Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3136302e3230322e3135322e302f32342d3234203d3e20313531323631.roa
File:                     3136302e3230322e3135322e302f32342d3234203d3e20313531323631.roa (raw, json)
Hash identifier:          hDNA76cCl/eu2zHDP9TTL+Rzz0/Vz/lb2djtF66e8NU=
Subject key identifier:   78:68:97:BB:FE:4E:B9:1C:78:82:08:B2:21:33:17:A7:4B:26:28:83
Certificate issuer:       /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial:       44DC31E3737E18BE33A06A282B2741282F835B9D
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3136302e3230322e3135322e302f32342d3234203d3e20313531323631.roa
Signing time:             Mon 13 Apr 2026 05:43:29 +0000
ROA not before:           Mon 13 Apr 2026 05:38:29 +0000
ROA not after:            Mon 12 Apr 2027 05:43:29 +0000
asID:                     151261
IP address blocks:        160.202.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:dc:31:e3:73:7e:18:be:33:a0:6a:28:2b:27:41:28:2f:83:5b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
        Validity
            Not Before: Apr 13 05:38:29 2026 GMT
            Not After : Apr 12 05:43:29 2027 GMT
        Subject: CN=786897BBFE4EB91C788208B2213317A74B262883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:15:b2:cf:02:ba:bc:af:32:6e:5c:db:64:
                    31:22:af:9c:65:c3:73:a4:9f:3d:ca:a9:f9:c4:4e:
                    1f:2d:1e:9f:06:51:7c:e8:89:56:56:02:0b:e3:3a:
                    00:a6:8b:4f:8f:dc:7c:3d:1f:39:ae:8d:76:82:27:
                    28:33:e7:6d:91:68:23:ef:ac:4b:c4:1f:a7:a5:72:
                    1c:d8:61:4c:2c:fd:d0:6c:ea:28:a4:44:e2:45:bb:
                    b5:c0:a2:22:0a:c9:ed:db:20:45:76:ec:7b:c1:a0:
                    89:5d:d6:d2:16:67:1a:c9:af:d1:46:a2:2c:cb:69:
                    9d:ac:ad:46:1c:4f:ed:ff:78:61:db:6b:c7:3f:4f:
                    39:b1:72:d7:5d:a1:07:f0:b3:d6:ba:0f:68:38:b7:
                    6d:6b:f9:15:59:29:90:e3:2b:e1:eb:88:5e:49:75:
                    99:cb:49:cb:b3:46:44:1b:8c:6e:c2:42:b6:63:79:
                    94:43:7f:a4:4c:91:d4:c3:90:ef:46:ba:ba:2b:a7:
                    a4:be:3c:27:4b:49:a8:9c:75:b9:49:ac:b8:13:2d:
                    3d:4b:ae:7d:a4:e1:38:02:e3:0c:30:33:23:f7:86:
                    76:97:d7:bc:87:ef:d9:0b:ba:3f:f3:bc:42:7d:4a:
                    9d:8e:94:01:ef:4c:37:7c:04:ce:bc:2f:63:ba:73:
                    45:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:68:97:BB:FE:4E:B9:1C:78:82:08:B2:21:33:17:A7:4B:26:28:83
            X509v3 Authority Key Identifier:
                keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3136302e3230322e3135322e302f32342d3234203d3e20313531323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a3:72:06:92:34:09:35:b0:72:6a:b0:19:12:0f:c0:d4:8c:
         2e:c0:a6:35:e4:a2:54:c8:f5:b2:83:a4:10:cb:82:95:ac:0f:
         e1:1d:6b:f4:fa:e2:ad:a7:e5:4e:3d:55:cb:bc:5a:2a:b6:05:
         72:52:3f:9d:5b:f8:1d:7a:de:d0:24:d8:49:9f:0e:2e:40:26:
         80:a7:0d:59:50:0b:50:de:14:e3:1a:ac:eb:06:1e:47:43:65:
         28:37:83:7b:fe:ab:82:0d:e4:05:83:8f:9d:03:a3:22:a3:80:
         c6:49:54:6e:50:3d:7a:67:3a:33:bc:2b:ab:c9:c7:55:a9:b8:
         d6:ad:10:13:bf:15:6e:d9:ea:41:7c:70:61:95:d1:13:68:53:
         c5:34:99:f4:06:06:0e:c8:5d:94:4a:99:d6:0a:02:6b:f6:b9:
         c6:0e:e8:8a:86:97:00:9e:c8:e7:0a:cf:54:7f:6f:5a:2d:ea:
         c9:60:07:b1:ae:a7:88:5e:95:86:ea:99:79:0d:fa:26:5d:06:
         67:da:fa:d0:65:90:62:7c:73:7f:e5:af:ba:fa:ce:2f:b1:b3:
         e7:af:22:2e:f6:52:60:81:fd:66:52:1d:19:75:a8:91:9c:7c:
         24:54:39:c4:6b:80:a8:65:43:ff:60:bc:45:88:c9:c5:49:33:
         12:86:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:25:03 2026 by rpki-client