Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33352e302f32342d3234203d3e20313937363436.roa
File:                     3231312e3134392e33352e302f32342d3234203d3e20313937363436.roa (raw, json)
Hash identifier:          Im2H24Yr/6b3QfJrulqbSm/zgWvML9X71XNr/4p53L0=
Subject key identifier:   44:03:B3:02:89:43:89:1E:CB:CC:48:57:75:14:B5:E4:5E:9B:91:A6
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       2D845CE8B33BE3A841B2752F2FBACF846075D03C
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33352e302f32342d3234203d3e20313937363436.roa
Signing time:             Mon 13 Jul 2026 03:46:37 +0000
ROA not before:           Mon 13 Jul 2026 03:41:37 +0000
ROA not after:            Mon 12 Jul 2027 03:46:37 +0000
asID:                     197646
IP address blocks:        211.149.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:84:5c:e8:b3:3b:e3:a8:41:b2:75:2f:2f:ba:cf:84:60:75:d0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jul 13 03:41:37 2026 GMT
            Not After : Jul 12 03:46:37 2027 GMT
        Subject: CN=4403B3028943891ECBCC48577514B5E45E9B91A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:41:7f:55:f0:b3:6d:d0:e4:c8:f8:3b:f2:
                    a8:d3:f7:f2:24:8b:74:41:ec:86:af:d0:f2:df:38:
                    b7:52:9b:3a:b8:ad:b8:a7:f8:2b:a4:93:5f:e9:1c:
                    b2:a3:a3:cf:6c:c2:7a:30:5a:47:7a:13:82:7b:72:
                    17:ef:c0:9c:8a:f4:c2:72:25:27:d5:6e:c7:1b:64:
                    d8:ec:83:ed:3a:bd:eb:8d:3a:2f:76:e2:f2:7a:bc:
                    fd:6f:73:f0:75:0e:74:8e:73:d0:b2:dc:ac:04:f1:
                    f5:ec:1a:76:70:5f:39:af:8c:34:c9:f7:81:70:7f:
                    9c:69:a5:36:53:2e:ff:a5:5d:a2:ba:f1:35:de:25:
                    76:c2:2c:39:72:3e:54:8f:af:38:d7:57:71:ae:0c:
                    40:3a:a5:2a:4b:d4:ce:fc:06:ae:a6:69:17:f0:84:
                    1c:d2:a7:9f:df:b6:0d:b5:d3:3b:84:88:ba:8a:ae:
                    db:73:67:57:7e:4f:74:b8:70:18:90:a5:bc:38:14:
                    0d:6d:e7:1e:75:7e:f8:13:01:b8:0d:e5:04:b6:f6:
                    93:7a:ba:76:6a:bf:e9:86:17:9a:00:43:54:93:41:
                    06:11:62:5c:db:42:c7:80:24:4f:4a:65:49:36:b8:
                    48:b1:ef:b3:1f:5a:79:81:e6:76:52:5a:63:2d:62:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:03:B3:02:89:43:89:1E:CB:CC:48:57:75:14:B5:E4:5E:9B:91:A6
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3231312e3134392e33352e302f32342d3234203d3e20313937363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.149.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5b:fd:eb:b2:20:64:aa:cb:6d:1a:80:62:c6:01:f5:fb:9b:
         0f:4f:09:4b:b7:fc:c5:68:8c:7d:31:5a:3f:ce:a9:cb:db:f9:
         ab:d9:ee:e2:85:a9:e7:f7:2b:05:9d:72:2a:c6:80:d4:f7:b8:
         90:b7:8b:a3:4d:68:94:88:8a:3b:00:b7:a9:f9:37:cb:1a:7e:
         0e:77:cd:33:aa:a0:26:f9:31:c0:c2:6d:86:aa:6c:25:fd:d4:
         47:50:3f:71:2c:e3:81:b5:44:3d:76:be:d4:17:71:e5:84:b2:
         01:bb:a7:f7:bc:f1:56:71:0c:2c:09:40:3c:66:71:c9:e2:b6:
         7c:96:5e:69:7a:a6:8e:10:91:b7:33:24:45:5d:90:c5:37:fe:
         49:0a:4c:b2:e4:7c:06:58:f5:40:a7:55:80:44:2d:a3:e2:e4:
         c5:04:4c:59:19:22:a7:c6:8b:97:95:95:d2:ce:90:b4:43:6c:
         e3:71:9e:68:34:06:05:10:0d:6b:d6:3b:b3:b1:ba:1b:58:d6:
         d2:73:f0:80:0f:80:47:21:b7:38:d1:3b:84:0c:b9:aa:33:40:
         03:8b:49:6e:d7:a9:96:8a:55:81:bc:73:21:5d:98:97:95:0d:
         68:6a:dc:cb:aa:26:c8:17:96:8e:1f:03:2c:8c:51:a8:a8:4d:
         67:bd:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:21 2026 by rpki-client