Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135352e302f32342d3234203d3e203234313431.roa
File:                     3231302e352e3135352e302f32342d3234203d3e203234313431.roa (raw, json)
Hash identifier:          EDj85phitcw/7ACdED68fBNI2c3Opa9N3Uul8gyI3UI=
Subject key identifier:   C2:35:D8:09:95:1E:7C:1B:28:BA:D5:50:71:5E:5B:86:31:41:56:AF
Certificate issuer:       /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial:       38B1D1229BB9F8FCCC67B25151DCBE7B079E8C68
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135352e302f32342d3234203d3e203234313431.roa
Signing time:             Mon 13 Apr 2026 02:52:24 +0000
ROA not before:           Mon 13 Apr 2026 02:47:24 +0000
ROA not after:            Mon 12 Apr 2027 02:52:24 +0000
asID:                     24141
IP address blocks:        210.5.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b1:d1:22:9b:b9:f8:fc:cc:67:b2:51:51:dc:be:7b:07:9e:8c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
        Validity
            Not Before: Apr 13 02:47:24 2026 GMT
            Not After : Apr 12 02:52:24 2027 GMT
        Subject: CN=C235D809951E7C1B28BAD550715E5B86314156AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:31:59:14:5b:39:d6:5d:50:2b:e6:d2:24:
                    94:68:c0:fe:27:8e:5a:c7:75:33:43:92:53:6b:8f:
                    a8:da:36:ac:6d:04:ac:86:f1:e0:1b:58:32:51:36:
                    4b:43:b0:00:65:c8:2e:dd:8e:6a:59:47:87:93:11:
                    87:f9:ef:70:b8:2f:7d:3a:43:72:17:4b:14:c3:81:
                    ba:84:f1:f9:ae:86:2f:36:89:d4:09:0d:55:75:26:
                    51:64:8f:7d:bb:59:30:6f:89:08:53:d8:68:02:f4:
                    e4:e9:52:08:e8:12:e5:ca:f3:3a:15:d5:05:d2:b5:
                    0c:bc:1c:2b:cd:e7:7d:e1:5c:35:30:31:e2:e9:2e:
                    77:b8:58:b4:62:9a:5f:d2:c5:77:a0:fb:db:1f:d9:
                    b7:fe:13:77:86:b8:fd:72:89:b1:95:9d:a7:03:54:
                    7d:e7:79:42:6c:15:04:72:9c:c4:1c:47:25:4f:49:
                    23:27:eb:35:12:61:25:94:07:50:56:05:28:b0:3c:
                    21:92:d4:a8:68:4d:d6:14:2f:e5:f2:06:f9:99:47:
                    76:22:6e:ed:90:b9:34:98:f8:26:79:21:a3:a7:f6:
                    7e:58:96:e9:e2:31:b4:3c:ab:26:3f:bd:2f:78:d4:
                    05:46:e2:6a:3e:b6:2d:a2:96:b5:ba:1c:b3:85:56:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:35:D8:09:95:1E:7C:1B:28:BA:D5:50:71:5E:5B:86:31:41:56:AF
            X509v3 Authority Key Identifier:
                keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135352e302f32342d3234203d3e203234313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.5.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:14:c9:c6:9e:a4:dd:d9:f7:09:d4:60:a4:d5:bd:58:0f:8a:
         d1:fe:9e:b0:89:68:6b:21:9f:ce:15:31:22:9a:fa:a5:c9:bf:
         62:49:63:23:8e:17:1a:41:1d:09:60:df:1b:f3:70:9f:b4:e0:
         11:7e:a1:7c:91:1b:42:76:6b:fa:44:3c:e9:05:b4:bf:d8:34:
         0b:fe:c0:42:82:6e:b2:a3:15:b8:b1:49:cf:8b:11:4a:30:90:
         d9:7a:cf:54:89:d5:db:bc:3b:1b:16:45:52:a8:a7:b1:44:a0:
         dc:f8:0a:24:c6:7f:3c:b3:4f:cd:87:6d:8b:a9:bc:ca:62:23:
         0d:ae:04:74:59:f6:9f:77:07:9b:8c:6c:74:c2:77:18:29:7b:
         91:73:91:cb:b3:fb:80:41:60:6a:af:f4:2b:bd:54:03:ce:ea:
         86:e2:dd:90:a8:2f:97:bb:9a:20:1b:7e:d7:c0:58:13:35:00:
         05:dd:3b:ed:3f:e7:83:99:29:29:43:0c:80:39:9b:e8:56:d3:
         ce:06:2f:63:ac:5d:db:7b:b6:d3:91:e0:91:aa:cc:f0:4a:69:
         59:b9:1a:43:6b:28:ae:1b:7e:9e:bb:05:3a:48:8c:fa:8f:0b:
         94:f4:36:67:d2:7b:5e:bb:fa:1a:76:1f:07:70:e6:81:32:aa:
         b7:5e:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:24 2026 by rpki-client