Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112291523388571669/0/3136332e3232372e34302e302f32332d3234203d3e20313337373535.roa
File:                     3136332e3232372e34302e302f32332d3234203d3e20313337373535.roa (raw, json)
Hash identifier:          GQ8uXcbQu5NjmYx12RowTxJ7cLfQNV5AAopnjSe07GE=
Subject key identifier:   2D:88:A8:85:E1:24:F5:B9:1D:A5:4D:CA:6A:B4:E3:66:EF:B1:8D:69
Certificate issuer:       /CN=E5D57E4A2476439498A02EC11848C8E17D56B388
Certificate serial:       3A21043D1477049F6FA82033DDA4A5810E465DB2
Authority key identifier: E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/3136332e3232372e34302e302f32332d3234203d3e20313337373535.roa
Signing time:             Thu 28 May 2026 08:21:03 +0000
ROA not before:           Thu 28 May 2026 08:16:03 +0000
ROA not after:            Thu 27 May 2027 08:21:03 +0000
asID:                     137755
IP address blocks:        163.227.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 06:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:21:04:3d:14:77:04:9f:6f:a8:20:33:dd:a4:a5:81:0e:46:5d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5D57E4A2476439498A02EC11848C8E17D56B388
        Validity
            Not Before: May 28 08:16:03 2026 GMT
            Not After : May 27 08:21:03 2027 GMT
        Subject: CN=2D88A885E124F5B91DA54DCA6AB4E366EFB18D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b7:d1:8f:8c:7d:83:d2:cd:d1:6e:63:74:2a:
                    e1:7f:1b:29:4e:8a:80:0b:2d:0a:28:27:98:04:95:
                    15:fc:60:8b:3c:52:d8:21:bb:e8:ab:15:ca:5e:0b:
                    3a:9d:61:bb:06:7a:11:14:22:cd:86:8e:76:fc:24:
                    07:a0:a9:02:92:62:36:52:2d:59:9d:8f:35:29:c3:
                    be:6c:99:83:5e:6a:9a:dc:36:6b:90:99:92:88:db:
                    34:c9:63:bb:72:92:ce:b8:92:48:c0:99:d8:38:15:
                    a3:bb:81:0f:5b:d3:08:14:20:3e:10:17:26:58:04:
                    4f:44:e4:6a:30:2c:a4:01:43:2d:8f:17:e0:48:d4:
                    00:5b:ca:c2:ac:2b:bf:c3:19:7e:09:87:d2:2f:c1:
                    07:a1:11:f9:82:eb:e7:54:21:40:d8:66:b1:c1:28:
                    5b:ea:eb:4b:ee:26:0d:9a:27:99:dd:30:ce:d6:78:
                    a7:ac:4c:62:4a:ca:b2:81:14:62:57:c3:a7:92:a2:
                    f5:be:71:ae:f5:ca:87:37:3d:b7:62:8e:e7:a0:db:
                    29:6f:96:30:c4:bc:18:a7:14:ea:4c:fd:35:fd:34:
                    7f:5e:ac:53:0b:17:24:3e:e0:fd:2f:26:7a:4f:b1:
                    e2:35:0e:24:06:30:2f:0d:9c:a3:20:e6:84:a7:f3:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:88:A8:85:E1:24:F5:B9:1D:A5:4D:CA:6A:B4:E3:66:EF:B1:8D:69
            X509v3 Authority Key Identifier:
                keyid:E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/3136332e3232372e34302e302f32332d3234203d3e20313337373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:27:ca:de:79:09:39:53:4c:30:bb:03:86:db:36:5d:6b:
         e3:f9:0c:ec:66:e1:2b:ad:ae:ca:10:98:95:24:27:42:c1:ce:
         8f:27:da:a7:d6:5f:24:d3:c0:b9:eb:ce:4a:3a:6c:0b:f4:46:
         c4:d9:76:fe:11:80:f3:6b:d9:86:d2:4a:1a:42:b1:f9:6c:a8:
         88:11:b4:35:0e:8c:0b:d0:d1:4d:aa:e0:4e:15:6a:b3:f1:57:
         bd:63:18:f4:b2:a8:49:e8:8e:f5:3a:a7:c2:93:b0:8a:9d:08:
         3a:c9:59:a6:0d:a4:08:a6:d4:f7:20:af:b7:f3:b4:7f:98:ed:
         6d:39:00:d2:f1:87:ca:dc:6e:08:fd:4b:d0:05:20:41:e7:15:
         5b:38:0d:dd:70:20:cb:cc:10:86:7b:c1:01:06:ad:f3:ba:06:
         94:d2:e2:2b:24:38:36:81:2a:c3:08:e3:59:92:36:18:90:16:
         21:f9:7b:22:90:02:e0:78:fb:79:ca:c3:b0:2b:d4:8d:02:74:
         a3:83:ac:e8:b9:28:44:6c:2a:ba:73:4e:53:4d:dd:f6:00:06:
         d2:eb:4d:59:23:f2:1e:9f:70:44:69:6e:9b:b7:92:d1:7f:63:
         d8:fa:18:ab:f8:71:bc:ea:17:df:17:26:7e:a9:e5:00:5e:51:
         dd:ef:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:54:26 2026 by rpki-client