Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121692552068595751/0/3136332e36312e3230322e302f32332d3332203d3e203633363231.roa
File:                     3136332e36312e3230322e302f32332d3332203d3e203633363231.roa (raw, json)
Hash identifier:          +C9mY2BKAnsD+UAQC5iokqpSd2jZ1a8F/9zeoBP4M0o=
Subject key identifier:   4A:0C:5C:AF:78:C0:63:C4:0A:33:EA:6E:C9:8D:E4:59:B8:46:A7:42
Certificate issuer:       /CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C
Certificate serial:       08E795D95F756E54B01AF6EA77BA01FE8118F600
Authority key identifier: BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/3136332e36312e3230322e302f32332d3332203d3e203633363231.roa
Signing time:             Tue 23 Jun 2026 08:06:30 +0000
ROA not before:           Tue 23 Jun 2026 08:01:30 +0000
ROA not after:            Tue 22 Jun 2027 08:06:30 +0000
asID:                     63621
IP address blocks:        163.61.202.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e7:95:d9:5f:75:6e:54:b0:1a:f6:ea:77:ba:01:fe:81:18:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C
        Validity
            Not Before: Jun 23 08:01:30 2026 GMT
            Not After : Jun 22 08:06:30 2027 GMT
        Subject: CN=4A0C5CAF78C063C40A33EA6EC98DE459B846A742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:16:61:65:8c:ea:28:75:d7:5a:3e:4b:0f:
                    ae:a5:86:8b:fe:68:78:9a:c6:db:85:25:28:3b:38:
                    f7:86:00:7e:29:82:b7:c3:71:cb:96:55:c0:b0:1d:
                    c5:dc:e8:8a:05:b1:6f:bc:f6:4b:70:06:02:b8:61:
                    5a:9f:ae:37:2b:1c:d9:36:a0:ed:26:c8:be:40:9a:
                    13:23:9a:a5:a7:dc:96:b5:46:e2:c0:99:42:01:23:
                    84:4e:51:87:d8:f4:e9:11:9d:b7:8b:b4:83:ca:02:
                    17:1b:17:a6:87:08:46:af:bd:01:67:22:db:97:d1:
                    ea:44:f3:ad:19:f8:11:47:09:4f:30:02:31:15:d1:
                    f2:db:b8:9b:ba:1c:96:8b:ce:ec:ff:a7:75:3b:a0:
                    76:aa:ca:7f:62:3f:6f:3f:8b:cb:be:6d:65:5f:55:
                    5b:e5:1c:b0:54:ff:e2:3a:40:2a:df:99:ba:60:9f:
                    f0:44:98:eb:3e:34:0f:d4:a7:2c:f6:25:24:86:15:
                    34:61:d4:5a:e0:79:0a:c3:22:d8:e0:bc:5b:d0:ee:
                    5e:9e:0c:cd:c5:b8:2e:00:68:31:17:cc:9d:d1:e9:
                    2d:d8:11:a9:a2:a9:60:d9:7a:7b:2e:93:fb:04:57:
                    84:c4:30:d0:1e:f9:ee:fa:e0:76:d1:60:a8:fd:34:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0C:5C:AF:78:C0:63:C4:0A:33:EA:6E:C9:8D:E4:59:B8:46:A7:42
            X509v3 Authority Key Identifier:
                keyid:BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/3136332e36312e3230322e302f32332d3332203d3e203633363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:d5:02:72:60:79:a7:0f:cb:04:0e:c4:12:3c:a6:bd:06:77:
         93:7d:69:7d:be:bf:dc:58:39:92:c8:55:a4:50:5d:0b:d9:2a:
         f2:0d:9b:a2:58:b2:35:e2:5f:35:4b:f0:23:0e:8f:92:1a:50:
         65:1d:79:d3:a1:bf:b1:ad:1f:12:89:ba:65:66:28:bb:b0:5d:
         8f:8d:6b:78:79:90:36:3b:7f:da:4a:8b:d1:15:e8:12:a6:61:
         6b:65:f8:87:35:e5:fd:ae:f8:66:f0:60:1a:2d:65:52:cc:26:
         70:a7:d3:02:d6:c5:5c:58:f6:be:34:26:ff:ef:25:e7:ac:5d:
         86:95:b2:13:9e:70:43:4b:40:14:d4:0f:61:e0:97:7f:57:92:
         45:48:83:1b:39:40:65:ad:e5:ee:29:21:62:61:5f:56:dc:30:
         0a:16:3c:21:d9:40:47:3b:65:46:1f:10:52:36:37:08:7a:9c:
         14:b3:fa:b1:04:f0:32:87:ba:c5:2d:9e:0d:d7:38:94:0b:ab:
         f9:ee:e7:73:ff:25:06:1a:19:d7:ee:6b:79:66:0f:e6:0d:b4:
         62:b3:84:28:e9:1a:c1:d7:9b:a9:a8:61:1e:ff:9d:38:77:91:
         ad:9e:7c:74:80:cd:ba:d5:54:f2:b8:90:60:b6:89:89:a5:8a:
         86:37:cb:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:20 2026 by rpki-client