Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233362e302f32342d3234203d3e203536303431.roa
File:                     3231312e3135352e3233362e302f32342d3234203d3e203536303431.roa (raw, json)
Hash identifier:          cYxkEhvTjTBflxplIZ++9fBOpk0/LaPF0Nyaq6qy26E=
Subject key identifier:   B8:41:16:10:63:45:5A:F4:A4:D1:B0:C3:E5:67:1F:0C:D6:42:CA:84
Certificate issuer:       /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial:       18130C54A1BB8E8B25A768AD90BE3BCBF8BEF76F
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233362e302f32342d3234203d3e203536303431.roa
Signing time:             Wed 27 May 2026 08:25:02 +0000
ROA not before:           Wed 27 May 2026 08:20:02 +0000
ROA not after:            Wed 26 May 2027 08:25:02 +0000
asID:                     56041
IP address blocks:        211.155.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:13:0c:54:a1:bb:8e:8b:25:a7:68:ad:90:be:3b:cb:f8:be:f7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
        Validity
            Not Before: May 27 08:20:02 2026 GMT
            Not After : May 26 08:25:02 2027 GMT
        Subject: CN=B841161063455AF4A4D1B0C3E5671F0CD642CA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:49:46:b8:ee:b8:6e:74:45:87:5f:05:bb:
                    2a:e3:11:e4:5a:16:df:94:53:c5:fa:e7:65:23:f3:
                    34:9b:6c:f8:ca:35:3c:9a:d7:90:24:81:50:c4:5b:
                    da:38:68:20:b1:0a:7d:12:b1:78:0a:34:d9:39:0b:
                    56:00:e7:26:b9:c6:2b:c7:1e:7c:1d:25:f9:fe:77:
                    4e:b2:2b:d3:83:da:10:24:8a:98:24:2c:02:b1:86:
                    76:6c:47:f6:0f:f0:d6:84:08:ba:9e:82:fd:09:ab:
                    6d:8d:7f:94:f4:eb:bc:c2:ff:1c:02:19:13:9f:0c:
                    60:58:2a:69:41:bd:2a:28:80:9a:90:73:e7:72:3a:
                    71:ae:f0:4c:d4:0a:51:d1:ad:68:88:56:dc:01:ff:
                    86:30:04:ee:4f:5c:f5:e7:1f:30:4e:da:2b:b6:41:
                    b0:d4:a8:cf:d6:d0:b2:dd:bb:e9:58:60:1e:5c:ea:
                    d8:cc:9f:c8:f3:6f:52:73:48:b7:a4:08:98:fd:c1:
                    6e:dc:52:71:5a:43:b4:0b:b9:bb:e8:58:35:ac:4f:
                    f5:c3:0d:8b:a4:73:d4:03:4f:f2:4d:f3:88:d6:08:
                    09:05:21:d0:c9:ee:52:f4:7c:10:cf:76:7f:a8:2a:
                    53:8e:cc:c7:34:43:c1:fa:54:91:17:d1:c0:a4:ca:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:41:16:10:63:45:5A:F4:A4:D1:B0:C3:E5:67:1F:0C:D6:42:CA:84
            X509v3 Authority Key Identifier:
                keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3231312e3135352e3233362e302f32342d3234203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.155.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0f:fa:ba:0d:16:84:45:54:cc:71:e5:22:2f:d0:99:a1:f9:
         4d:27:5d:66:ea:ed:08:65:13:2d:d2:f4:ed:4c:c2:04:44:e2:
         49:7d:6e:d0:67:50:9a:77:5e:09:a1:eb:f7:dc:18:12:f4:a6:
         55:38:78:50:b7:08:cd:37:ed:e4:92:14:d2:50:64:18:aa:8f:
         79:95:1c:6c:77:16:0f:13:28:ef:f6:4b:e6:dc:c5:7f:ac:32:
         7c:61:c2:6a:52:97:79:d4:fd:3f:bc:2c:05:a2:96:6b:bc:2b:
         d7:6a:84:b9:19:78:6d:d7:0a:06:59:29:10:56:7e:68:fd:0e:
         f3:b1:71:98:b9:46:e8:30:ea:98:d7:dc:44:aa:b1:a0:81:2d:
         96:00:a4:ea:8f:69:9c:60:22:ef:57:c7:8e:ec:93:26:08:ae:
         8b:39:02:7f:57:8a:4f:57:25:37:ee:7f:88:fa:c8:fc:a3:c1:
         6e:7e:48:2a:e6:37:a2:47:47:28:78:77:50:f0:b9:10:a8:85:
         0f:81:97:3f:f2:34:b7:00:1c:0f:3f:09:97:00:36:08:65:e0:
         c2:dc:fd:d8:50:1e:3e:53:d5:ef:3e:6b:67:40:e3:4e:03:54:
         62:6f:97:b9:d9:d6:e6:01:2a:eb:f3:50:e9:ba:92:65:99:20:
         c9:83:45:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:54:01 2026 by rpki-client