Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3137312e3233322e302f32342d3234203d3e20313531323531.roa
File:                     3230322e3137312e3233322e302f32342d3234203d3e20313531323531.roa (raw, json)
Hash identifier:          37J4UChBWQno0PS67CISco/dgUXgy2QBAlmPmhCNaN0=
Subject key identifier:   0A:12:14:43:F5:CA:5F:5D:99:20:AB:95:69:0F:70:5E:F1:F6:DC:BB
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       614528A86C7E6656E0B4E23512241E67B128201A
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3137312e3233322e302f32342d3234203d3e20313531323531.roa
Signing time:             Tue 26 May 2026 08:57:13 +0000
ROA not before:           Tue 26 May 2026 08:52:13 +0000
ROA not after:            Tue 25 May 2027 08:57:13 +0000
asID:                     151251
IP address blocks:        202.171.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:45:28:a8:6c:7e:66:56:e0:b4:e2:35:12:24:1e:67:b1:28:20:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: May 26 08:52:13 2026 GMT
            Not After : May 25 08:57:13 2027 GMT
        Subject: CN=0A121443F5CA5F5D9920AB95690F705EF1F6DCBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:b7:92:2e:ce:aa:1c:6e:be:d0:dc:8f:79:
                    a4:a7:1b:90:8d:6a:44:bc:c8:48:1f:82:b1:27:49:
                    c4:4a:82:f0:7e:67:3b:c2:d7:e6:b4:81:40:34:c1:
                    cf:01:77:d9:fd:07:09:c3:1a:74:83:ba:71:dd:31:
                    19:70:4d:08:fc:e7:fa:7c:7a:d7:99:23:5a:a9:aa:
                    6c:fb:69:27:61:47:bf:95:d9:12:d5:7f:9e:77:4c:
                    35:b2:d1:c5:53:42:8e:3a:60:72:09:65:b1:97:52:
                    2f:ab:6b:5f:e5:71:21:11:3b:50:52:31:ca:ea:15:
                    8e:fa:f6:f0:d5:5d:60:46:97:d4:ee:1a:ce:e4:08:
                    58:3c:1f:50:25:82:8e:35:0e:e0:e8:a2:87:e2:fb:
                    69:90:7d:ce:49:1e:f0:9f:23:ed:fb:06:67:b8:5f:
                    9f:b4:5e:e2:fc:81:ec:60:e0:17:6e:f5:23:e3:ab:
                    39:ae:35:9c:bd:63:7d:8c:13:52:05:64:93:57:89:
                    d4:9c:57:e0:45:71:a7:b8:b7:f0:1d:3d:cc:f8:c3:
                    ac:37:a5:65:10:ae:8c:63:7e:1b:c4:e0:8b:8f:ac:
                    72:e6:fc:ca:23:25:ee:04:68:bf:65:e7:5e:b5:94:
                    e2:6c:7f:b5:57:f9:b7:1c:d2:1e:4e:53:45:81:30:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:14:43:F5:CA:5F:5D:99:20:AB:95:69:0F:70:5E:F1:F6:DC:BB
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230322e3137312e3233322e302f32342d3234203d3e20313531323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f3:61:8f:13:b7:29:df:27:c0:f7:b4:c8:92:e7:e7:a0:28:
         6e:69:15:0c:2c:64:0b:16:94:68:44:16:0f:9a:ea:4c:4b:4f:
         36:20:8e:2e:e8:c5:1c:40:98:82:a9:24:d1:33:2c:7a:30:37:
         32:8d:46:26:67:5b:07:21:af:8d:75:dc:d8:9a:e2:05:16:44:
         98:b4:4f:5d:6c:44:8e:33:ad:3b:16:59:53:b7:80:9d:52:8b:
         f0:8c:ca:2a:53:99:33:d2:a9:41:f9:f8:7b:32:08:59:dc:b4:
         f6:29:6f:08:e7:eb:61:eb:34:23:cd:cf:54:60:58:af:d5:ac:
         ad:37:87:5c:fa:f5:84:61:e0:1b:c6:51:98:f1:ad:a0:82:ae:
         b7:62:4a:6d:ca:f0:a3:fe:63:9f:f6:e0:f3:8e:32:19:73:f5:
         25:3d:ef:c2:32:1c:e8:f4:47:6e:8b:6f:a5:c5:5c:9f:f1:46:
         ed:cc:13:83:2e:0b:ef:ea:8c:64:b9:4b:3a:d7:b9:17:d9:12:
         27:ec:fb:e5:a5:b9:b8:63:30:73:a5:66:a2:76:61:32:c5:e5:
         fd:9b:51:77:2e:60:e6:75:db:a4:cf:64:bb:41:7f:2b:e6:57:
         18:2e:0e:44:b3:1f:ed:cb:fc:15:d0:45:fa:01:fe:e1:ff:89:
         a0:b6:c0:2c
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUYUUoqGx+ZlbgtOI1EiQeZ7EoIBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4
RDM3QzUxRTAeFw0yNjA1MjYwODUyMTNaFw0yNzA1MjUwODU3MTNaMDMxMTAvBgNV
BAMTKDBBMTIxNDQzRjVDQTVGNUQ5OTIwQUI5NTY5MEY3MDVFRjFGNkRDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0mLeSLs6qHG6+0NyPeaSnG5CN
akS8yEgfgrEnScRKgvB+ZzvC1+a0gUA0wc8Bd9n9BwnDGnSDunHdMRlwTQj85/p8
eteZI1qpqmz7aSdhR7+V2RLVf553TDWy0cVTQo46YHIJZbGXUi+ra1/lcSERO1BS
McrqFY769vDVXWBGl9TuGs7kCFg8H1Algo41DuDooofi+2mQfc5JHvCfI+37Bme4
X5+0XuL8gexg4Bdu9SPjqzmuNZy9Y32ME1IFZJNXidScV+BFcae4t/AdPcz4w6w3
pWUQroxjfhvE4IuPrHLm/MojJe4EaL9l5161lOJsf7VX+bcc0h5OU0WBMC1jAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUChIUQ/XKX12ZIKuVaQ9wXvH23LswHwYDVR0j
BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5
M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5Mzk0MTc5LzAvMzIzMDMyMmUz
MTM3MzEyZTMyMzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzUz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMqr6DANBgkqhkiG9w0BAQsFAAOCAQEASfNhjxO3Kd8nwPe0
yJLn56AobmkVDCxkCxaUaEQWD5rqTEtPNiCOLujFHECYgqkk0TMsejA3Mo1GJmdb
ByGvjXXc2JriBRZEmLRPXWxEjjOtOxZZU7eAnVKL8IzKKlOZM9KpQfn4ezIIWdy0
9ilvCOfrYes0I83PVGBYr9WsrTeHXPr1hGHgG8ZRmPGtoIKut2JKbcrwo/5jn/bg
844yGXP1JT3vwjIc6PRHbotvpcVcn/FG7cwTgy4L7+qMZLlLOte5F9kSJ+z75aW5
uGMwc6VmonZhMsXl/ZtRdy5g5nXbpM9ku0F/K+ZXGC4ORLMf7cv8FdBF+gH+4f+J
oLbALA==
-----END CERTIFICATE-----
Generated at Fri May 29 22:58:58 2026 by rpki-client