Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e37352e3230382e302f32322d3232203d3e2034383337.roa
File:                     3230322e37352e3230382e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          5SbTQ7N2K2ugCxDvUZndo/X8nBSovYBq782ujruWMtI=
Subject key identifier:   CE:F6:B0:6F:7B:12:90:6D:FF:9A:DD:FD:92:63:8C:B8:39:07:56:92
Certificate issuer:       /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial:       15B5682176CB3C42E14FF4BCBDFE92F59C4659DF
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e37352e3230382e302f32322d3232203d3e2034383337.roa
Signing time:             Thu 28 May 2026 01:08:24 +0000
ROA not before:           Thu 28 May 2026 01:03:24 +0000
ROA not after:            Thu 27 May 2027 01:08:24 +0000
asID:                     4837
IP address blocks:        202.75.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b5:68:21:76:cb:3c:42:e1:4f:f4:bc:bd:fe:92:f5:9c:46:59:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
        Validity
            Not Before: May 28 01:03:24 2026 GMT
            Not After : May 27 01:08:24 2027 GMT
        Subject: CN=CEF6B06F7B12906DFF9ADDFD92638CB839075692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:c8:a0:fe:b2:8a:5c:37:9f:17:66:28:88:
                    a8:2f:d3:2b:93:58:72:31:d5:11:4e:93:34:76:00:
                    20:71:af:5c:22:2f:34:69:ef:32:dc:32:fe:c6:21:
                    5f:84:0a:dd:72:57:67:ce:ef:d5:23:48:25:a5:49:
                    f7:b9:3d:85:10:82:25:8b:de:91:17:79:24:6d:29:
                    87:20:ff:76:5f:fd:80:73:08:e8:eb:ea:88:75:18:
                    6b:c7:4d:3c:8d:7c:f4:d2:24:f6:46:eb:16:3e:44:
                    ba:be:37:bf:bb:61:c1:fb:5b:2b:8f:a2:24:12:8f:
                    e9:6f:b5:d5:6c:f6:27:be:7d:4c:b7:cd:29:9f:8d:
                    b5:38:98:94:10:47:ae:ee:97:f5:ed:0a:d1:48:88:
                    9c:e1:15:55:3b:48:a1:48:24:c3:e4:0c:7c:16:6f:
                    c4:a0:3b:a1:21:7c:c4:44:11:87:3b:8b:dd:21:0d:
                    73:b5:50:03:6a:2d:a6:54:09:79:43:70:36:11:61:
                    73:cf:26:5b:e7:81:29:0b:b8:01:ef:0b:0b:62:2e:
                    c2:08:23:ce:15:56:43:a7:31:57:67:9f:5b:f1:36:
                    ac:0e:6c:ce:8f:7c:be:7e:78:c3:fd:da:19:cb:c5:
                    95:7d:66:58:cf:88:26:71:6d:3c:f3:1c:e9:74:e1:
                    44:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:B0:6F:7B:12:90:6D:FF:9A:DD:FD:92:63:8C:B8:39:07:56:92
            X509v3 Authority Key Identifier:
                keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e37352e3230382e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:8e:78:42:36:91:b5:7f:3d:8b:89:80:a7:fc:ba:4b:d3:c2:
         f3:49:36:09:90:5f:17:21:cf:10:b6:6f:4e:c5:47:61:c0:e9:
         e0:41:42:cd:b2:d9:4f:4e:28:e2:7c:b3:84:e6:1f:db:f7:26:
         8e:ce:60:8d:b7:1b:ee:a1:b7:92:c0:61:24:90:fa:12:38:e5:
         d5:2b:c5:08:97:5c:c9:e0:ed:28:3a:94:7a:41:33:b8:52:2c:
         29:a0:50:1c:2b:41:ef:5f:8a:49:cb:fd:5a:a2:38:f8:31:25:
         17:cd:99:82:00:e6:15:87:7d:2a:6e:a0:ea:e2:dc:5b:9e:1c:
         13:3c:0c:92:f8:98:95:0e:2d:d8:c0:df:96:ab:18:ef:34:66:
         69:b0:12:61:b6:ff:8e:ac:b7:46:ac:7f:b0:e9:51:f6:ca:d6:
         ea:24:97:0f:8c:0e:d5:a6:76:53:a0:ba:5c:12:d1:ab:52:a2:
         8b:6c:65:3a:de:3b:75:c1:2a:82:27:62:b3:f8:37:69:e8:65:
         36:d2:c9:0d:d0:84:e3:fd:fe:3d:28:6f:67:59:b5:f5:00:e9:
         d9:2e:ad:84:33:3b:5d:79:94:cc:ae:1c:2a:10:12:7c:d5:55:
         c1:8b:f0:f9:18:4b:fe:06:ae:81:18:90:74:29:d9:f8:89:2e:
         f1:58:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:14 2026 by rpki-client