Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108379782258622481/0/36302e3235352e302e302f31362d3234203d3e203234313530.roa
File:                     36302e3235352e302e302f31362d3234203d3e203234313530.roa (raw, json)
Hash identifier:          YqktsVTCEGNig6nSEXxQ2axz42D3/TI1pVKtJV6iakg=
Subject key identifier:   22:CC:32:48:E2:35:1C:D6:F6:EA:27:BD:73:3B:5D:9D:5E:E7:59:11
Certificate issuer:       /CN=B4E055792301140D1D1A5A462561EA2D919B364F
Certificate serial:       5FD81C456E124BE81135F3FF40F364E26925E436
Authority key identifier: B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/36302e3235352e302e302f31362d3234203d3e203234313530.roa
Signing time:             Sun 17 May 2026 13:24:23 +0000
ROA not before:           Sun 17 May 2026 13:19:23 +0000
ROA not after:            Sun 16 May 2027 13:24:23 +0000
asID:                     24150
IP address blocks:        60.255.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 23:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d8:1c:45:6e:12:4b:e8:11:35:f3:ff:40:f3:64:e2:69:25:e4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E055792301140D1D1A5A462561EA2D919B364F
        Validity
            Not Before: May 17 13:19:23 2026 GMT
            Not After : May 16 13:24:23 2027 GMT
        Subject: CN=22CC3248E2351CD6F6EA27BD733B5D9D5EE75911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:3c:53:18:70:9f:56:27:b4:09:b5:5d:bc:
                    5c:53:8f:92:93:28:29:a3:ae:c6:23:0e:01:a5:3d:
                    60:64:0b:76:1f:b7:e6:56:5a:43:d1:33:d7:cf:bd:
                    c2:f7:4e:05:09:01:fc:aa:b2:a4:c6:45:4e:b4:c1:
                    9b:b7:a6:1b:0e:0a:4d:44:4d:47:29:84:63:65:e7:
                    1c:d5:9f:77:57:8d:91:3c:4c:c7:e3:e9:65:3b:86:
                    1d:60:c7:a9:99:b9:6f:e4:42:dc:1b:c0:d1:d0:b4:
                    ae:20:5a:d6:28:a8:5e:5c:fd:78:57:95:18:84:60:
                    06:92:d3:fb:c5:47:11:59:7f:55:67:97:b3:04:7f:
                    a9:45:ea:56:dc:bf:fb:cd:02:54:12:64:c8:86:b9:
                    9e:e4:08:10:c1:11:05:7a:69:71:d5:a7:bb:47:26:
                    4c:8d:cf:c9:23:41:15:fd:03:7b:ed:0d:ac:86:a1:
                    3c:a5:2a:e3:d4:8e:da:22:dd:fe:43:bc:48:33:fd:
                    4d:bd:ca:76:7e:b5:df:9b:ef:c9:fb:96:8d:45:da:
                    42:03:b5:ed:85:58:d0:02:8e:29:50:ad:40:4c:ad:
                    b9:88:c8:9d:1c:84:e9:04:e3:d8:82:3c:1d:99:ec:
                    94:4f:1b:54:91:61:ed:63:03:58:2d:bd:ae:2e:20:
                    9d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CC:32:48:E2:35:1C:D6:F6:EA:27:BD:73:3B:5D:9D:5E:E7:59:11
            X509v3 Authority Key Identifier:
                keyid:B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/36302e3235352e302e302f31362d3234203d3e203234313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  60.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d8:8d:28:5e:c9:ad:99:d8:fb:2d:4e:4c:c5:c1:d8:af:9b:9f:
         58:63:ac:07:51:37:ce:39:61:a1:c4:95:de:f6:b7:c0:5d:e2:
         e2:8c:8a:1e:f1:b7:ac:6e:8a:e6:7d:81:36:79:fd:60:17:73:
         1a:96:5e:b1:67:46:c0:1d:e6:1f:40:b3:40:d8:43:a7:ce:11:
         c6:2e:69:6a:6a:f4:e1:0b:07:cf:d6:51:01:6b:53:4a:29:3f:
         b1:75:d9:e0:55:20:5c:a0:29:c5:63:48:c4:ae:04:ca:2f:ae:
         22:3c:5f:c0:43:01:99:f1:fa:b6:43:8e:f9:43:ff:2e:bc:a8:
         81:9f:37:e5:90:ca:d1:49:a9:c3:71:9a:e5:49:0b:13:30:d3:
         52:8f:bb:63:69:e9:5f:a4:72:0d:0e:a2:54:4a:8b:c8:69:48:
         64:7c:76:23:ab:29:d2:d6:22:7e:3f:91:ef:8a:33:5a:62:74:
         fa:73:52:b8:cd:56:8c:56:54:56:84:9a:94:76:80:21:2e:52:
         18:e1:32:2c:2b:5a:43:ab:cb:f0:80:e8:3a:55:0d:3b:06:0d:
         8b:57:83:59:57:8a:38:17:3b:d1:af:c1:de:0d:13:d3:92:21:
         70:d8:69:13:9b:56:52:cc:e1:7f:7d:81:16:77:89:81:a2:47:
         37:9a:7c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:26:05 2026 by rpki-client