Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e36342e302f32312d3231203d3e203137363233.roa
File:                     3231312e3136322e36342e302f32312d3231203d3e203137363233.roa (raw, json)
Hash identifier:          4/yU1wRp07WnqHU/HvSGJscMwQJG7NSdiYPVLBOdgg8=
Subject key identifier:   16:9E:DD:96:2C:5C:28:4D:C2:DF:ED:76:E3:01:0A:4A:C6:07:F0:3F
Certificate issuer:       /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial:       36B17D25D6001FC96C377E6B42EB407BB3A0DB48
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e36342e302f32312d3231203d3e203137363233.roa
Signing time:             Fri 10 Apr 2026 03:01:33 +0000
ROA not before:           Fri 10 Apr 2026 02:56:33 +0000
ROA not after:            Fri 09 Apr 2027 03:01:33 +0000
asID:                     17623
IP address blocks:        211.162.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b1:7d:25:d6:00:1f:c9:6c:37:7e:6b:42:eb:40:7b:b3:a0:db:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
        Validity
            Not Before: Apr 10 02:56:33 2026 GMT
            Not After : Apr  9 03:01:33 2027 GMT
        Subject: CN=169EDD962C5C284DC2DFED76E3010A4AC607F03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:dd:61:96:57:ea:4c:bb:e6:f2:8b:55:63:
                    07:99:c2:0a:e5:b9:8e:b4:3f:99:88:88:eb:0b:29:
                    f0:9f:8e:d8:63:52:87:f4:58:63:00:9e:f6:f2:42:
                    29:db:45:af:d8:bf:ca:1d:c9:a5:9f:bc:cc:03:3e:
                    d3:12:e1:dd:86:61:2c:bf:aa:23:7b:68:7f:1f:f1:
                    06:8d:a9:5c:72:9d:64:d3:ae:e1:52:8d:cb:72:f8:
                    fe:e0:c2:19:0d:6f:16:55:08:af:8b:f6:17:db:71:
                    35:8b:0c:fe:c3:25:c2:6a:4d:65:e1:7e:c1:dc:46:
                    f2:c7:e3:2a:d2:d2:a6:42:88:a0:af:2d:4b:84:84:
                    df:02:da:ea:84:e6:5f:5f:12:b8:e4:35:c0:61:a6:
                    14:2e:26:72:84:76:97:cf:2c:83:8c:f4:73:d8:65:
                    fe:19:62:ff:d5:17:17:c4:e4:72:f6:ef:9e:d2:f9:
                    ce:9c:7b:ac:17:79:a2:c7:d2:2b:14:8d:58:00:ae:
                    27:c6:27:32:48:b5:6f:d1:bf:3c:8e:06:aa:77:1e:
                    f8:73:c5:e3:aa:68:47:f5:55:67:0c:75:e3:1d:eb:
                    f1:bf:02:d6:e4:ef:79:93:6d:51:1c:e5:87:e3:8f:
                    a9:76:d3:4c:3c:25:e2:1f:44:08:b3:ed:90:ed:e3:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9E:DD:96:2C:5C:28:4D:C2:DF:ED:76:E3:01:0A:4A:C6:07:F0:3F
            X509v3 Authority Key Identifier:
                keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e36342e302f32312d3231203d3e203137363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.162.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         62:23:62:a9:7f:77:64:52:67:f0:74:d1:4e:b6:0f:ba:36:b1:
         a8:8b:07:23:ec:11:9a:21:40:f3:d7:f4:e1:cb:8a:62:89:0b:
         e8:6c:2d:1b:d6:25:1f:33:03:34:a4:ca:50:e9:df:0b:af:d3:
         18:ce:99:5f:9c:88:68:cb:82:84:f8:02:c8:34:a1:32:73:da:
         ca:69:0d:1f:26:f6:be:62:eb:6c:30:0c:01:f7:93:db:d5:0d:
         73:1c:af:dc:0a:8b:b2:65:c5:0c:ce:26:16:65:85:09:93:12:
         d1:b3:9a:f8:29:61:ff:18:f5:00:61:4a:16:02:cb:95:75:0f:
         82:de:5c:bb:29:36:79:f4:74:d3:9b:94:2b:b1:61:67:6e:c4:
         be:c1:a8:9c:01:ca:b6:90:41:42:1c:39:30:d5:d2:7b:c7:c1:
         51:98:a9:76:c1:5e:ad:d1:1a:0f:50:17:7e:16:62:ed:fb:8a:
         0a:bf:0c:c6:35:24:04:eb:bc:8f:18:23:75:99:1f:c0:e5:99:
         b0:54:b0:e9:3c:57:5b:e3:93:29:b2:c8:3e:ee:40:98:b5:28:
         df:13:91:b9:6e:eb:44:cf:b1:c1:02:37:f6:43:06:51:74:e3:
         20:64:6a:e5:26:23:11:03:0e:f1:2c:8c:67:b1:8a:01:df:a7:
         df:bb:0e:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:28 2026 by rpki-client