Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa
File:                     3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (raw, json)
Hash identifier:          iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=
Subject key identifier:   B4:F4:03:EE:E9:E8:EB:41:0D:F2:F7:08:CC:53:AF:E1:A0:28:0F:93
Certificate issuer:       /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial:       40F8C1165ABE3B9B76AF4C045EBB2A0B02C910F5
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa
Signing time:             Thu 09 Apr 2026 05:09:21 +0000
ROA not before:           Thu 09 Apr 2026 05:04:21 +0000
ROA not after:            Thu 08 Apr 2027 05:09:21 +0000
asID:                     58519
IP address blocks:        211.101.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 22:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f8:c1:16:5a:be:3b:9b:76:af:4c:04:5e:bb:2a:0b:02:c9:10:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
        Validity
            Not Before: Apr  9 05:04:21 2026 GMT
            Not After : Apr  8 05:09:21 2027 GMT
        Subject: CN=B4F403EEE9E8EB410DF2F708CC53AFE1A0280F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:99:91:eb:54:7d:e7:83:61:3a:82:9f:67:
                    97:40:3d:6e:79:b8:55:34:5f:de:fc:8f:67:3e:fb:
                    95:de:98:53:98:fb:ef:f9:ab:a2:2d:04:08:1c:db:
                    f0:7a:22:15:db:24:0e:a1:e1:b5:0c:cf:82:c2:7b:
                    cb:94:6f:c8:75:c6:80:fb:ba:c9:2a:f0:4e:7c:a1:
                    de:b1:e4:1e:67:ff:1a:d0:49:b2:41:a9:42:23:04:
                    f9:98:59:92:90:b2:ba:b0:a5:ee:cb:ca:d8:db:a3:
                    2b:73:9e:ce:53:41:a0:12:53:2a:c7:42:03:9e:8c:
                    69:e5:48:82:43:a5:fd:8f:e4:bb:4b:6e:86:06:9b:
                    75:a1:ba:37:42:61:8b:b7:50:5a:b1:70:7b:b4:95:
                    8b:9e:dc:91:b5:b4:b7:31:6c:ec:05:21:47:87:9f:
                    53:2e:3b:4b:83:e7:72:51:92:1b:33:87:b2:c1:5c:
                    00:e5:ee:67:99:0b:a8:40:fe:78:ca:d5:2e:4d:67:
                    b1:09:bc:ff:0e:b5:1f:e8:30:6a:03:72:72:b0:b3:
                    fc:7c:3c:e8:ec:5e:79:b3:93:8b:76:f2:63:3c:7b:
                    ea:80:15:95:96:92:38:3d:a2:ca:8d:fa:03:47:eb:
                    75:6a:e4:97:db:22:e6:da:c6:70:51:7c:2e:96:25:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F4:03:EE:E9:E8:EB:41:0D:F2:F7:08:CC:53:AF:E1:A0:28:0F:93
            X509v3 Authority Key Identifier:
                keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.101.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:85:3a:f5:27:13:71:f0:80:47:36:ef:de:f8:9c:c6:41:88:
         1a:a8:40:ce:3b:d1:aa:7f:6d:cf:9d:48:90:cb:42:5f:89:75:
         db:df:c8:4c:9c:0b:79:85:67:eb:4b:67:05:8e:30:83:24:8a:
         5f:30:43:28:d5:bf:d4:e8:01:51:97:3a:91:24:b0:40:1e:2c:
         47:0a:5b:25:4e:14:2e:e1:3e:fc:9c:2b:13:2e:3d:d2:a0:f2:
         3a:9d:37:6a:a0:eb:76:8d:a9:a1:fa:5a:8e:33:19:8f:3d:d1:
         39:62:5a:7b:1c:de:bd:90:e9:80:3f:0b:c7:cb:c9:bd:f9:ae:
         34:42:9b:58:2a:cc:3c:a4:39:10:d6:1d:9d:3a:a9:cb:ab:02:
         ee:9c:a5:05:6c:62:54:0a:b1:4e:59:c9:51:97:22:a1:ee:0f:
         a1:d7:61:37:7a:ff:2b:99:c1:96:ae:a2:64:35:33:4f:d5:83:
         cf:5c:72:20:3b:80:25:e1:87:ad:2c:87:3a:a7:66:38:4a:5f:
         0a:3b:aa:56:bc:3a:a5:6c:52:5a:88:b4:1d:e7:76:b9:91:3c:
         71:4e:82:2f:e4:88:3f:5e:a9:6d:5f:6d:ba:64:47:b2:cf:ff:
         33:c6:c9:b5:51:92:06:61:17:83:b2:89:0c:6f:e2:fe:20:2c:
         e6:44:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:36 2026 by rpki-client