Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e342e302f32332d3234203d3e203536303430.roa
File:                     3232332e3136302e342e302f32332d3234203d3e203536303430.roa (raw, json)
Hash identifier:          VcSRZJMdoDYN74c/JV7l45/xmswUKrhPMxp3fdDtffQ=
Subject key identifier:   01:29:9E:CB:79:87:C2:16:28:7F:F6:2A:D9:51:48:08:6F:04:2F:F9
Certificate issuer:       /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial:       1717332CD4663D46E28979D07434C852EB246565
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e342e302f32332d3234203d3e203536303430.roa
Signing time:             Wed 27 May 2026 07:34:54 +0000
ROA not before:           Wed 27 May 2026 07:29:54 +0000
ROA not after:            Wed 26 May 2027 07:34:54 +0000
asID:                     56040
IP address blocks:        223.160.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:17:33:2c:d4:66:3d:46:e2:89:79:d0:74:34:c8:52:eb:24:65:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
        Validity
            Not Before: May 27 07:29:54 2026 GMT
            Not After : May 26 07:34:54 2027 GMT
        Subject: CN=01299ECB7987C216287FF62AD95148086F042FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:ba:53:56:24:36:4f:67:ad:2c:97:4b:fb:
                    97:4e:d4:e0:ac:91:92:49:5b:66:d6:25:08:fb:f1:
                    3b:12:b5:c3:69:c8:e6:67:18:f9:6f:9e:c1:b4:27:
                    71:f5:05:f4:a5:69:c6:6f:c1:2c:36:a0:f0:fc:9e:
                    45:63:dd:1d:60:19:41:7f:7a:a9:1c:de:2d:7c:71:
                    f9:bf:f4:a8:cb:1e:f0:72:ab:52:b0:68:8b:35:34:
                    4f:00:ca:ec:d1:e9:ec:52:98:4d:f4:5d:04:08:c6:
                    6c:df:da:89:59:49:4a:ff:93:d8:e1:f3:cd:c8:64:
                    3d:27:90:3b:4b:55:4a:f3:c5:1e:26:7b:a5:01:3d:
                    e3:e4:9d:a5:92:55:e5:16:b9:d4:7f:80:d1:0f:db:
                    1e:dd:65:05:31:ed:04:ce:e3:44:7b:7b:84:54:67:
                    4a:20:ee:ec:1f:93:ac:78:53:1d:fe:e5:36:29:a0:
                    1e:4a:98:18:40:8b:f9:f2:f7:24:2a:83:e2:e9:cc:
                    f2:c5:82:a9:d0:e5:28:e4:82:46:ed:6e:27:3c:09:
                    51:b9:c0:be:f1:31:1b:e6:d9:75:b1:c8:b1:10:9a:
                    26:21:4e:f2:6a:1d:c9:a6:c8:2d:43:6a:3d:2d:83:
                    f2:38:13:3b:4f:54:bc:d2:0e:77:62:bb:8e:ec:f6:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:29:9E:CB:79:87:C2:16:28:7F:F6:2A:D9:51:48:08:6F:04:2F:F9
            X509v3 Authority Key Identifier:
                keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3232332e3136302e342e302f32332d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.160.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:7e:a5:5a:32:58:18:fa:b1:2a:97:77:0f:d2:6a:db:9f:
         eb:ea:10:66:b5:0a:28:d9:16:14:a9:c3:90:fd:3d:5a:b1:e0:
         a6:c9:64:fe:10:4c:5b:33:8a:87:84:8f:2b:0d:18:34:67:6a:
         17:37:e1:7e:a0:83:f9:56:6d:bc:3e:f2:f3:55:23:9a:9b:0c:
         64:47:65:11:74:73:88:90:bb:66:90:9b:fb:3b:68:e3:d7:22:
         70:3c:d0:c1:d4:8e:8e:02:0d:51:a6:a8:54:4b:a5:43:cb:58:
         6f:05:d0:bb:89:84:c8:17:c1:0d:8f:14:b5:5a:e1:8f:4f:06:
         0b:d8:c2:52:06:01:ba:75:bd:1d:7d:0c:a9:b0:4a:84:e2:33:
         07:db:36:4e:1f:72:7b:15:03:00:55:00:75:a0:4a:59:05:6e:
         54:d1:47:03:37:2f:7c:73:dd:b5:4f:0f:ef:4e:e0:7e:da:70:
         0a:43:37:3d:e2:be:a8:3e:49:f5:e3:9a:f6:09:7e:90:e2:2f:
         95:34:c2:40:aa:67:d0:8a:97:85:a0:2b:6b:b8:c0:7e:f1:73:
         aa:f2:32:f5:2f:1f:75:cf:ad:0a:70:ae:94:37:ae:ed:74:a1:
         69:14:ce:82:e6:c0:43:11:98:dd:8e:c9:df:02:76:7a:4a:b2:
         53:be:ac:ab
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUFxczLNRmPUbiiXnQdDTIUuskZWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB
NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTRaFw0yNzA1MjYwNzM0NTRaMDMxMTAvBgNV
BAMTKDAxMjk5RUNCNzk4N0MyMTYyODdGRjYyQUQ5NTE0ODA4NkYwNDJGRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyrpTViQ2T2etLJdL+5dO1OCs
kZJJW2bWJQj78TsStcNpyOZnGPlvnsG0J3H1BfSlacZvwSw2oPD8nkVj3R1gGUF/
eqkc3i18cfm/9KjLHvByq1KwaIs1NE8AyuzR6exSmE30XQQIxmzf2olZSUr/k9jh
883IZD0nkDtLVUrzxR4me6UBPePknaWSVeUWudR/gNEP2x7dZQUx7QTO40R7e4RU
Z0og7uwfk6x4Ux3+5TYpoB5KmBhAi/ny9yQqg+LpzPLFgqnQ5Sjkgkbtbic8CVG5
wL7xMRvm2XWxyLEQmiYhTvJqHcmmyC1Daj0tg/I4EztPVLzSDndiu47s9pXlAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUASmey3mHwhYof/Yq2VFICG8EL/kwHwYDVR0j
BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE
ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzMjMzMmUzMTM2
MzAyZTM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAd+gBDANBgkqhkiG9w0BAQsFAAOCAQEAjYh+pVoyWBj6sSqXdw/Satuf6+oQ
ZrUKKNkWFKnDkP09WrHgpslk/hBMWzOKh4SPKw0YNGdqFzfhfqCD+VZtvD7y81Uj
mpsMZEdlEXRziJC7ZpCb+zto49cicDzQwdSOjgINUaaoVEulQ8tYbwXQu4mEyBfB
DY8UtVrhj08GC9jCUgYBunW9HX0MqbBKhOIzB9s2Th9yexUDAFUAdaBKWQVuVNFH
AzcvfHPdtU8P707gftpwCkM3PeK+qD5J9eOa9gl+kOIvlTTCQKpn0IqXhaAra7jA
fvFzqvIy9S8fdc+tCnCulDeu7XShaRTOgubAQxGY3Y7J3wJ2ekqyU76sqw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:01:18 2026 by rpki-client