Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135392e302f32342d3234203d3e203234313439.roa
File:                     3135302e3234322e3135392e302f32342d3234203d3e203234313439.roa (raw, json)
Hash identifier:          bNLxHCF56o5c9/9VWES3yadTSuspPp7UN72gjNrCZbc=
Subject key identifier:   E1:B5:5D:6E:49:37:02:6D:FC:B1:F0:35:73:5C:60:C9:3A:69:42:FD
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       68E6E5601F90E0790AAEDB340B8D60BD4A485158
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135392e302f32342d3234203d3e203234313439.roa
Signing time:             Fri 10 Apr 2026 08:05:15 +0000
ROA not before:           Fri 10 Apr 2026 08:00:15 +0000
ROA not after:            Fri 09 Apr 2027 08:05:15 +0000
asID:                     24149
IP address blocks:        150.242.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e6:e5:60:1f:90:e0:79:0a:ae:db:34:0b:8d:60:bd:4a:48:51:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:00:15 2026 GMT
            Not After : Apr  9 08:05:15 2027 GMT
        Subject: CN=E1B55D6E4937026DFCB1F035735C60C93A6942FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:93:a8:82:80:eb:20:44:6d:16:40:77:30:
                    ba:31:ec:23:68:3d:5e:3a:cf:a6:67:08:f1:2e:1b:
                    48:6f:3d:d6:c8:ab:38:ea:91:41:ae:ab:93:88:1a:
                    a5:b6:8d:27:a4:67:3f:2d:26:3e:f0:cc:2e:4a:ae:
                    2d:40:65:47:69:e0:a4:66:2b:2a:66:d5:5c:33:e4:
                    d5:78:bc:32:e6:e5:c0:ac:ec:3d:ab:f1:58:42:0e:
                    be:93:97:94:3a:98:3a:a1:cc:09:e4:8c:99:25:0d:
                    eb:ea:14:2b:f1:78:5a:f4:2a:d0:4c:16:7e:06:66:
                    50:a3:92:9d:bd:0e:5f:e8:ea:53:fd:2e:a9:d0:ef:
                    e5:e1:48:5c:4a:2e:04:d4:e3:1b:66:55:34:6f:c5:
                    da:88:df:5d:90:1e:70:64:d2:aa:dd:a1:bb:81:5d:
                    d3:ef:9d:33:f6:95:d9:96:38:66:cd:5e:a3:e2:a3:
                    81:a3:77:90:54:8f:74:e0:1b:07:c8:e2:ae:97:c3:
                    2a:3e:7b:41:ff:d6:3a:a6:ed:26:85:21:79:d5:d8:
                    3e:a9:82:b5:7e:84:05:51:2e:86:1b:cb:9c:a9:c0:
                    2d:39:04:6d:63:4b:98:3d:7a:13:b9:1e:7c:6b:4d:
                    ad:57:71:14:16:11:5f:99:ff:95:be:ab:ba:b3:89:
                    4a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B5:5D:6E:49:37:02:6D:FC:B1:F0:35:73:5C:60:C9:3A:69:42:FD
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135392e302f32342d3234203d3e203234313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ab:7f:af:d5:ad:19:59:f5:d2:a7:ee:a1:a2:a7:df:9c:ff:
         9b:a3:5e:68:d1:c1:1d:5e:c8:5e:8e:dd:b8:d0:db:3a:b5:5e:
         87:21:44:d7:07:a9:1c:23:9f:77:38:9f:48:0f:c7:93:30:8a:
         e9:d0:6c:d3:19:c1:fe:50:79:bc:5d:c7:ce:7a:8a:be:04:a0:
         64:7f:6e:00:ac:f5:bc:d5:d5:60:a8:98:55:19:4f:c6:96:5b:
         3c:cf:b4:86:29:a1:b0:e0:f2:31:a7:00:1c:1c:f7:2f:49:19:
         d2:9d:48:8d:08:c5:79:3a:48:36:e4:a9:05:7c:03:1b:e3:10:
         e6:b6:bb:71:83:a8:3d:a8:1c:91:0f:3b:27:6f:b7:da:66:03:
         f6:5b:2e:0c:30:14:96:ea:49:93:be:95:6a:0e:14:b8:21:73:
         10:3b:c7:f1:b3:bd:1d:46:f4:a9:64:dc:18:b3:8f:31:f9:bf:
         fd:8d:f2:e7:90:a4:5f:48:2b:c6:9d:ff:63:73:a6:95:18:47:
         ac:09:30:ad:d7:12:1c:7f:e7:5d:14:d7:90:86:d5:1c:05:c4:
         92:b2:a0:33:6b:03:89:18:ef:80:d6:60:9c:19:d9:3c:b8:86:
         99:fa:b8:c2:d0:fc:96:5d:90:d9:55:62:bf:80:a3:d5:ec:0e:
         93:7e:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:32 2026 by rpki-client