Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3134372e31382e302f32332d3233203d3e2034383038.roa
File:                     3231312e3134372e31382e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier:          x3oVvnTimOE03DkSaralDeLuOq2RAtYoNKKvp5KwUTc=
Subject key identifier:   4E:83:52:E3:7E:95:9B:9F:5A:9D:7B:EF:8E:C3:0F:F8:96:11:D8:33
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       53899C591AB1EC29E7BDB4BDAFC30DD763683E49
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3134372e31382e302f32332d3233203d3e2034383038.roa
Signing time:             Tue 19 May 2026 06:39:12 +0000
ROA not before:           Tue 19 May 2026 06:34:12 +0000
ROA not after:            Tue 18 May 2027 06:39:12 +0000
asID:                     4808
IP address blocks:        211.147.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:89:9c:59:1a:b1:ec:29:e7:bd:b4:bd:af:c3:0d:d7:63:68:3e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 19 06:34:12 2026 GMT
            Not After : May 18 06:39:12 2027 GMT
        Subject: CN=4E8352E37E959B9F5A9D7BEF8EC30FF89611D833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:72:c9:47:0c:1f:31:9f:df:1f:a0:26:61:92:
                    37:21:2e:48:36:55:cb:f8:d8:a8:0a:db:07:42:43:
                    5e:bd:39:12:8a:62:4f:4e:61:24:ed:bb:26:8b:9a:
                    26:a2:2e:a9:a4:5c:80:81:38:a2:24:e1:07:89:93:
                    3e:75:e2:05:55:84:e0:7c:b3:cc:88:0a:eb:ef:42:
                    56:10:f3:b7:61:a5:b9:bc:e1:bd:b3:8a:73:1d:dc:
                    5c:48:51:6d:e1:28:87:b5:d2:f3:93:b4:45:4c:f6:
                    06:88:51:d9:12:c6:79:7d:d8:87:a2:35:a2:9d:4d:
                    83:7c:b4:a6:f3:56:2e:cd:8b:26:f3:04:80:91:a0:
                    6b:2f:86:58:8a:b4:05:9f:4f:53:0d:10:fd:e2:b4:
                    94:7a:0b:12:0a:6f:07:eb:08:51:b2:b2:c4:25:79:
                    2e:81:dc:ea:da:b3:82:b3:4b:3b:bc:93:27:bc:ec:
                    a2:ad:72:1a:0e:0f:af:53:84:81:1f:d9:3f:4d:72:
                    be:78:d3:5b:33:ce:e6:b3:f6:91:df:c3:5f:a2:f9:
                    69:c4:f4:0a:c8:37:5d:bc:4e:53:e1:12:b4:8c:ab:
                    92:ce:8f:b9:9e:67:4b:f1:de:12:27:b5:d1:ab:e1:
                    21:02:86:11:5b:c5:5d:dc:6f:3b:e6:b1:99:d8:f1:
                    00:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:83:52:E3:7E:95:9B:9F:5A:9D:7B:EF:8E:C3:0F:F8:96:11:D8:33
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3134372e31382e302f32332d3233203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.147.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:cf:90:9b:ad:a6:56:9c:69:29:03:a7:42:a0:11:7d:c2:56:
         17:ee:19:50:02:9c:40:ab:a1:b6:dd:74:eb:f6:47:ed:e8:1d:
         02:b5:c6:11:6e:78:5c:af:45:a9:22:73:81:a8:bb:cc:eb:14:
         e9:d8:60:98:55:64:16:41:41:c8:7a:1d:02:fb:a3:16:9a:7b:
         1b:1d:77:cb:85:34:8a:bb:d5:11:00:00:67:cd:d4:e2:fb:71:
         47:8b:61:60:30:f1:7f:51:38:08:d9:94:69:43:93:bd:36:ac:
         8f:e0:c9:b6:7e:a9:8d:c3:46:2e:31:d5:f4:2b:ed:9e:06:6d:
         c1:11:1d:7c:2d:be:e7:ca:46:bc:92:11:20:38:7a:ff:1b:88:
         f5:e8:34:88:dd:f7:c1:be:04:c8:d0:42:9b:54:6e:1b:2e:36:
         b9:91:a4:b7:4e:39:c3:e4:4c:63:8e:ce:39:f3:15:ef:f4:fe:
         aa:32:0e:a6:78:00:c8:20:1f:60:24:10:3c:c5:c1:0b:4c:cb:
         6f:c1:b2:47:b4:79:6c:54:57:29:e6:69:46:88:28:8b:0c:0d:
         60:d8:51:a0:e7:80:65:ad:32:26:f2:59:70:81:f8:33:3b:02:
         0e:15:f8:fc:96:ef:78:47:b7:0b:cf:b4:3a:b3:7f:9b:68:e5:
         ed:62:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:46 2026 by rpki-client