Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3137342e362e302f32342d3234203d3e20313531323531.roa
File:                     3230332e3137342e362e302f32342d3234203d3e20313531323531.roa (raw, json)
Hash identifier:          q9iWdKLAdHbfEGWeTQTJnj5rz99RfjAIuFKzrZu0in8=
Subject key identifier:   8D:5B:5B:58:FC:01:B8:BC:D9:0D:CC:57:88:22:2F:98:AE:B7:A1:E8
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       55654E11CE47D7E1BA211E5658296FC3C56799B4
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3137342e362e302f32342d3234203d3e20313531323531.roa
Signing time:             Tue 26 May 2026 08:57:13 +0000
ROA not before:           Tue 26 May 2026 08:52:13 +0000
ROA not after:            Tue 25 May 2027 08:57:13 +0000
asID:                     151251
IP address blocks:        203.174.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:65:4e:11:ce:47:d7:e1:ba:21:1e:56:58:29:6f:c3:c5:67:99:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: May 26 08:52:13 2026 GMT
            Not After : May 25 08:57:13 2027 GMT
        Subject: CN=8D5B5B58FC01B8BCD90DCC5788222F98AEB7A1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c5:ee:05:a6:09:82:63:78:c1:90:e5:89:6a:
                    37:38:6b:be:63:50:5a:50:33:40:59:8a:d6:5b:7c:
                    c6:42:6b:c9:41:d1:9b:a5:84:47:13:e6:d1:c6:b0:
                    7c:3c:9d:d0:8f:d4:bf:08:aa:75:70:1c:f6:e3:e4:
                    b8:14:eb:de:47:4c:16:e3:12:c9:ec:ca:66:0a:6a:
                    55:a9:9d:f9:a5:6f:ce:6f:2d:05:73:7c:93:e0:2d:
                    23:98:72:11:7e:d3:5f:37:ee:42:45:d2:b5:87:33:
                    ce:e8:57:76:f5:a2:6a:4f:78:80:59:36:eb:40:e3:
                    41:2d:94:77:74:e3:2b:72:c5:79:fe:32:e8:0c:95:
                    32:e9:bb:ff:cb:ab:2e:e3:0a:83:b7:c2:93:52:5c:
                    66:a2:13:e3:75:70:1c:46:da:04:fa:cd:6b:e0:13:
                    94:27:8a:99:0b:e4:a1:1a:3d:b6:e3:8d:bb:eb:05:
                    7d:25:a5:72:08:12:04:f7:0a:ce:9f:75:ee:10:3e:
                    f2:77:53:5f:9b:99:88:b1:bd:4d:c0:e7:56:2b:66:
                    57:91:74:11:fd:3e:2d:35:9a:34:f1:ef:bb:dc:4b:
                    33:26:be:2c:5f:24:6c:6b:fe:a7:2b:a4:ba:9f:c3:
                    96:d2:cd:a5:44:dc:c5:63:47:6c:b2:c0:ed:22:ce:
                    03:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5B:5B:58:FC:01:B8:BC:D9:0D:CC:57:88:22:2F:98:AE:B7:A1:E8
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3137342e362e302f32342d3234203d3e20313531323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ec:de:a1:f3:e2:2b:78:1b:77:35:3f:ac:e2:da:57:9b:cf:
         dd:76:d5:e6:97:fb:90:c5:fd:d2:6b:b9:37:31:c0:2b:bd:b9:
         85:39:d9:c1:66:36:50:a2:3d:97:8a:1d:a0:2f:40:1f:3f:28:
         cc:f1:6f:5c:f9:e8:df:ee:f5:b0:12:04:70:eb:00:01:82:57:
         6b:22:86:3a:39:87:5b:0d:4b:04:c4:c6:52:0b:00:a7:dc:b9:
         d9:34:18:e3:bf:8a:01:3d:5e:f8:e4:d9:8a:4d:1b:e8:6b:2b:
         95:ee:80:38:b8:92:ea:ef:f7:81:31:b7:f6:7c:2f:72:d4:ca:
         9b:47:97:0a:ba:0e:19:f4:9d:b7:bb:fd:16:95:8f:45:31:01:
         e1:50:3b:9d:c0:bb:7b:22:a2:70:ab:22:d2:db:11:e1:b7:5a:
         82:c6:bb:0b:28:cc:cd:9b:1e:ed:28:21:af:75:95:e0:d9:e2:
         20:66:25:1a:ad:01:99:ed:d9:9d:94:f5:14:f0:b6:67:2a:b3:
         f4:8a:d8:af:fe:58:ad:5a:90:0d:49:f8:cb:7d:e4:7f:ed:c0:
         89:ad:16:16:7d:6d:32:a7:95:84:15:4d:58:00:1d:fc:ea:70:
         aa:de:48:3a:d7:c2:9f:6d:84:4f:bd:27:00:5e:5a:33:70:ee:
         e6:86:f0:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:58:06 2026 by rpki-client