e:2e:30:39:fe:
                    dc:90:48:b2:8c:99:99:08:b9:92:e8:9f:06:4d:97:
                    20:9a:23:4f:f1:41:c4:03:c3:d7:27:ea:74:c3:a9:
                    1d:52:54:91:bc:c0:d6:75:7f:3b:fb:e8:dc:c5:85:
                    c1:f7:9d:c1:97:4e:3a:39:6a:14:af:d6:bb:fa:8b:
                    a3:41:48:14:ec:ee:cd:61:a2:74:22:8c:9c:b2:d2:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0D:34:F8:5A:4B:AC:DA:A8:93:10:BC:9D:9D:C6:82:EA:8E:C6:79
            X509v3 Authority Key Identifier:
                keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e3233322e302f32322d3234203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.160.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:28:d8:91:5c:28:97:56:15:37:fa:2b:d4:a9:7b:db:af:71:
         8e:66:63:90:02:93:2d:3c:37:d8:60:59:a0:9d:17:09:29:10:
         38:4c:17:84:25:7d:09:2b:2c:e5:c9:13:1a:8b:6c:7b:27:82:
         16:13:0f:50:a0:fa:b4:b2:28:c3:d5:ce:54:11:1b:3d:96:cd:
         11:bc:5b:04:ef:e6:d1:75:80:26:9c:a9:ca:d9:c1:5c:8b:e3:
         b0:1d:8d:72:96:65:55:34:d1:e5:04:d2:e8:24:e8:09:a5:79:
         ab:ad:8b:d8:04:69:1b:31:5a:05:a8:c8:80:74:09:b9:cd:70:
         7f:8a:6e:0e:f7:6b:9d:54:3e:ab:35:e9:6d:91:5e:4b:f6:42:
         d7:6e:a7:2d:f4:36:42:1d:a1:0e:ef:b3:b9:2e:7d:2c:79:b6:
         ed:2c:1e:7f:a1:ec:c8:58:59:dc:c5:b2:bb:cb:3b:85:43:37:
         d3:62:f6:34:5d:b5:01:7f:8d:a3:47:71:25:fe:12:8e:18:01:
         a0:9c:4e:ce:08:47:94:ed:72:03:e4:d9:30:a9:86:0e:e9:2e:
         60:db:4b:2e:44:e3:b2:88:42:89:0f:bf:20:d0:96:56:2e:21:
         17:8f:a1:8f:4b:fb:0a:92:fd:84:86:70:4e:1a:f0:a2:cb:f6:
         14:ad:27:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 00:46:01 2026 by rpki-client