Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234332e302e302f31382d3234203d3e203137343239.roa
File:                     3130312e3234332e302e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier:          ydnpEr7Bi/U0xj3Tsze+I4JKBquQ1xh1wM39512ydDM=
Subject key identifier:   2A:CD:80:4A:72:74:BB:01:06:82:C0:10:15:03:77:DF:FB:9F:63:D6
Certificate issuer:       /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial:       2A64E3EF92B2C19CF80D6E1678BBBBB303A2F6
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234332e302e302f31382d3234203d3e203137343239.roa
Signing time:             Mon 13 Apr 2026 03:30:09 +0000
ROA not before:           Mon 13 Apr 2026 03:25:09 +0000
ROA not after:            Mon 12 Apr 2027 03:30:09 +0000
asID:                     17429
IP address blocks:        101.243.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:64:e3:ef:92:b2:c1:9c:f8:0d:6e:16:78:bb:bb:b3:03:a2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
        Validity
            Not Before: Apr 13 03:25:09 2026 GMT
            Not After : Apr 12 03:30:09 2027 GMT
        Subject: CN=2ACD804A7274BB010682C010150377DFFB9F63D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:4f:ea:19:79:3c:ab:f9:eb:99:dc:b7:ba:
                    a8:d2:2c:fc:4b:4a:c1:0d:d3:23:e5:99:9a:16:c6:
                    10:9b:bf:b1:f8:26:ef:82:08:29:2c:6d:e0:26:a3:
                    4b:50:5b:a8:d8:da:26:ab:0d:f6:3e:bb:32:87:54:
                    4e:4c:a8:b2:87:b0:17:ae:2e:09:90:25:e8:f2:31:
                    80:9b:69:4b:1e:e7:82:42:0f:a2:32:ed:56:6a:2d:
                    a0:92:73:3b:55:83:de:5d:8e:7d:72:b5:56:31:c6:
                    3d:21:e9:59:5d:e3:98:62:b8:f4:ce:95:e1:c2:2d:
                    42:32:3d:d7:cd:4b:8a:b7:24:ac:ab:3c:e6:8d:f8:
                    ee:43:e5:14:d2:8f:86:32:7e:9e:08:c2:27:3c:ae:
                    d8:d8:6d:50:ab:8c:37:e3:51:45:24:b4:1b:72:9d:
                    19:77:31:f9:0a:88:7f:db:a2:26:d8:38:5a:96:33:
                    b3:c6:34:83:b0:d4:dc:31:9e:74:9e:15:db:0b:39:
                    46:b1:22:56:c5:94:f2:4a:f3:62:4e:c7:8a:bf:25:
                    8a:2f:3f:9f:fd:44:f8:57:57:a7:a0:25:c5:03:29:
                    fe:30:f9:df:ef:17:d0:d0:e0:d8:5a:99:81:a6:41:
                    af:2f:26:46:60:89:88:34:ff:a8:9c:d8:e6:fc:41:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CD:80:4A:72:74:BB:01:06:82:C0:10:15:03:77:DF:FB:9F:63:D6
            X509v3 Authority Key Identifier:
                keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3130312e3234332e302e302f31382d3234203d3e203137343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.243.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:05:81:62:71:55:b5:ad:7a:38:3a:f2:ef:88:8f:43:8e:68:
         c7:c0:d1:a5:10:f1:e2:61:bd:51:72:eb:c4:67:c9:9c:e0:15:
         1e:2b:a2:d4:83:0c:9f:f6:33:f2:1e:b0:82:5d:ff:b5:6d:b7:
         22:7a:af:5f:3d:26:0d:91:5d:76:21:7e:44:1a:bb:62:78:5d:
         dd:e5:22:fc:2c:59:1e:02:b0:25:d5:05:4b:5f:dd:76:6e:01:
         34:a7:2d:32:41:6e:48:a5:db:8c:03:42:d6:28:75:f6:fb:a7:
         a3:71:53:71:56:9f:7d:e8:df:e7:ef:72:32:a2:d2:71:85:89:
         4c:98:df:31:27:12:74:a0:67:b9:cd:4d:77:83:fc:8c:5a:12:
         1f:7e:3c:c6:f6:e3:08:10:2f:b4:4b:ae:93:af:10:e1:cc:af:
         da:af:2d:f8:6d:f1:09:f4:6f:50:51:73:a4:c3:d6:a1:3e:37:
         b6:dd:cb:c0:19:2a:d5:2e:ce:24:82:34:0a:d8:82:43:33:26:
         dd:c8:46:b2:6f:15:c4:23:43:d5:f8:89:a9:ec:9b:87:49:32:
         99:72:3d:76:93:4e:b3:33:b4:0c:37:4f:18:6a:05:a6:2e:7e:
         92:bf:94:1f:2e:c1:c0:3a:4b:04:68:ac:27:5d:57:9d:1e:4f:
         c1:37:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:28 2026 by rpki-client