Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e31362e36332e302f32342d3234203d3e20313531323531.roa
File:                     3230332e31362e36332e302f32342d3234203d3e20313531323531.roa (raw, json)
Hash identifier:          vFdNFHiN3TMOKZPfat+9ys9S2MH2DGTTS/y9t11B0o8=
Subject key identifier:   EB:75:99:85:73:9C:DD:86:40:1B:CA:03:BA:0C:7E:40:A1:B9:76:94
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       267400614D56FDF5E031666C52F9DE25040F0184
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e31362e36332e302f32342d3234203d3e20313531323531.roa
Signing time:             Tue 26 May 2026 08:57:12 +0000
ROA not before:           Tue 26 May 2026 08:52:12 +0000
ROA not after:            Tue 25 May 2027 08:57:12 +0000
asID:                     151251
IP address blocks:        203.16.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:74:00:61:4d:56:fd:f5:e0:31:66:6c:52:f9:de:25:04:0f:01:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: May 26 08:52:12 2026 GMT
            Not After : May 25 08:57:12 2027 GMT
        Subject: CN=EB759985739CDD86401BCA03BA0C7E40A1B97694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2e:a8:7f:ce:93:e7:05:54:57:16:20:c3:24:
                    2b:42:4b:7c:23:e6:7c:9c:3a:4a:9d:43:36:18:16:
                    a9:ca:36:c8:43:e2:39:56:a4:7e:9b:75:f6:30:88:
                    6a:53:3a:a5:a3:71:f1:00:87:d7:e5:67:fe:3d:44:
                    38:ad:99:ae:56:68:91:0b:d4:56:57:94:d0:62:80:
                    09:60:08:b6:60:90:80:02:4f:da:77:ee:27:7d:02:
                    4e:f8:45:a8:db:03:1e:49:be:45:f7:1d:8d:cd:a0:
                    94:97:ef:61:8b:ba:eb:e1:2a:8d:44:cb:3a:74:6f:
                    28:2b:7b:af:5c:29:b4:88:c5:27:9c:7d:56:e3:b0:
                    27:0d:b8:8e:85:8f:28:ce:8f:31:e6:c0:e4:ce:bc:
                    76:d9:68:01:8a:e9:aa:a0:5d:d4:8a:69:90:08:28:
                    e5:3f:5a:8d:4a:ba:99:b3:3b:7c:11:fd:49:35:fd:
                    4f:3e:da:2f:97:c4:ec:4d:c0:aa:ab:cd:a4:8b:61:
                    df:7d:82:9b:c2:39:04:06:20:44:70:48:1a:cb:3b:
                    f8:cb:f5:b8:a9:45:8c:cc:ef:97:3e:3d:a2:1a:cb:
                    11:a5:2f:5e:c7:86:1f:27:2d:1b:ab:6f:28:3f:2a:
                    03:1d:4c:2a:83:3b:6b:23:c4:a9:b7:ca:a5:de:9f:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:75:99:85:73:9C:DD:86:40:1B:CA:03:BA:0C:7E:40:A1:B9:76:94
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e31362e36332e302f32342d3234203d3e20313531323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.16.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:eb:29:22:29:eb:92:47:a0:e1:a6:cb:1d:17:fb:6b:02:c3:
         18:99:8f:f3:35:2c:bd:b9:2a:a2:bb:fe:a3:81:21:00:57:83:
         c3:ee:78:e6:38:06:06:12:05:4d:c8:d8:1a:b3:40:9a:e1:ac:
         81:1c:81:88:ad:db:fb:4d:6f:60:4a:a9:0a:34:f2:e4:86:42:
         9d:62:96:13:20:8b:66:58:92:93:cf:26:3a:43:68:42:8c:6e:
         e2:f3:d2:1d:27:33:08:8f:5b:68:98:2d:8e:5f:78:6a:a4:de:
         59:5d:af:37:84:db:e6:f2:5b:09:97:33:51:16:66:38:ed:f5:
         f5:5e:d9:b5:cb:16:69:15:66:07:6a:1c:fb:31:50:50:fd:2e:
         29:ca:c3:6d:89:7e:0e:88:48:73:c2:14:10:83:5b:43:5e:2f:
         7f:e5:c2:16:38:9f:41:69:de:c0:2f:79:81:30:62:10:39:b0:
         2e:97:45:b7:ba:f5:74:6d:59:27:0e:25:be:38:e0:97:12:3c:
         d6:71:65:02:16:b1:d3:6b:a7:94:7c:cc:87:28:d8:63:4f:c4:
         ad:97:b9:22:a3:6a:12:a3:fe:6d:6b:26:42:f2:da:3b:29:04:
         94:ff:b2:fb:ab:a3:78:5a:d2:17:2f:cc:22:2b:e4:6f:b4:f2:
         d8:c4:ea:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:45 2026 by rpki-client