Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111842086300155925/0/3136302e32322e3134382e302f32332d3233203d3e2030.roa
File:                     3136302e32322e3134382e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier:          p6ZpqAcYKZShiVZ0UOwQgAy23JxzOWzPCot6EKXLWhk=
Subject key identifier:   44:B7:55:1C:7D:91:67:14:54:0D:95:EC:F9:03:F0:09:10:CA:26:B0
Certificate issuer:       /CN=FA44A1B9136325B4DC1FD0E79B880C87DD347B31
Certificate serial:       50E7403FEDB741036C7403DDC9240A3E5FEC109B
Authority key identifier: FA:44:A1:B9:13:63:25:B4:DC:1F:D0:E7:9B:88:0C:87:DD:34:7B:31
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/0/3136302e32322e3134382e302f32332d3233203d3e2030.roa
Signing time:             Thu 28 May 2026 09:21:22 +0000
ROA not before:           Thu 28 May 2026 09:16:22 +0000
ROA not after:            Thu 27 May 2027 09:21:22 +0000
asID:                     0
IP address blocks:        160.22.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jun 2026 00:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e7:40:3f:ed:b7:41:03:6c:74:03:dd:c9:24:0a:3e:5f:ec:10:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A1B9136325B4DC1FD0E79B880C87DD347B31
        Validity
            Not Before: May 28 09:16:22 2026 GMT
            Not After : May 27 09:21:22 2027 GMT
        Subject: CN=44B7551C7D916714540D95ECF903F00910CA26B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:8a:a9:4e:e8:23:da:bb:55:f7:90:8c:ac:
                    c5:69:61:fc:f2:ae:29:97:9d:de:2b:1d:73:c7:07:
                    ec:b3:80:03:df:1c:a8:1c:9f:4c:76:5d:46:a0:d0:
                    21:a7:b0:8f:4d:43:34:0c:ce:a3:ca:7e:43:62:be:
                    0c:52:e9:8a:84:63:de:1d:5e:d8:49:d0:1d:59:bd:
                    01:7f:95:b2:c4:bb:df:b8:28:3b:fc:00:47:20:44:
                    c5:83:03:b7:f4:a9:c4:6f:4d:50:6a:4d:5d:06:49:
                    07:67:66:9e:25:e0:09:26:5d:fd:bb:1c:09:a0:9a:
                    7a:57:e8:8a:05:e4:7a:e0:23:30:99:16:8e:84:0d:
                    8f:ee:b6:50:24:7e:9b:ee:39:1c:a3:70:be:26:0b:
                    99:45:e8:d8:9f:4c:38:76:ff:7b:8f:3f:e7:26:e9:
                    a1:c5:28:e4:23:4c:7d:18:f2:46:65:c7:7d:f0:fc:
                    fd:a8:38:26:99:3b:6d:00:b2:89:97:47:87:f2:89:
                    5c:ec:01:da:62:0a:99:41:71:84:ac:02:9d:ef:3e:
                    16:7a:f7:3a:af:e9:6e:23:ab:d8:33:ff:22:30:8c:
                    9e:ee:12:5b:d5:bb:46:f4:cc:1f:49:7c:94:52:97:
                    bd:f4:92:00:8b:37:1e:09:13:67:78:d6:69:13:f1:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B7:55:1C:7D:91:67:14:54:0D:95:EC:F9:03:F0:09:10:CA:26:B0
            X509v3 Authority Key Identifier:
                keyid:FA:44:A1:B9:13:63:25:B4:DC:1F:D0:E7:9B:88:0C:87:DD:34:7B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/0/3136302e32322e3134382e302f32332d3233203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:39:97:9b:de:0a:70:ca:c8:30:6a:a9:31:19:a2:f3:3e:e1:
         b9:a1:b9:7b:73:d1:dd:36:ba:75:df:b2:09:43:29:de:a3:5b:
         e6:fd:e0:2a:d7:1b:93:77:2e:7c:47:94:a7:f6:44:85:e4:e6:
         20:db:54:0f:9d:f2:44:ef:a6:a0:77:53:bf:30:8d:ae:80:a1:
         e0:4e:51:d0:37:b2:61:1e:7d:c5:9c:44:b4:d2:62:a0:db:4d:
         76:c7:65:9e:2a:9f:dc:83:da:c8:4a:ca:2b:7b:2f:0f:bd:e9:
         2f:d5:b0:5a:94:1f:0c:59:ea:e2:cc:d3:3a:3a:19:74:c1:32:
         2b:5b:00:6a:53:85:0b:27:26:ec:34:bc:9a:b5:48:df:f0:9c:
         95:67:db:0b:59:1d:d8:bb:f8:d4:9a:d0:06:4e:8f:c1:45:63:
         0c:10:f7:6d:51:cd:50:af:3d:fb:56:5e:5a:65:e2:be:8f:83:
         63:97:a6:87:48:ac:60:41:df:2e:37:af:6d:a3:eb:47:ba:5c:
         7b:78:9f:33:28:6d:d4:46:c2:67:ff:46:3f:97:66:4b:41:6f:
         1e:67:6b:d5:86:b4:9b:fd:81:95:a1:9a:dd:21:09:c6:cc:ec:
         08:26:7e:0e:18:e2:09:12:41:85:6e:22:ed:fa:ce:b7:7d:0b:
         20:db:5e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:59:01 2026 by rpki-client