Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa
File:                     3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier:          SrpaphldTts5AcZEbZ+7FmR5HxvlWebU1eK0VABiMKY=
Subject key identifier:   5C:FB:84:1C:05:05:DF:5B:64:EA:FD:84:54:17:40:F4:23:BA:90:73
Certificate issuer:       /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial:       5A861E91AAF132477AF96E63049A8DBB8AAC6253
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa
Signing time:             Thu 25 Jun 2026 08:05:06 +0000
ROA not before:           Thu 25 Jun 2026 08:00:06 +0000
ROA not after:            Thu 24 Jun 2027 08:05:06 +0000
asID:                     134762
IP address blocks:        210.76.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 07:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:86:1e:91:aa:f1:32:47:7a:f9:6e:63:04:9a:8d:bb:8a:ac:62:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
        Validity
            Not Before: Jun 25 08:00:06 2026 GMT
            Not After : Jun 24 08:05:06 2027 GMT
        Subject: CN=5CFB841C0505DF5B64EAFD84541740F423BA9073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:d6:48:06:da:10:aa:80:c1:0a:3b:c2:b0:
                    7c:a4:01:2f:d7:87:74:4b:7d:9b:e6:09:46:b9:e6:
                    1d:44:50:c2:f8:d1:26:9d:b6:68:e6:95:9e:e5:e8:
                    ae:95:92:23:b7:80:fc:75:af:79:aa:2d:26:ed:a8:
                    1c:f0:e9:22:6e:c3:04:e7:28:30:9b:ac:42:9c:ae:
                    e5:07:3b:88:36:b0:a8:2a:d2:a7:0d:16:8a:d0:bb:
                    9d:d7:1d:4b:07:ce:8c:45:30:42:1a:38:59:aa:c6:
                    e0:fd:41:6e:f3:ef:f7:f3:13:a8:29:ff:ec:66:de:
                    b8:91:75:57:b0:ee:6c:53:cb:37:1b:2d:cf:02:ad:
                    ee:c4:9d:8c:6c:af:08:3d:1d:57:9a:9e:49:c0:06:
                    b1:af:67:35:4c:3b:1c:9b:f5:af:70:e2:d0:1f:38:
                    37:2d:38:a2:17:45:e4:de:2d:58:fb:d9:15:0f:73:
                    84:b4:45:43:6d:10:c2:47:3f:d2:08:9b:a3:ec:61:
                    8a:d9:22:bf:b3:c3:c8:39:3b:42:46:0a:f2:73:50:
                    cf:a6:5a:e1:2d:a4:30:21:b2:3c:5c:92:4a:29:ba:
                    26:bd:66:f3:27:a8:28:a7:60:97:93:2f:3f:67:07:
                    36:99:f0:31:0d:75:59:73:45:b2:bc:39:44:60:57:
                    8e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:FB:84:1C:05:05:DF:5B:64:EA:FD:84:54:17:40:F4:23:BA:90:73
            X509v3 Authority Key Identifier:
                keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:83:a4:48:ce:ac:a6:89:14:58:fa:0c:7f:16:90:cd:f0:d9:
         57:12:69:87:36:c7:ef:24:aa:c7:a5:6e:33:db:78:00:83:51:
         8c:0a:da:aa:89:fb:e1:c4:5d:7f:b9:bc:6b:f4:31:df:0d:5c:
         b4:a6:1c:c7:37:40:f2:42:2a:81:51:41:a2:82:86:01:13:5b:
         6c:c8:6e:5b:d1:02:01:50:78:27:89:df:4d:02:94:af:d7:b3:
         1d:aa:1d:cc:c3:02:50:90:5b:f7:a0:2f:64:64:6c:99:1c:cd:
         ab:3a:97:eb:ec:17:5a:6f:dc:4e:d4:9e:33:af:74:d8:52:76:
         ee:0a:b9:82:7d:a0:ca:82:47:ff:52:de:91:47:59:b1:e1:48:
         40:6c:cd:56:16:c6:23:19:48:64:ed:bd:9e:9b:30:ae:f9:37:
         12:e4:36:e8:43:3a:55:cf:88:de:17:e7:cb:cf:af:ce:4c:ef:
         3b:8c:50:d7:43:f6:b5:df:7e:1a:d3:85:ef:cf:b3:2b:d0:3d:
         f6:24:7a:b4:50:31:1b:dd:0e:25:11:26:b6:ea:9a:be:58:74:
         e2:89:ee:b0:71:55:87:62:4b:97:06:d5:62:6b:50:64:f4:00:
         1b:e5:02:c1:ef:e9:d2:91:51:f2:60:26:49:d9:a3:ec:ec:b3:
         1e:1e:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 18:08:35 2026 by rpki-client