Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130342e302f32322d3232203d3e20313338393135.roa
File:                     3231312e3135352e3130342e302f32322d3232203d3e20313338393135.roa (raw, json)
Hash identifier:          bB7BfzKkIwZUwlWdw9j4kqEd/PrTF1o3u3Y0+/9z3ps=
Subject key identifier:   CE:D0:C9:D0:DF:C9:99:11:F6:B4:4F:48:2A:C5:6D:82:B1:2A:72:B7
Certificate issuer:       /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
Certificate serial:       3013CE93FEB9194E2BCF017DA6937FCB2989357F
Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130342e302f32322d3232203d3e20313338393135.roa
Signing time:             Tue 02 Jun 2026 06:25:25 +0000
ROA not before:           Tue 02 Jun 2026 06:20:25 +0000
ROA not after:            Tue 01 Jun 2027 06:25:25 +0000
asID:                     138915
IP address blocks:        211.155.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 20:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:13:ce:93:fe:b9:19:4e:2b:cf:01:7d:a6:93:7f:cb:29:89:35:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4
        Validity
            Not Before: Jun  2 06:20:25 2026 GMT
            Not After : Jun  1 06:25:25 2027 GMT
        Subject: CN=CED0C9D0DFC99911F6B44F482AC56D82B12A72B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:f9:8c:e9:d8:25:74:ac:5b:20:1d:c1:cf:
                    e6:15:da:0f:68:81:e7:f6:21:d4:74:c0:3d:4f:93:
                    13:92:f3:63:59:1f:18:d2:9a:e9:ed:82:5e:d8:05:
                    e7:44:6d:8d:dd:33:76:33:c2:a5:0f:1b:4d:ec:7e:
                    7a:3d:19:63:7e:f1:9e:bf:f4:70:f8:58:eb:3f:8b:
                    e3:8d:ca:9d:b6:70:9f:06:22:a6:ef:e8:48:53:07:
                    25:e0:45:85:dd:ad:ef:cf:fc:fe:40:f0:8e:bf:0f:
                    d7:c7:03:63:40:25:61:8b:d5:a4:52:26:2c:3a:9f:
                    5a:9f:95:84:84:8c:85:7f:11:ee:83:e9:32:78:4e:
                    bb:e9:d4:5e:9e:ce:51:42:4e:00:d0:a4:24:41:6d:
                    17:71:45:f6:d3:25:f9:f3:0d:2e:e5:14:3a:cc:82:
                    9d:04:15:be:38:17:4d:2a:04:32:7c:c8:52:4d:f6:
                    da:bb:75:75:ad:34:2d:12:21:f0:60:a9:bf:44:6f:
                    a4:1d:c1:3c:3a:bf:61:0e:32:aa:4a:8c:ad:60:3e:
                    c7:cd:07:c1:f6:35:fc:27:ee:c8:a6:6c:b5:2d:60:
                    49:a2:91:aa:19:81:e4:fc:2a:41:ae:64:f3:0f:15:
                    8f:17:c9:39:eb:c3:52:f4:23:f2:7d:db:e2:d4:a0:
                    89:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D0:C9:D0:DF:C9:99:11:F6:B4:4F:48:2A:C5:6D:82:B1:2A:72:B7
            X509v3 Authority Key Identifier:
                keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/3231312e3135352e3130342e302f32322d3232203d3e20313338393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:ef:1d:0c:86:d8:a7:ec:46:f2:38:73:33:58:af:35:48:
         23:c1:45:ae:c3:70:a0:d4:67:77:0f:95:0a:63:e2:03:a5:ca:
         1b:46:0d:e0:ce:fd:9d:4a:3b:31:5f:f5:f9:34:fc:02:bb:77:
         27:36:ab:32:e4:b8:86:51:39:21:e2:ff:9c:d4:25:34:17:b4:
         1f:60:69:f9:75:e8:b9:d0:e5:c1:9e:9c:4d:e4:8f:a3:c7:ae:
         61:9b:20:e2:ef:36:91:cf:48:27:98:38:f7:59:e4:4b:71:06:
         4f:d1:49:2b:00:6a:04:42:6f:31:ed:75:00:7d:c2:94:5b:d5:
         3c:d0:27:3e:62:d4:e3:9f:a3:21:b9:3f:bb:a6:0d:40:5e:d2:
         03:08:58:8c:47:8a:db:bb:ed:c2:38:35:07:fe:92:67:da:3d:
         f1:5a:36:8a:e0:fa:45:78:bc:2e:7e:58:7e:9b:86:fc:f3:d4:
         8a:ff:bc:ab:d8:a4:d4:91:91:54:2e:2a:2c:bc:0c:45:6c:39:
         a7:9c:69:d5:fe:3e:22:59:a4:fa:ba:b2:9f:7f:88:41:6d:ef:
         11:c2:f0:07:b3:6f:da:0c:e6:8a:a9:0a:50:47:e3:68:7c:4f:
         90:2d:ad:53:ec:37:e0:a9:7f:8f:2d:23:f5:27:ae:27:73:97:
         d3:b6:39:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:39 2026 by rpki-client