Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233322e302f32322d3232203d3e2034383337.roa
File:                     3231312e3135352e3233322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          qbIlGZuLW4EfB4pWvgRtnCiCxbiOFoJlF2Xs1LMwnwA=
Subject key identifier:   9C:E4:52:71:68:6E:CB:65:B2:0A:2D:44:F9:D2:21:E3:6D:CA:51:1C
Certificate issuer:       /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial:       2B7A89B18A0E904FB657BD0454BFE8F7E16910E4
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233322e302f32322d3232203d3e2034383337.roa
Signing time:             Wed 27 May 2026 09:10:00 +0000
ROA not before:           Wed 27 May 2026 09:05:00 +0000
ROA not after:            Wed 26 May 2027 09:10:00 +0000
asID:                     4837
IP address blocks:        211.155.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7a:89:b1:8a:0e:90:4f:b6:57:bd:04:54:bf:e8:f7:e1:69:10:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
        Validity
            Not Before: May 27 09:05:00 2026 GMT
            Not After : May 26 09:10:00 2027 GMT
        Subject: CN=9CE45271686ECB65B20A2D44F9D221E36DCA511C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:78:75:40:ea:31:90:22:0c:90:ba:56:52:
                    c9:63:52:2a:67:ca:b1:eb:0f:50:44:0e:27:11:5f:
                    10:5a:a4:97:09:82:13:f4:16:06:df:e4:5c:a5:d5:
                    6c:c4:17:9c:af:ac:34:8b:3f:df:c0:85:4e:d4:4b:
                    b3:c5:45:e2:a5:c6:d8:cd:bd:c8:b6:bb:d2:9e:db:
                    27:34:33:04:c4:5d:b1:b1:42:b1:9d:f1:4d:e3:cb:
                    33:74:d6:d5:fa:e5:2e:5d:cb:c6:b5:86:6b:fb:30:
                    54:51:57:dd:d6:c3:5f:c2:a0:d9:32:ec:37:b0:91:
                    50:80:9b:f9:fc:35:67:44:de:80:8e:e6:5c:ce:df:
                    ea:17:a0:dc:eb:5d:7a:4c:c8:b3:e9:53:67:ee:83:
                    e2:53:a4:91:bb:14:95:07:2c:d9:1a:19:8b:d9:0f:
                    10:97:42:1d:12:ed:52:b2:01:0e:e9:dd:ba:48:db:
                    66:90:76:83:4c:4c:15:e9:61:c4:15:40:e2:af:a0:
                    5c:ff:cf:38:d4:23:21:1a:ee:70:8b:7c:2f:45:08:
                    57:c9:04:71:a9:45:4e:d9:1c:d0:1b:c1:3a:e6:87:
                    28:f8:79:73:a8:30:bb:aa:02:c5:a4:aa:78:29:69:
                    2d:45:91:17:d7:9f:4d:82:73:ae:d6:70:d6:a4:44:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:52:71:68:6E:CB:65:B2:0A:2D:44:F9:D2:21:E3:6D:CA:51:1C
            X509v3 Authority Key Identifier:
                keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233322e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:17:b3:4a:e7:de:4f:40:98:cb:e7:c9:ac:d2:8c:08:26:2f:
         fc:d7:e9:89:32:3f:86:c5:d4:bf:6e:82:5f:bb:a4:ab:99:62:
         ce:18:70:ff:1d:d4:6d:4f:fa:d8:7f:5a:03:99:18:26:00:a2:
         ee:ee:43:3e:4b:1d:0c:4f:41:46:18:2a:f3:c4:48:f9:4b:40:
         ca:6d:d3:97:be:5e:87:94:9e:14:45:df:0c:6f:e2:45:5a:24:
         2d:98:55:fa:35:b8:36:79:65:8b:59:f0:60:2e:9e:44:3a:16:
         7c:6f:2c:d5:e0:2b:1d:bb:15:f1:16:db:61:45:2e:d9:1a:84:
         c2:2f:9e:0b:f7:db:fe:37:67:29:f2:c9:cd:7f:9e:6f:7a:af:
         72:69:2a:fb:c3:a8:33:d5:8d:a2:b3:b1:62:eb:b2:37:50:91:
         63:d9:27:63:2a:cc:fe:e6:7c:2c:59:0d:32:fe:d6:4e:21:75:
         78:25:ff:b8:24:40:75:1c:b7:46:e7:d9:85:57:2d:e2:cf:c6:
         04:5a:04:b8:89:e3:12:0b:a9:b6:9c:b8:e3:2e:fb:a9:fe:17:
         f0:48:fa:73:a5:e5:d7:35:4c:63:06:ab:5b:cb:61:20:30:24:
         13:03:5b:b9:39:43:14:13:71:d8:8f:86:48:04:58:58:32:05:
         e2:a5:de:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:09 2026 by rpki-client