Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3135332e372e302f32342d3234203d3e20313531323531.roa
File:                     3230322e3135332e372e302f32342d3234203d3e20313531323531.roa (raw, json)
Hash identifier:          tfjUhuAMRoHw+XmcNvK63TdXVM18RqXuY24SvpDXfT8=
Subject key identifier:   0C:73:CF:6F:04:82:17:1C:49:6B:11:9D:7D:98:B6:D3:A3:3D:0A:75
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       0D192803997F4EA97771BF4B103E692645E95674
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3135332e372e302f32342d3234203d3e20313531323531.roa
Signing time:             Tue 26 May 2026 08:57:12 +0000
ROA not before:           Tue 26 May 2026 08:52:12 +0000
ROA not after:            Tue 25 May 2027 08:57:12 +0000
asID:                     151251
IP address blocks:        202.153.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:19:28:03:99:7f:4e:a9:77:71:bf:4b:10:3e:69:26:45:e9:56:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: May 26 08:52:12 2026 GMT
            Not After : May 25 08:57:12 2027 GMT
        Subject: CN=0C73CF6F0482171C496B119D7D98B6D3A33D0A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:80:c6:ab:97:4c:91:dd:4a:d0:fb:97:75:
                    fa:7b:4a:27:43:ee:45:b3:8b:46:1d:13:19:0d:fc:
                    49:61:98:1b:70:2b:a3:6c:12:cf:de:09:31:a2:18:
                    61:36:b2:5f:9e:25:b5:f0:03:63:ce:9a:bc:f6:92:
                    f8:96:e6:07:2f:01:68:c3:5c:5c:8d:75:fa:fb:ca:
                    07:8f:31:a1:16:ad:78:01:2d:6b:72:75:c5:75:ab:
                    df:74:e7:61:24:75:1f:59:50:35:44:38:09:6e:31:
                    e4:a2:f5:6a:ad:02:19:7f:ce:ac:bf:d7:13:3b:30:
                    36:da:7e:01:0b:64:76:4d:b1:db:23:e2:66:80:7b:
                    43:96:91:9f:aa:71:b3:76:cd:1a:93:92:3a:8e:0b:
                    f9:42:e5:f4:02:2d:f7:fd:88:f3:13:d2:2d:1f:45:
                    e3:3d:91:91:af:a4:67:b2:7d:bf:16:5d:08:5d:ff:
                    fc:35:bd:79:31:1e:7c:ca:5d:9f:e3:99:31:bd:3e:
                    e3:96:e9:e5:7f:7a:fc:1e:f5:7f:0f:f8:7d:50:5d:
                    fe:ef:6f:7e:2b:1b:8e:34:fd:b7:d6:d9:7e:5e:d8:
                    bf:dc:2a:55:d1:de:2e:ad:fe:cc:40:25:64:fe:4a:
                    4f:e1:f0:13:00:bb:6b:90:a5:a1:2c:cc:8a:8a:e4:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:73:CF:6F:04:82:17:1C:49:6B:11:9D:7D:98:B6:D3:A3:3D:0A:75
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3135332e372e302f32342d3234203d3e20313531323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.153.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:6a:e6:d9:c6:31:c5:fe:45:08:4d:31:9d:89:f8:7e:0c:38:
         11:fb:e0:80:f6:dd:b3:52:c3:d7:b8:5f:a9:dd:5a:25:3d:c5:
         dc:2a:df:f9:38:df:41:e5:24:70:e0:63:2b:19:5d:2c:58:bb:
         c9:01:a0:dc:3f:b7:86:e6:f4:c4:67:81:63:bb:f7:c8:36:aa:
         7b:8a:e0:3e:e6:23:7e:15:aa:2d:10:6f:d5:fa:62:ab:62:94:
         1a:0d:10:1f:fa:ab:e5:2d:7d:2e:c8:d2:44:ec:e1:22:93:f5:
         73:dc:2c:a0:fa:6a:86:26:7b:a5:74:3d:3e:d2:84:64:07:a1:
         90:05:24:ad:a5:ff:66:8c:8e:2b:7c:48:d4:d9:e7:ce:3c:30:
         11:f4:14:22:cf:b1:61:25:3d:74:0e:4a:02:6a:ed:e8:c5:c1:
         6e:bc:1e:56:8f:0d:6d:2c:04:a1:e2:91:51:05:de:d0:aa:cc:
         f7:13:09:ac:b7:61:47:f9:6d:61:97:04:db:f1:78:76:77:b5:
         6c:18:25:c5:6c:df:52:10:4e:29:ec:3b:f7:c1:47:e1:b5:aa:
         d3:d6:53:9d:2a:02:e7:72:f4:e6:77:fc:d7:6c:02:e9:36:9b:
         21:cf:70:6a:c2:b4:e9:52:64:59:75:92:ed:ea:04:39:65:aa:
         97:d7:0c:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:58:50 2026 by rpki-client