Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa
File:                     3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier:          S4Xiq+tsebEtfsCJHFrLqedmnsBo40vyHoPs4f0RABE=
Subject key identifier:   CA:10:5E:21:E2:7B:5D:4D:DE:1E:6A:06:DD:77:0A:DE:CB:7A:98:EF
Certificate issuer:       /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial:       49BF347CAD7F1DA94AD319463B597AB4847D5943
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa
Signing time:             Thu 25 Jun 2026 08:05:07 +0000
ROA not before:           Thu 25 Jun 2026 08:00:07 +0000
ROA not after:            Thu 24 Jun 2027 08:05:07 +0000
asID:                     134762
IP address blocks:        210.76.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 07:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:bf:34:7c:ad:7f:1d:a9:4a:d3:19:46:3b:59:7a:b4:84:7d:59:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
        Validity
            Not Before: Jun 25 08:00:07 2026 GMT
            Not After : Jun 24 08:05:07 2027 GMT
        Subject: CN=CA105E21E27B5D4DDE1E6A06DD770ADECB7A98EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:11:90:56:30:27:17:49:a6:27:4d:f7:6d:
                    fb:0d:e2:99:7c:84:fd:24:de:d1:c0:8f:c4:b8:6d:
                    ae:45:ab:be:ef:e1:0d:f2:5f:07:84:6e:ac:b1:66:
                    0a:95:e9:81:a7:6a:b4:f8:c7:45:42:4c:00:42:71:
                    b9:28:d3:e6:8b:b2:9d:ba:49:fd:96:27:33:6c:fb:
                    1c:cd:b9:12:7b:75:a5:9a:48:93:f3:4d:14:e3:ef:
                    32:e1:c0:2d:c7:61:fe:2f:d0:ee:ad:a4:71:72:4b:
                    26:42:75:e9:01:da:8d:c7:64:41:b4:85:7d:7d:90:
                    f0:f7:c2:49:6d:5d:a2:29:45:65:74:ae:5d:fb:89:
                    f8:f3:b8:ea:f6:0a:55:f0:39:96:a8:b2:67:3d:36:
                    50:cc:fe:f5:2f:40:13:d3:22:f3:6d:ba:d9:93:49:
                    6b:fd:71:3b:a7:5e:ea:21:b2:46:ca:c3:94:35:15:
                    90:5b:f9:b9:c8:06:2e:10:52:a8:35:d4:f8:2c:fc:
                    df:ea:52:3a:b2:55:29:51:99:d0:b4:14:d0:7b:f3:
                    b5:3e:21:e0:ca:df:1c:5a:96:8b:d8:1b:8f:a0:6f:
                    8f:c7:2f:5b:36:37:73:e7:77:b6:3e:9b:6a:7b:09:
                    4e:01:a6:96:8b:0b:b7:7d:6c:c6:14:ec:19:5c:4d:
                    84:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:10:5E:21:E2:7B:5D:4D:DE:1E:6A:06:DD:77:0A:DE:CB:7A:98:EF
            X509v3 Authority Key Identifier:
                keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:d5:aa:41:7e:e4:3d:48:4b:19:82:77:ee:97:b8:76:14:e6:
         ad:85:5f:4e:8e:0f:cb:92:87:15:bf:4e:e5:16:ac:f7:c5:ce:
         4b:ed:eb:75:80:df:4b:c8:ce:64:b0:2d:78:09:62:52:f6:f2:
         5f:84:e4:c1:c4:66:aa:25:0a:40:2c:78:19:c2:2e:6b:93:f2:
         00:38:d1:40:60:17:51:a5:87:da:cc:56:83:bc:d3:45:1b:62:
         98:43:62:54:90:cd:69:9c:ff:fc:02:5a:01:ba:da:ce:89:9a:
         55:bb:d5:b8:96:43:88:e2:a5:af:ef:65:c6:36:cb:82:db:c4:
         04:bc:2a:69:4b:11:6c:d3:d8:11:1c:6e:6f:db:a6:ab:46:bc:
         2a:b4:da:f8:7f:4d:d0:67:10:8f:e1:55:1a:60:61:64:d1:19:
         f7:54:cd:34:17:2d:33:56:db:d7:42:7b:43:45:a4:31:0f:7a:
         cb:d7:34:e2:4b:cd:a1:c8:d1:c2:b3:a1:0e:87:16:c4:bc:4f:
         da:8a:61:79:b0:c6:52:73:11:a4:07:e6:58:5a:90:61:70:fc:
         e8:62:06:fb:9a:8d:c0:39:b8:6e:4d:f2:76:67:ca:6d:7a:a6:
         2c:b8:34:31:c0:5f:b7:8a:5b:83:49:23:b1:ac:27:76:3b:a8:
         fe:c9:02:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 18:06:33 2026 by rpki-client