Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135362e302f32322d3234203d3e203231383539.roa
File:                     3131362e3139392e3135362e302f32322d3234203d3e203231383539.roa (raw, json)
Hash identifier:          y85JS4IrFI4cLDMqGOcoSALZjFCH1nQD/vjK7EhIyVs=
Subject key identifier:   E1:B6:22:91:1B:18:82:DC:5B:0C:D3:15:5E:04:3F:91:8C:9B:EC:F9
Certificate issuer:       /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial:       340FAEC7456C03A425AF56A766E1B2744EAD7B96
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135362e302f32322d3234203d3e203231383539.roa
Signing time:             Wed 08 Apr 2026 15:08:31 +0000
ROA not before:           Wed 08 Apr 2026 15:03:31 +0000
ROA not after:            Wed 07 Apr 2027 15:08:31 +0000
asID:                     21859
IP address blocks:        116.199.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0f:ae:c7:45:6c:03:a4:25:af:56:a7:66:e1:b2:74:4e:ad:7b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
        Validity
            Not Before: Apr  8 15:03:31 2026 GMT
            Not After : Apr  7 15:08:31 2027 GMT
        Subject: CN=E1B622911B1882DC5B0CD3155E043F918C9BECF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:bc:85:7b:9c:1f:5d:3d:f3:ee:0f:49:77:
                    0c:05:36:58:fa:2e:5f:f7:ee:4e:8f:22:a8:ea:e1:
                    ec:d5:f1:a6:56:e0:34:ff:a2:d3:25:6a:97:bc:90:
                    f7:05:29:f8:bf:82:53:ae:e9:b6:e9:0d:44:03:2a:
                    39:f4:a0:f5:43:d6:34:bb:97:77:16:41:11:a6:05:
                    9d:c0:60:67:d3:24:f7:da:1a:87:24:bb:8a:f7:f7:
                    b7:0c:a4:51:de:c5:0b:e6:59:70:f8:b8:33:d8:0f:
                    5d:26:d0:88:d1:22:11:eb:ce:e3:9c:2b:8d:13:c5:
                    92:c8:71:98:c4:12:42:fd:78:aa:c0:c6:f5:b7:b0:
                    ef:77:e6:ed:e7:cc:c4:ba:c0:46:cd:45:ea:04:95:
                    ab:91:ea:a7:17:e7:6c:7c:6d:13:14:cc:9c:7b:06:
                    da:9b:88:46:b2:1e:ea:89:f2:23:33:5d:9f:94:1c:
                    30:d3:e3:e6:19:d1:b7:16:07:d5:b7:08:2a:d8:a3:
                    0d:b2:9e:7f:83:a9:00:0f:86:7a:7e:89:68:47:f7:
                    86:93:76:24:de:85:bc:ea:97:64:50:20:cb:fb:0f:
                    28:95:47:82:e9:6c:a6:58:64:6f:22:c3:09:96:a3:
                    21:b9:ea:be:47:d6:ac:b8:fd:53:db:03:23:d8:99:
                    01:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B6:22:91:1B:18:82:DC:5B:0C:D3:15:5E:04:3F:91:8C:9B:EC:F9
            X509v3 Authority Key Identifier:
                keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135362e302f32322d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:41:05:60:37:c6:0e:a0:a5:d4:6c:f0:c1:8d:d0:f2:8c:5e:
         e4:7b:77:b3:c3:cc:74:79:04:62:b5:91:02:df:e0:a2:0b:1c:
         e9:e8:fe:f1:0a:c5:c1:1e:b5:de:a7:71:04:47:36:7c:4d:50:
         78:e3:c2:cf:a5:b9:94:39:d0:fc:ab:81:4e:5f:02:fd:9f:63:
         1c:2a:cb:14:7a:ca:3a:7d:5b:07:0a:48:96:86:e3:b3:62:93:
         12:f3:0e:49:0a:06:1c:1b:4e:46:a7:f8:48:0a:ec:ef:95:07:
         7e:1b:a7:dc:b6:9d:54:15:f3:b3:ef:e5:38:0f:a2:8f:a1:10:
         66:ec:03:49:ae:d5:02:63:d8:60:a8:2d:1e:2d:2a:dd:22:9e:
         6b:89:57:cf:58:83:ea:54:97:44:b6:4d:7a:ca:5c:36:65:a3:
         bb:77:c5:cd:fb:33:5c:4f:c9:68:3b:3e:8f:89:7c:7c:16:88:
         b0:1d:bf:9d:4c:12:a9:c2:76:a2:1a:3d:fc:a8:44:78:5c:7a:
         6f:8b:1d:3d:15:d9:db:fa:3f:1f:54:92:df:c7:87:a5:28:fe:
         9d:b5:35:fc:d5:b7:77:94:d3:5c:19:a3:c5:6b:49:b5:6a:d4:
         24:e9:b0:ba:b3:24:74:39:54:6b:b9:00:56:02:ef:10:51:61:
         5e:47:e3:38
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUNA+ux0VsA6Qlr1anZuGydE6te5YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz
MDgzMDIzMjAeFw0yNjA0MDgxNTAzMzFaFw0yNzA0MDcxNTA4MzFaMDMxMTAvBgNV
BAMTKEUxQjYyMjkxMUIxODgyREM1QjBDRDMxNTVFMDQzRjkxOEM5QkVDRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzryFe5wfXT3z7g9JdwwFNlj6
Ll/37k6PIqjq4ezV8aZW4DT/otMlape8kPcFKfi/glOu6bbpDUQDKjn0oPVD1jS7
l3cWQRGmBZ3AYGfTJPfaGocku4r397cMpFHexQvmWXD4uDPYD10m0IjRIhHrzuOc
K40TxZLIcZjEEkL9eKrAxvW3sO935u3nzMS6wEbNReoElauR6qcX52x8bRMUzJx7
BtqbiEayHuqJ8iMzXZ+UHDDT4+YZ0bcWB9W3CCrYow2ynn+DqQAPhnp+iWhH94aT
diTehbzql2RQIMv7DyiVR4LpbKZYZG8iwwmWoyG56r5H1qy4/VPbAyPYmQGbAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU4bYikRsYgtxbDNMVXgQ/kYyb7PkwHwYDVR0j
BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1
NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczODg5MjkvMC8zMTMxMzYyZTMx
MzkzOTJlMzEzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAnTHnDANBgkqhkiG9w0BAQsFAAOCAQEAekEFYDfGDqCl1GzwwY3Q
8oxe5Ht3s8PMdHkEYrWRAt/gogsc6ej+8QrFwR613qdxBEc2fE1QeOPCz6W5lDnQ
/KuBTl8C/Z9jHCrLFHrKOn1bBwpIlobjs2KTEvMOSQoGHBtORqf4SArs75UHfhun
3LadVBXzs+/lOA+ij6EQZuwDSa7VAmPYYKgtHi0q3SKea4lXz1iD6lSXRLZNespc
NmWju3fFzfszXE/JaDs+j4l8fBaIsB2/nUwSqcJ2oho9/KhEeFx6b4sdPRXZ2/o/
H1SS38eHpSj+nbU1/NW3d5TTXBmjxWtJtWrUJOmwurMkdDlUa7kAVgLvEFFhXkfj
OA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:43 2026 by rpki-client