Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3136302e3230322e3134382e302f32322d3234203d3e20313531323631.roa
File:                     3136302e3230322e3134382e302f32322d3234203d3e20313531323631.roa (raw, json)
Hash identifier:          o7e9tePUewuNAGbDQ+wOAdukTYLT3SuX6PiLhVnm+LY=
Subject key identifier:   A1:65:F6:45:D6:21:83:97:7F:BB:BD:D7:F2:6F:B5:6B:07:AA:1D:BD
Certificate issuer:       /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial:       3CE3305DE101C17D9A253BA5B3C5774F130A37AE
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3136302e3230322e3134382e302f32322d3234203d3e20313531323631.roa
Signing time:             Wed 08 Apr 2026 03:17:41 +0000
ROA not before:           Wed 08 Apr 2026 03:12:41 +0000
ROA not after:            Wed 07 Apr 2027 03:17:41 +0000
asID:                     151261
IP address blocks:        160.202.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e3:30:5d:e1:01:c1:7d:9a:25:3b:a5:b3:c5:77:4f:13:0a:37:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
        Validity
            Not Before: Apr  8 03:12:41 2026 GMT
            Not After : Apr  7 03:17:41 2027 GMT
        Subject: CN=A165F645D62183977FBBBDD7F26FB56B07AA1DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:53:ef:05:a6:ec:70:47:ca:69:89:2a:58:
                    87:46:91:77:f8:65:4b:a2:25:89:ee:95:2c:bd:69:
                    ff:c2:fd:38:e1:f9:19:66:24:9c:63:21:b3:f3:35:
                    35:1a:45:87:31:69:c5:a0:e5:b6:02:5a:00:ce:ed:
                    18:79:38:a4:ae:02:72:ec:90:00:d9:08:b6:fb:2d:
                    54:1c:82:49:79:33:c2:18:53:33:ff:83:d5:de:8f:
                    83:a8:0f:8b:6f:a9:92:5c:27:6e:ed:05:e6:9f:e0:
                    75:f6:c5:fc:e0:36:f0:e1:3d:43:a2:14:fd:47:be:
                    42:3e:82:02:a4:e1:f6:c6:79:c7:ee:d5:68:cc:3e:
                    3b:b9:28:2d:a9:50:62:d7:df:ef:78:66:7d:77:e0:
                    36:97:61:ae:c0:6f:29:ab:7a:d0:fd:d0:4a:f0:da:
                    04:11:96:36:65:65:ae:2d:04:b7:80:e1:03:52:3a:
                    07:ed:95:94:c1:fc:a8:7a:dd:b5:48:30:7f:11:1c:
                    73:03:06:5f:f7:85:7c:50:0e:e0:4d:65:67:f8:3b:
                    d2:7d:20:8e:44:7f:0d:51:a1:f0:ad:54:d4:c5:48:
                    ea:27:7b:6e:e6:9a:3b:8a:71:b7:34:e0:ea:36:a9:
                    19:ce:f9:a0:11:ce:c5:8d:4c:88:e8:20:fe:3a:78:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:65:F6:45:D6:21:83:97:7F:BB:BD:D7:F2:6F:B5:6B:07:AA:1D:BD
            X509v3 Authority Key Identifier:
                keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3136302e3230322e3134382e302f32322d3234203d3e20313531323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:da:17:50:82:b3:0d:86:1f:eb:fb:2c:25:e6:33:e2:e9:52:
         a8:67:ef:58:f1:bc:20:fa:81:40:e2:28:98:a3:04:cc:22:17:
         90:5c:fb:39:55:de:2b:aa:dd:08:a7:87:a7:f5:0c:b1:67:ad:
         ba:03:40:3c:0f:de:d8:92:4a:ca:8e:f9:b1:a6:58:62:a6:46:
         58:02:e6:2f:51:bd:86:4a:8f:d9:2b:3c:16:dc:86:11:63:91:
         ec:cc:5d:60:90:95:d8:c0:0f:76:f7:03:7e:9c:8e:0f:cb:96:
         71:1f:70:fa:55:76:d0:30:01:09:04:02:bd:55:37:1e:37:13:
         5b:0e:cc:f0:ef:3d:e0:b1:c4:18:b8:b1:31:5c:7b:e3:36:4d:
         92:ac:7e:e9:8f:12:9d:e8:ae:2e:1e:fc:14:87:93:06:fa:62:
         5b:aa:a5:c2:13:2b:1d:9e:4d:3c:c2:da:78:fd:03:25:b3:22:
         3d:1b:c7:d0:d1:87:fc:e7:5d:79:ac:fb:9b:b3:22:8e:f3:da:
         ad:ff:e6:c7:bb:83:15:b3:1d:b6:b1:0a:1e:07:21:c6:dd:e9:
         80:31:70:82:70:82:f7:75:b9:58:f0:b7:6a:e4:07:06:fb:c1:
         00:38:9f:96:6d:5a:06:f9:be:fa:e4:f6:bc:50:73:79:fc:c8:
         21:57:64:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:25:30 2026 by rpki-client