Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e37352e3232302e302f32322d3232203d3e2034313334.roa
File:                     3230322e37352e3232302e302f32322d3232203d3e2034313334.roa (raw, json)
Hash identifier:          p0NZI0GINU6BeTB+UXx+csuFUdajJF3eGRHj1Z702oc=
Subject key identifier:   62:E6:2B:8A:69:4E:00:53:38:47:9F:6F:19:CD:7F:26:34:A7:5A:B7
Certificate issuer:       /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial:       38F6A5A9AE01167A242C9C761E2EABF1297BAE9E
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e37352e3232302e302f32322d3232203d3e2034313334.roa
Signing time:             Thu 28 May 2026 05:15:38 +0000
ROA not before:           Thu 28 May 2026 05:10:38 +0000
ROA not after:            Thu 27 May 2027 05:15:38 +0000
asID:                     4134
IP address blocks:        202.75.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f6:a5:a9:ae:01:16:7a:24:2c:9c:76:1e:2e:ab:f1:29:7b:ae:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
        Validity
            Not Before: May 28 05:10:38 2026 GMT
            Not After : May 27 05:15:38 2027 GMT
        Subject: CN=62E62B8A694E005338479F6F19CD7F2634A75AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:28:6a:63:31:4c:01:4d:90:e8:c9:47:27:91:
                    8d:d7:53:04:93:df:9c:b8:83:4d:bc:52:0c:0c:47:
                    0b:d6:06:73:15:1d:37:a2:c6:ae:ba:09:fc:c8:39:
                    03:51:e0:b0:b7:4c:ab:f4:de:c0:44:15:35:67:62:
                    4e:2f:d9:fa:78:76:8e:19:52:8c:ff:d8:c8:98:92:
                    6e:a2:d9:e0:72:1a:23:2b:e9:fa:e3:9b:4b:e2:ba:
                    03:1b:a1:a0:4e:d8:76:4e:df:9d:c3:36:33:a2:90:
                    20:81:46:8a:47:9e:23:12:6f:47:48:c8:10:c5:39:
                    ec:ce:a6:7d:0c:4a:56:93:8e:5e:55:3d:00:e3:bd:
                    59:80:ba:b4:d8:e6:16:e1:bf:ef:d4:ab:5c:f5:ac:
                    bf:0a:6c:02:f7:28:58:46:73:f3:8d:c8:2e:b6:e0:
                    db:ca:e2:fd:bd:92:c5:be:83:a5:a2:5b:28:c6:a8:
                    cc:7f:d2:10:c5:3a:9a:cc:a6:79:9f:98:99:9a:4c:
                    c6:8d:a2:5f:5b:33:4b:dc:5e:75:56:ec:1c:76:34:
                    17:ec:38:c1:29:fd:da:c6:1a:23:20:42:c2:40:22:
                    4e:e9:02:a9:19:c4:b2:5b:e7:b4:ab:0d:48:de:e9:
                    28:34:2a:38:04:21:bd:d7:04:67:9b:37:3a:3f:3b:
                    2f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E6:2B:8A:69:4E:00:53:38:47:9F:6F:19:CD:7F:26:34:A7:5A:B7
            X509v3 Authority Key Identifier:
                keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e37352e3232302e302f32322d3232203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:ca:00:2c:d8:35:b9:e8:c7:de:c4:cf:59:e2:63:73:d0:09:
         15:c1:9d:eb:99:15:21:d0:47:5a:f6:ec:5a:4f:45:3e:e8:db:
         ff:b6:db:9c:b1:4b:e0:d6:41:e9:61:6c:5c:d0:c5:57:4b:7e:
         c9:10:fe:4b:63:a1:e8:71:5d:9f:32:5d:54:c1:14:da:45:86:
         65:69:09:4e:21:fa:0d:b3:55:d6:73:df:6a:d2:03:66:86:6b:
         6d:ac:00:0e:b1:f3:8f:e3:6b:32:49:37:df:14:0d:23:47:40:
         61:c3:2b:05:dc:19:65:bc:4a:99:10:0e:4f:c4:64:92:8a:00:
         e1:b1:d4:8c:63:1f:6c:14:b6:da:4d:d6:e9:21:c1:5f:64:84:
         a9:5b:73:c1:bb:bf:45:f8:ba:64:64:6b:c8:3f:7a:98:14:94:
         d3:16:89:b0:ca:30:61:db:58:ec:eb:cb:12:31:2f:a9:d8:87:
         1c:e7:fd:c7:0f:95:68:7f:85:d0:b6:9d:c1:b9:7e:a9:55:59:
         55:6a:c3:3a:8e:1e:5e:ea:33:28:1e:fb:5f:8f:0b:75:e1:01:
         18:54:6f:d1:7d:5a:35:e2:88:03:5f:a7:87:08:3d:b8:6c:ac:
         07:4f:86:d2:b3:1c:05:9c:9f:c6:8d:b2:2c:c6:24:fa:87:40:
         54:42:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:18 2026 by rpki-client