Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e37322e302f32312d3231203d3e203137363233.roa
File:                     3231312e3136322e37322e302f32312d3231203d3e203137363233.roa (raw, json)
Hash identifier:          lF+ob42OYYyJS/ovfWIi2vNx+HRJy4Z2TxpJjpnaAaE=
Subject key identifier:   90:57:FE:A5:84:AD:32:3E:EC:C0:9C:90:D4:77:2A:20:32:DC:1D:D4
Certificate issuer:       /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial:       7C0D33090EDD4D3C18D39DC93F3BD98D6DF6CD24
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e37322e302f32312d3231203d3e203137363233.roa
Signing time:             Fri 10 Apr 2026 03:00:38 +0000
ROA not before:           Fri 10 Apr 2026 02:55:38 +0000
ROA not after:            Fri 09 Apr 2027 03:00:38 +0000
asID:                     17623
IP address blocks:        211.162.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0d:33:09:0e:dd:4d:3c:18:d3:9d:c9:3f:3b:d9:8d:6d:f6:cd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
        Validity
            Not Before: Apr 10 02:55:38 2026 GMT
            Not After : Apr  9 03:00:38 2027 GMT
        Subject: CN=9057FEA584AD323EECC09C90D4772A2032DC1DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:ad:d4:4b:fb:df:e4:24:ed:76:01:1f:e7:
                    6f:36:ba:a2:20:62:f9:2e:80:14:1d:1d:38:99:c2:
                    53:c7:42:f9:27:6e:94:dc:4d:f6:bd:ac:fb:ad:74:
                    2b:25:05:98:7b:8d:ee:06:aa:d3:fe:47:48:3c:a9:
                    49:36:1f:57:eb:7b:48:2c:a6:a7:d6:17:5a:ce:d2:
                    0a:ba:65:cc:e8:8f:ab:65:4d:24:2d:f9:7e:15:30:
                    64:5a:01:d8:25:b5:50:6e:4c:ec:8f:b1:85:27:e8:
                    a2:dd:4d:61:b0:72:47:d2:80:94:73:f1:49:96:c5:
                    b2:00:ee:33:a0:60:bf:75:e2:d2:7e:75:77:88:f4:
                    13:1f:6c:46:3d:47:30:65:93:62:71:65:73:df:5c:
                    29:3e:e3:15:07:9c:65:9c:72:62:04:c7:2a:92:db:
                    ec:4c:41:6f:11:af:e0:35:6f:f2:fa:48:2c:98:02:
                    e6:92:c6:be:71:94:bc:d8:34:c9:8c:82:e3:94:34:
                    d7:19:fb:6d:e9:9f:59:a2:8d:60:6b:a2:01:20:4f:
                    a3:12:fa:3d:7a:66:b6:0c:e7:d4:2c:52:1b:68:2a:
                    f0:63:09:ef:ee:f6:dc:e1:13:9b:40:8a:88:d1:eb:
                    37:ed:1c:cb:23:df:b5:66:fe:86:85:4a:27:13:c3:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:57:FE:A5:84:AD:32:3E:EC:C0:9C:90:D4:77:2A:20:32:DC:1D:D4
            X509v3 Authority Key Identifier:
                keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3231312e3136322e37322e302f32312d3231203d3e203137363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.162.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:91:b2:ab:1d:e4:95:42:47:e7:ea:84:a9:f9:e6:b9:95:13:
         ea:c4:64:24:ac:21:3a:d3:b1:8a:66:38:f6:d2:7c:8c:75:01:
         df:4f:a7:8f:4d:70:09:79:d0:26:5d:43:83:56:18:50:b5:05:
         c2:70:ad:8f:60:0e:b9:a6:05:29:ee:50:4c:9d:0f:db:9b:2a:
         ef:2b:e6:64:a3:5b:45:4f:01:b5:fa:c2:32:51:f5:2b:33:e1:
         a9:9e:7c:49:ab:26:d2:b3:bf:cf:d5:63:77:40:6f:be:08:79:
         3f:b2:dd:61:c5:78:b8:66:a1:c5:70:f7:94:05:b7:d0:b7:5b:
         95:6b:7a:b8:27:ec:75:79:58:47:98:3c:a4:2c:05:0c:94:aa:
         9c:7f:38:af:24:37:39:b2:f2:cd:0b:5a:86:b1:f5:62:0a:f2:
         96:89:50:93:c8:98:b8:a7:1f:ec:55:63:78:65:fe:86:4a:45:
         c9:4c:a0:c0:c5:91:7e:08:b4:1c:14:29:57:27:dd:53:55:3c:
         bb:86:73:d7:66:14:2c:d8:52:34:17:c1:cb:95:40:00:bf:71:
         c1:25:8a:c7:18:38:c9:ca:e0:c6:d2:40:ed:45:93:b7:d9:65:
         e3:8b:59:8c:d9:c0:f0:93:d0:1c:b8:99:c9:45:bf:6b:c4:b5:
         57:af:21:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:27 2026 by rpki-client