Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3134372e32302e302f32322d3232203d3e2034383038.roa
File:                     3231312e3134372e32302e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          EoHmPk5f44zmEFZwfmbaepfqwINHJg5fSjWaG4gqy8Q=
Subject key identifier:   4B:80:62:AC:A3:53:84:C3:F3:02:B9:CF:F4:56:CF:2D:18:B5:86:00
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       4BD1ECF013221FEE5FD4F804D68BD80E1EAA9F7E
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3134372e32302e302f32322d3232203d3e2034383038.roa
Signing time:             Tue 19 May 2026 06:39:12 +0000
ROA not before:           Tue 19 May 2026 06:34:12 +0000
ROA not after:            Tue 18 May 2027 06:39:12 +0000
asID:                     4808
IP address blocks:        211.147.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d1:ec:f0:13:22:1f:ee:5f:d4:f8:04:d6:8b:d8:0e:1e:aa:9f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 19 06:34:12 2026 GMT
            Not After : May 18 06:39:12 2027 GMT
        Subject: CN=4B8062ACA35384C3F302B9CFF456CF2D18B58600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:36:4e:0a:67:ea:2d:76:c7:70:49:c4:8a:
                    1a:75:e2:76:12:56:ca:d9:6f:30:fb:55:dc:42:a1:
                    d0:84:67:17:ee:54:0f:a7:07:5d:b6:47:1d:6b:ca:
                    63:30:92:9a:65:f0:cb:dd:a3:1e:b9:45:4c:b0:56:
                    05:25:67:3e:8c:aa:47:98:5d:f0:c7:5b:e1:bc:7e:
                    e1:2f:3d:16:8d:94:a4:a2:3b:11:f5:a8:d5:88:a2:
                    c9:73:c3:ff:6b:00:53:2b:90:bf:67:5e:b8:43:56:
                    d3:1e:7e:d9:b9:29:66:f9:b0:8d:7d:51:77:11:9c:
                    4d:75:90:85:3c:17:28:75:9d:60:be:f8:f1:f5:b0:
                    73:43:1e:28:8f:80:cd:d6:04:cf:e0:c9:38:2c:56:
                    66:3d:e3:29:11:90:16:cd:15:8f:d3:b1:c5:7c:78:
                    60:26:8f:18:ad:b9:dd:78:98:e2:d9:c5:66:a4:6a:
                    2b:62:9c:49:52:b3:68:c9:0c:a5:64:02:03:67:59:
                    d6:a8:a8:d6:2c:d1:79:f0:ee:4b:92:39:70:82:e7:
                    bf:06:c5:d6:20:2f:17:f0:de:2d:20:e0:69:df:c8:
                    73:15:cb:1d:8f:81:57:28:ba:26:1c:9c:00:ef:1b:
                    6e:96:08:e7:8f:0d:38:2a:2a:cd:b0:95:26:ea:0f:
                    a6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:80:62:AC:A3:53:84:C3:F3:02:B9:CF:F4:56:CF:2D:18:B5:86:00
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3134372e32302e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.147.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:e6:62:a4:d3:cb:47:da:a8:82:22:9a:96:d7:26:9a:49:6e:
         e0:a4:c7:a9:7a:6b:23:bb:b4:a4:0b:c1:4b:d0:d6:51:59:eb:
         35:7d:f9:0d:6c:e5:ac:e3:7d:54:92:69:73:be:7c:40:79:b2:
         9e:00:28:2c:b4:e1:9f:3e:62:2f:46:f6:db:94:df:0d:f7:50:
         43:86:70:a7:0f:e2:15:55:fb:eb:63:e2:e1:0c:ae:92:bf:46:
         6c:b6:82:79:ab:93:d6:4b:5d:d0:4a:08:18:75:b1:fb:f1:11:
         6d:78:4e:6e:06:8b:12:04:99:72:b4:cc:d9:6b:b8:a9:da:06:
         10:41:43:27:63:08:b5:50:2b:80:d2:77:a5:62:86:13:0a:5b:
         b6:06:19:d8:78:81:31:05:9a:01:02:52:0a:66:7a:d2:ef:53:
         29:57:90:a6:ba:92:10:9c:a9:26:ee:a9:5e:31:67:8a:ed:09:
         68:a1:42:ec:ac:7d:16:0e:df:cc:24:64:6d:dd:76:0c:51:5f:
         f9:62:2a:79:7d:cb:3d:1e:5b:bf:e8:a6:e1:a2:95:4a:6d:54:
         85:65:b2:25:37:3c:68:5c:69:2a:a8:f8:56:0c:cc:b2:e8:30:
         5b:04:01:b8:8d:ef:64:6e:88:53:99:a6:6e:c0:5b:64:5e:a4:
         29:bf:3e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:12 2026 by rpki-client