Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097031725546012673/0/3231312e3135382e302e302f31362d3136203d3e2034383337.roa
File:                     3231312e3135382e302e302f31362d3136203d3e2034383337.roa (raw, json)
Hash identifier:          i9hECE3kOB5KCZJDOyjFbCvXCgNoN/LRN4pG0/aZL80=
Subject key identifier:   6D:5B:B9:4A:50:85:B2:07:66:48:2B:DD:87:08:60:C4:AB:69:3C:F7
Certificate issuer:       /CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0
Certificate serial:       0E1DF47B6D78F17C5CD97949824805D44F0CC63D
Authority key identifier: E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/3231312e3135382e302e302f31362d3136203d3e2034383337.roa
Signing time:             Thu 21 May 2026 03:26:23 +0000
ROA not before:           Thu 21 May 2026 03:21:23 +0000
ROA not after:            Thu 20 May 2027 03:26:23 +0000
asID:                     4837
IP address blocks:        211.158.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1d:f4:7b:6d:78:f1:7c:5c:d9:79:49:82:48:05:d4:4f:0c:c6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0
        Validity
            Not Before: May 21 03:21:23 2026 GMT
            Not After : May 20 03:26:23 2027 GMT
        Subject: CN=6D5BB94A5085B20766482BDD870860C4AB693CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:11:0f:05:da:d4:33:82:bf:36:e8:e6:a5:
                    4b:a3:73:ad:f7:44:b0:7a:68:68:f9:92:90:32:94:
                    12:e8:79:d0:67:6e:31:0e:0c:d8:78:94:4b:65:ce:
                    f2:2e:29:15:e4:74:bc:c0:76:af:19:20:d5:59:5a:
                    41:47:67:c6:0f:a5:73:2c:0b:87:5c:65:87:24:94:
                    2f:c4:6d:cf:48:f1:cb:c5:88:87:8a:52:fd:81:3d:
                    c0:db:b5:58:95:52:f5:83:68:bc:32:b8:08:9f:ee:
                    e4:cc:01:15:d3:cb:c1:8c:00:42:2b:9d:fa:c9:8b:
                    e3:ed:34:59:cf:3e:8c:45:b4:21:e8:2f:4f:4a:a3:
                    7f:db:97:44:17:13:f2:d1:13:51:ac:b3:82:55:b9:
                    31:d0:6e:65:f8:03:27:e6:50:89:9c:9c:1c:07:db:
                    05:9e:e8:12:35:e4:8b:47:31:bc:47:35:ce:b5:6c:
                    52:c4:28:7f:b0:ad:30:64:f1:35:e8:74:57:0b:f7:
                    8d:c1:44:f6:ec:83:35:76:f9:3e:52:3f:c7:86:08:
                    50:7f:b2:12:02:b6:b6:36:10:ed:21:a8:d6:92:76:
                    1c:5b:db:fa:7c:9b:75:a1:68:fd:3d:f2:dd:12:e7:
                    00:3d:16:45:2f:80:fa:4d:9c:d4:08:54:c9:6b:ff:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5B:B9:4A:50:85:B2:07:66:48:2B:DD:87:08:60:C4:AB:69:3C:F7
            X509v3 Authority Key Identifier:
                keyid:E9:A7:D9:B6:8F:F0:40:B5:CE:E2:C4:F6:56:99:74:2E:4B:D0:ED:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E9A7D9B68FF040B5CEE2C4F65699742E4BD0EDE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097031725546012673/0/3231312e3135382e302e302f31362d3136203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:37:b7:c7:0d:6a:a1:03:3d:a4:44:32:fe:3b:23:f7:a7:6e:
         db:a9:89:ae:61:d8:1e:e9:ae:ad:9b:7c:1a:0b:d6:e0:65:b9:
         bd:19:52:9e:ad:95:1c:df:e8:4f:55:c2:13:bc:fe:13:cf:77:
         ca:33:9d:96:f8:03:ea:23:96:01:9f:fa:f5:fa:16:41:c7:9a:
         ac:50:6b:18:32:aa:32:0c:50:8b:c2:a7:fe:07:73:7d:ce:1a:
         16:79:49:05:dc:a7:60:91:f8:15:f2:81:fb:f8:52:dd:e9:3e:
         48:f9:02:01:f1:ef:55:86:ad:7a:08:15:62:d7:b6:a2:cb:b9:
         45:71:cd:87:46:c9:80:eb:c1:12:b2:6a:2b:d7:83:38:be:e3:
         4a:79:c7:6f:b2:63:59:41:a8:a1:63:b2:11:ec:d9:e3:68:89:
         04:66:83:d6:0d:fa:02:d6:60:71:26:a7:1b:13:e3:4f:cf:4a:
         1a:43:c2:7c:26:11:37:51:0c:02:6b:7b:7f:60:68:d2:71:47:
         2c:ff:55:7d:19:97:98:5f:fe:a4:b4:84:d6:dd:cf:ab:c1:71:
         d4:7b:58:4a:62:fe:d0:6d:8b:83:2e:b1:05:1f:e1:6b:d0:d8:
         23:f1:0d:45:26:b5:89:b3:5c:c2:9b:50:ec:a7:74:f3:79:30:
         c2:15:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:30 2026 by rpki-client