Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa
File:                     3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa (raw, json)
Hash identifier:          QqHw6UnjAmZaF6ZKGYjDcxL5eEwCirmJLq8wCW5ccfU=
Subject key identifier:   C0:E0:30:CE:D0:10:92:10:80:7B:2D:4B:3D:64:6A:26:F1:AD:D1:42
Certificate issuer:       /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial:       7C845CCAC343390611AEEEC13F632E5E60BE158C
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa
Signing time:             Wed 22 Apr 2026 07:51:42 +0000
ROA not before:           Wed 22 Apr 2026 07:46:42 +0000
ROA not after:            Wed 21 Apr 2027 07:51:42 +0000
asID:                     4812
IP address blocks:        221.133.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 23:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:84:5c:ca:c3:43:39:06:11:ae:ee:c1:3f:63:2e:5e:60:be:15:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
        Validity
            Not Before: Apr 22 07:46:42 2026 GMT
            Not After : Apr 21 07:51:42 2027 GMT
        Subject: CN=C0E030CED0109210807B2D4B3D646A26F1ADD142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bb:b6:12:45:62:0a:40:fa:97:e1:5c:ab:b9:
                    4e:88:6e:77:b8:44:00:eb:58:39:58:7b:be:19:3c:
                    53:3f:4a:45:b0:46:e7:53:59:8e:b9:7b:64:82:99:
                    e1:c8:03:17:4a:3a:49:11:40:1d:25:1a:fd:fb:66:
                    05:80:26:37:f6:18:05:9c:c1:31:d8:f9:23:59:c7:
                    94:b5:60:0b:f5:37:f7:de:d9:d0:e5:6c:1e:3f:7b:
                    68:9e:1b:45:92:8b:70:06:3a:41:0c:0c:08:62:ff:
                    65:ea:d1:ce:3d:c4:57:36:fb:79:0d:b5:11:d2:66:
                    69:0f:44:24:e7:95:d0:97:ca:71:27:d7:49:41:e6:
                    c5:ab:ea:03:e0:91:8f:98:b5:92:e6:a0:1e:2f:fc:
                    e8:68:4f:3f:96:9a:e1:81:60:61:01:73:1b:81:68:
                    07:6f:89:ce:1b:b2:45:10:4c:32:9a:39:3c:60:86:
                    03:b9:46:bb:57:a0:97:dd:2d:55:26:7b:d3:b0:e4:
                    fb:02:61:00:82:ec:7d:b4:cf:fd:99:28:ee:c5:a1:
                    2e:df:25:21:18:d6:17:87:4b:8d:d4:0e:47:bf:dd:
                    fe:f6:49:a2:39:65:53:6b:86:07:02:28:5a:5a:67:
                    30:65:26:68:f7:74:5e:a4:32:c1:1e:be:f4:4d:06:
                    e9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E0:30:CE:D0:10:92:10:80:7B:2D:4B:3D:64:6A:26:F1:AD:D1:42
            X509v3 Authority Key Identifier:
                keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3232312e3133332e3233322e302f32332d3233203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.133.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:8a:db:e2:f2:44:bc:06:3f:7d:2e:b6:67:47:47:44:52:8f:
         29:66:2a:8b:4b:74:73:03:fb:b2:1f:ed:82:48:8e:2f:1f:92:
         c6:0f:fa:a4:7e:80:36:32:e3:60:7f:bd:46:0f:f5:b2:ef:bc:
         83:f2:10:8e:ee:4f:09:79:73:04:24:8e:c3:7c:24:a3:9b:0c:
         54:3e:51:07:0e:b5:57:14:32:d7:67:f9:da:30:e9:dc:43:c6:
         22:1d:9e:b3:62:5f:64:6a:d6:77:ac:de:c5:c6:12:3a:7f:db:
         c7:82:40:d2:c7:db:69:77:ed:f8:ea:1b:3b:55:04:1e:a0:d7:
         16:12:16:62:df:6d:92:b6:24:85:5f:c4:cf:47:d8:01:ec:35:
         84:cc:2a:88:e8:dc:6d:ca:80:2e:f2:42:da:31:96:8d:f7:cd:
         ba:38:f7:c7:a1:f2:c5:c7:30:e0:e9:e0:27:06:93:69:00:9f:
         5f:ec:7f:c7:b4:bc:5c:ce:bb:f6:64:15:c0:bd:05:11:a5:69:
         6b:a8:7e:28:48:51:1b:10:b7:66:98:58:99:70:86:6f:a3:6f:
         38:3a:83:f3:b7:8c:df:ef:96:f8:89:d5:35:76:42:d0:3a:aa:
         e6:9d:88:59:67:e1:e6:3b:6a:30:14:7c:b8:cd:f9:96:84:a2:
         ea:89:50:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:33 2026 by rpki-client