Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS197646.roa
File:                     AS197646.roa (raw, json)
Hash identifier:          jPShAJraKuSHcmKorl64jPoLokAYfItGikJjny1/5nQ=
Subject key identifier:   80:33:62:EB:E4:5C:6D:CA:53:AE:05:52:65:5E:72:C1:13:B5:62:DB
Certificate issuer:       /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial:       547D1C5581140204385B8F4BD08802C10D34629F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS197646.roa
Signing time:             Tue 02 Jun 2026 08:07:59 +0000
ROA not before:           Tue 02 Jun 2026 08:02:59 +0000
ROA not after:            Tue 01 Jun 2027 08:07:59 +0000
asID:                     197646
IP address blocks:        211.149.32.0/24 maxlen: 24
                          211.149.33.0/24 maxlen: 24
                          211.149.34.0/24 maxlen: 24
                          211.149.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 08:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7d:1c:55:81:14:02:04:38:5b:8f:4b:d0:88:02:c1:0d:34:62:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
        Validity
            Not Before: Jun  2 08:02:59 2026 GMT
            Not After : Jun  1 08:07:59 2027 GMT
        Subject: CN=803362EBE45C6DCA53AE0552655E72C113B562DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6f:eb:26:36:88:6a:1b:fe:90:23:55:13:66:
                    51:36:88:0d:d0:48:db:72:7e:35:56:66:01:a1:54:
                    eb:27:c7:cd:02:a1:6b:c5:6f:b5:1b:c0:54:42:f5:
                    47:a8:92:c7:66:82:d9:ec:ff:db:67:ee:6a:33:c3:
                    09:bd:3a:66:c6:45:de:d3:1c:c1:a4:92:21:d4:69:
                    35:18:22:7b:fd:32:3c:a5:94:98:6f:62:6d:cb:a9:
                    d9:f1:ff:5d:d8:19:3e:90:ca:0d:48:44:58:45:bb:
                    9f:25:08:a2:57:68:71:03:dc:f1:7d:40:26:49:0b:
                    ec:1d:69:15:cb:f3:42:d0:78:f3:bd:40:65:75:02:
                    39:a7:dd:94:d3:96:7a:b5:7b:42:af:fc:21:da:06:
                    d5:31:0f:95:f5:19:37:8b:84:e2:ae:9a:45:af:fb:
                    40:60:36:c9:36:a9:b1:b9:42:10:ad:c3:e0:65:cc:
                    f0:0e:68:52:89:4e:89:07:69:36:6d:24:5f:b0:ff:
                    5f:e5:b5:d1:75:5b:ef:05:2b:91:44:99:57:ce:ef:
                    51:6d:be:a1:3e:b8:20:1e:01:f0:e9:81:7e:56:a4:
                    80:74:28:ba:c1:82:21:aa:f5:8c:1d:8b:28:22:2a:
                    d7:ef:b1:ef:e2:5c:49:15:b0:1e:7c:8d:d7:0c:82:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:33:62:EB:E4:5C:6D:CA:53:AE:05:52:65:5E:72:C1:13:B5:62:DB
            X509v3 Authority Key Identifier:
                keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/AS197646.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.149.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:8c:dc:ad:71:a2:7d:5c:9e:23:f4:dc:2d:89:46:d0:41:0d:
         af:67:63:8c:a4:3e:a8:b5:f0:bf:59:fe:82:f1:53:78:c1:1e:
         03:a8:76:8e:40:0d:ab:d3:a0:a7:a2:ae:ff:a1:93:77:80:4f:
         f7:03:df:d1:be:0b:09:28:6c:29:50:0d:0d:7b:de:b9:95:22:
         61:38:63:e6:10:51:d1:3d:85:a0:8c:e5:bb:dc:12:ee:d8:b3:
         7b:b3:f5:89:8e:20:5c:d9:28:06:c7:b2:94:b7:b9:23:b3:e1:
         3b:9b:8c:7e:03:15:37:ea:4e:b2:a2:5a:08:84:f1:05:5d:50:
         a2:b3:80:05:e8:39:b1:70:65:5d:f6:23:17:a3:e1:a8:42:b9:
         8f:e2:74:99:97:10:8a:2a:4c:96:05:2c:f3:ac:5d:c7:e8:69:
         2d:f2:4f:ac:c4:85:02:5f:4e:f0:04:5a:6e:77:24:bd:b6:f8:
         23:55:37:7a:4b:6c:d5:07:c4:94:68:90:b4:ce:17:bb:e1:a2:
         eb:ee:88:aa:32:46:d9:75:d2:5c:ef:0a:0d:3e:6b:b3:4a:1a:
         a1:52:11:82:92:dd:57:9a:37:bb:ea:9e:d5:30:37:62:5f:52:
         94:28:76:38:9e:34:29:72:c1:f8:59:02:4c:f7:5b:e7:2d:8a:
         21:f1:e4:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 8 20:54:15 2026 by rpki-client