Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3130312e3235312e3133362e302f32312d3231203d3e20313431373731.roa
File:                     3130312e3235312e3133362e302f32312d3231203d3e20313431373731.roa (raw, json)
Hash identifier:          qys43liDA6jsWsk235EZAXJ4Fn0B7coN/vVkwlWTYu4=
Subject key identifier:   ED:7F:24:EB:F1:CB:4B:44:E5:5A:83:66:25:12:19:97:5C:67:C8:5B
Certificate issuer:       /CN=EA1B92DE3A39218C88302E877CD7677E74606B38
Certificate serial:       49BBE02AB2A61496555A7C0974489557B886707F
Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3130312e3235312e3133362e302f32312d3231203d3e20313431373731.roa
Signing time:             Wed 27 May 2026 05:36:03 +0000
ROA not before:           Wed 27 May 2026 05:31:03 +0000
ROA not after:            Wed 26 May 2027 05:36:03 +0000
asID:                     141771
IP address blocks:        101.251.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:bb:e0:2a:b2:a6:14:96:55:5a:7c:09:74:48:95:57:b8:86:70:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38
        Validity
            Not Before: May 27 05:31:03 2026 GMT
            Not After : May 26 05:36:03 2027 GMT
        Subject: CN=ED7F24EBF1CB4B44E55A8366251219975C67C85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1d:eb:ed:0f:a1:e4:90:41:d3:49:a9:6c:c7:
                    4f:d8:28:7a:41:28:3e:be:41:a7:5a:7b:ed:98:b7:
                    d9:99:4c:0b:a2:12:23:8e:73:52:c5:8b:a5:f6:2e:
                    5f:88:61:97:ed:16:5b:83:87:a1:7a:29:9b:39:b4:
                    7c:66:33:2d:65:b1:48:45:4b:ff:e0:5c:a4:01:47:
                    ed:36:6c:44:ef:87:cc:af:fb:4a:07:6d:9e:39:5a:
                    08:46:ca:86:d9:70:77:9e:65:4e:be:61:dd:4a:5a:
                    89:ff:43:5e:ff:ea:1b:42:1e:88:9a:b4:25:88:dd:
                    41:09:72:02:6d:da:23:15:85:be:bb:3c:48:77:d3:
                    31:27:3d:7a:2e:21:cf:1c:ae:3a:f6:37:8b:fb:69:
                    39:07:d2:30:f5:70:11:30:ee:1b:b6:18:65:b1:f2:
                    b7:e8:75:b2:b3:6b:ea:9e:3e:7a:ce:b4:50:31:a9:
                    99:70:e1:c3:0c:38:23:6b:92:e8:8e:57:36:72:cd:
                    0c:79:07:7d:b5:e8:f8:ab:8e:80:8e:8e:17:95:9d:
                    da:85:19:f2:ff:b1:ec:f3:f1:b9:b3:5d:82:45:d0:
                    cc:c1:cc:50:9b:3e:73:44:31:bf:14:06:62:43:20:
                    7a:f8:5a:dd:33:ab:b8:81:8a:42:17:bd:f4:26:16:
                    14:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7F:24:EB:F1:CB:4B:44:E5:5A:83:66:25:12:19:97:5C:67:C8:5B
            X509v3 Authority Key Identifier:
                keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/3130312e3235312e3133362e302f32312d3231203d3e20313431373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.251.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:40:64:7d:87:a6:ba:69:cd:63:98:40:27:fb:8c:79:ce:ad:
         d9:af:69:de:42:62:c8:d2:4c:6a:20:da:e4:34:de:6f:02:c0:
         51:06:44:9b:0f:47:65:30:56:1e:11:68:f1:86:1e:fb:ea:29:
         33:b4:5d:1d:20:10:9c:df:a0:f1:ee:94:23:91:c1:59:da:df:
         d6:15:78:72:64:e7:cb:54:92:e3:09:a5:f8:ba:13:0d:df:5a:
         40:ea:e8:0e:9c:fc:04:7e:4d:36:77:77:b3:86:18:a4:ae:45:
         55:b8:e0:9a:88:f0:18:9e:75:dc:6d:2c:23:f5:d2:01:49:93:
         01:36:7a:7d:4b:dc:15:0c:50:3e:5e:06:b4:1b:0d:e7:86:fe:
         39:7d:15:9f:85:eb:09:1f:ed:33:43:0f:e4:64:86:a2:f3:f3:
         fa:a3:31:b6:6e:30:a9:bb:55:56:58:37:1a:d9:2e:14:dd:ae:
         3e:0d:2b:9f:b6:bf:4d:ce:48:c5:77:9b:0d:82:47:08:5b:c3:
         ba:ee:23:5b:d8:93:d3:30:c2:3c:6a:fe:4a:2d:03:16:33:b1:
         b1:06:a9:01:c8:58:4f:1c:18:b8:34:14:b8:91:ab:0e:6d:6f:
         95:a9:8b:f8:cc:03:4d:8c:8a:2a:26:da:c1:93:f3:16:2d:02:
         ce:e8:78:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:32 2026 by rpki-client