Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3130302e302f32332d3233203d3e203233373234.roa
File:                     3231312e3135302e3130302e302f32332d3233203d3e203233373234.roa (raw, json)
Hash identifier:          03QuETdXbGvEvqzMXchBhFMKUmxEFeQ/gtsLajwrX1s=
Subject key identifier:   CE:42:2A:90:73:D7:FE:ED:80:30:3A:DD:C3:AC:46:BF:F7:1B:08:75
Certificate issuer:       /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial:       5754B7F73CE70DD3A4CE59ABD5839C07F85FF22F
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3130302e302f32332d3233203d3e203233373234.roa
Signing time:             Mon 13 Apr 2026 06:11:42 +0000
ROA not before:           Mon 13 Apr 2026 06:06:42 +0000
ROA not after:            Mon 12 Apr 2027 06:11:42 +0000
asID:                     23724
IP address blocks:        211.150.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:54:b7:f7:3c:e7:0d:d3:a4:ce:59:ab:d5:83:9c:07:f8:5f:f2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
        Validity
            Not Before: Apr 13 06:06:42 2026 GMT
            Not After : Apr 12 06:11:42 2027 GMT
        Subject: CN=CE422A9073D7FEED80303ADDC3AC46BFF71B0875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:22:27:61:93:08:22:c5:25:7e:b7:19:16:
                    86:3b:f4:9f:d5:bf:5b:73:35:4d:c0:75:4d:d3:e4:
                    de:65:4a:da:1c:1e:bb:20:fd:c8:cf:c3:f6:58:42:
                    28:fe:b0:9f:4c:33:41:eb:6d:b7:76:ff:4e:62:dd:
                    32:3f:43:e5:93:a3:f0:e9:8f:26:11:e2:4a:4e:75:
                    dc:17:b0:1f:c2:de:88:11:22:03:a1:c2:b1:3a:22:
                    a3:54:f9:e5:83:3f:91:99:38:45:e2:59:e4:29:25:
                    6e:fd:5d:92:1f:65:17:48:da:27:fe:bd:f5:67:2f:
                    11:9e:9d:42:b5:82:36:dc:46:30:04:a8:8e:1f:4c:
                    4b:22:64:9b:56:78:d8:cd:02:1c:39:eb:4c:22:c1:
                    6b:a4:c8:90:d1:70:eb:57:07:5b:28:f5:4d:30:1f:
                    2f:1b:7c:7c:9e:e4:2b:fd:ef:f6:ec:35:69:38:df:
                    70:27:ce:3a:bb:2e:0c:2c:db:08:ff:ea:0e:48:2a:
                    36:67:cc:dd:82:a2:05:26:d5:3b:0b:85:11:4b:d2:
                    c9:02:7b:73:07:73:c5:13:e2:5a:e1:52:0f:72:8c:
                    e7:86:e5:76:8a:d7:91:eb:6b:2e:70:87:a6:2c:dd:
                    de:03:68:54:d6:d0:de:96:11:f7:a2:09:35:87:69:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:42:2A:90:73:D7:FE:ED:80:30:3A:DD:C3:AC:46:BF:F7:1B:08:75
            X509v3 Authority Key Identifier:
                keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3130302e302f32332d3233203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.150.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:1e:34:90:9c:4b:d2:5b:7b:ba:c3:b9:4b:46:55:64:7e:6a:
         b9:00:e6:04:97:3f:a2:c2:18:1a:3d:63:f4:d9:1e:22:48:f6:
         cd:30:47:4e:9d:bd:28:e2:cb:8c:79:13:e8:8c:76:db:b8:1d:
         8f:e7:f7:7c:10:73:dd:85:ad:7e:45:46:7a:94:ac:a0:43:5d:
         08:fb:d7:01:52:d4:bf:df:cb:47:17:98:9d:ce:61:8d:e0:d2:
         df:52:e0:e4:d5:db:ea:90:61:38:2c:e6:fc:03:42:b9:5a:0d:
         53:be:2b:ba:e2:d4:f4:c9:27:8d:4d:ad:90:4c:8a:a5:1f:1f:
         3b:11:25:55:21:92:71:59:87:49:76:42:8f:31:c5:f1:0c:cd:
         d6:3f:25:ae:96:f9:01:10:77:11:99:86:72:7e:36:23:a6:b7:
         e9:87:42:57:df:1d:76:16:be:26:75:8d:10:d3:8c:93:3e:20:
         11:1b:31:6a:0b:cf:1d:00:28:52:a7:d4:56:ee:ad:7d:6d:3c:
         56:27:b6:1a:47:60:cb:80:07:ab:f0:9d:64:da:ee:da:8e:4c:
         29:2c:6b:bc:a7:5f:75:78:09:86:42:07:6f:d6:78:f0:a5:7b:
         4f:8e:30:4b:22:02:a3:eb:c1:d0:3f:b6:60:58:83:5f:d8:00:
         cc:ad:95:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:09 2026 by rpki-client