Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa
File:                     3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier:          WkFPiKlYJz6jmeh4Y+K4Zer0JOq+QHQvGMcujzWOVz0=
Subject key identifier:   11:51:22:FC:75:99:42:B1:A3:BB:A9:58:D7:30:F4:E1:56:BE:65:6D
Certificate issuer:       /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial:       2CC94472065B15CE45C4A19D76DE7935AE0A12E1
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa
Signing time:             Thu 25 Jun 2026 08:05:06 +0000
ROA not before:           Thu 25 Jun 2026 08:00:06 +0000
ROA not after:            Thu 24 Jun 2027 08:05:06 +0000
asID:                     134762
IP address blocks:        210.76.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 07:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c9:44:72:06:5b:15:ce:45:c4:a1:9d:76:de:79:35:ae:0a:12:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
        Validity
            Not Before: Jun 25 08:00:06 2026 GMT
            Not After : Jun 24 08:05:06 2027 GMT
        Subject: CN=115122FC759942B1A3BBA958D730F4E156BE656D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:69:f3:39:15:d4:6b:03:43:9c:c1:24:bf:
                    4e:92:72:2e:c7:98:6f:2f:80:88:44:5b:55:23:be:
                    b9:76:6d:ba:92:c5:38:08:57:fb:b0:aa:4f:41:13:
                    ec:b5:e2:70:65:36:0b:69:6b:0f:93:42:92:1e:f0:
                    75:a7:c7:22:c5:45:cc:ef:53:9f:70:0d:b3:ea:e7:
                    08:cf:0c:d4:d6:47:6a:c7:22:15:63:fc:7b:e7:46:
                    72:80:c3:bd:ef:77:fa:34:5b:be:3d:c3:22:3f:c6:
                    d3:2b:aa:fa:03:75:cb:93:bd:84:5e:57:4b:b7:68:
                    80:23:be:ca:61:68:75:f3:66:cb:ed:a8:88:2d:41:
                    7f:52:98:5e:d9:8b:ca:36:a0:a5:1e:f6:af:d2:c4:
                    4c:a9:9c:d3:66:2a:a5:87:5e:2f:f4:35:a0:53:9c:
                    20:6a:63:13:cc:22:57:34:f2:66:cc:82:cf:e1:37:
                    e1:d6:fc:da:c1:4b:fd:cd:79:de:03:7f:16:01:ec:
                    67:1d:08:55:12:68:c9:d7:37:4f:14:64:c8:22:a9:
                    16:42:6d:3e:93:3e:fa:91:c6:a6:77:f7:91:8c:b8:
                    6b:e1:3b:a7:ac:21:2a:53:23:7e:21:50:eb:58:45:
                    39:b3:aa:80:60:1c:ce:5a:6c:25:5b:a1:49:be:bb:
                    d3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:51:22:FC:75:99:42:B1:A3:BB:A9:58:D7:30:F4:E1:56:BE:65:6D
            X509v3 Authority Key Identifier:
                keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:9e:ac:48:ef:e6:cc:e6:43:85:9a:a0:3a:3b:34:02:96:cd:
         de:6e:3b:2f:d9:90:cb:4c:11:5b:86:d4:d4:d9:f9:68:8a:e2:
         27:fe:20:ec:ad:05:1c:24:58:20:e1:5e:5e:39:6d:a0:c1:36:
         0b:35:73:3c:9c:fe:59:34:8d:9c:88:5b:8d:43:15:d4:2b:c9:
         63:72:5d:65:fd:21:35:9c:7b:da:42:a2:34:6a:71:75:f0:11:
         48:50:cd:eb:d7:0c:b9:14:7c:b6:1e:9d:c1:8e:9d:6a:62:c5:
         a7:1f:b7:15:28:95:65:8f:dd:e5:da:fa:38:19:a0:55:7f:fb:
         ef:43:2b:ba:d8:c1:91:d3:fc:92:e3:7e:c3:31:6f:80:73:75:
         fe:a7:8d:b7:0c:97:13:49:5b:86:c2:d0:42:32:74:c0:bf:1e:
         a5:c3:d9:f1:5f:6a:ab:5e:1c:60:c8:3c:c5:95:b2:2c:4d:4c:
         13:72:c0:8f:f0:15:f4:52:9a:e9:8f:3c:66:7d:ff:37:ca:58:
         93:c7:4f:5d:54:d3:0b:e0:67:d6:b0:dc:28:a1:fa:11:9c:c7:
         ea:06:c9:22:64:34:48:a3:1a:ee:b4:19:40:68:de:17:f8:f8:
         49:9b:f5:44:28:e8:98:31:75:7d:2d:0c:21:25:d1:d7:d4:d0:
         d4:03:c5:de
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIULMlEcgZbFc5FxKGddt55Na4KEuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAz
QjE5MTZGQTAeFw0yNjA2MjUwODAwMDZaFw0yNzA2MjQwODA1MDZaMDMxMTAvBgNV
BAMTKDExNTEyMkZDNzU5OTQyQjFBM0JCQTk1OEQ3MzBGNEUxNTZCRTY1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JWnzORXUawNDnMEkv06Sci7H
mG8vgIhEW1Ujvrl2bbqSxTgIV/uwqk9BE+y14nBlNgtpaw+TQpIe8HWnxyLFRczv
U59wDbPq5wjPDNTWR2rHIhVj/HvnRnKAw73vd/o0W749wyI/xtMrqvoDdcuTvYRe
V0u3aIAjvsphaHXzZsvtqIgtQX9SmF7Zi8o2oKUe9q/SxEypnNNmKqWHXi/0NaBT
nCBqYxPMIlc08mbMgs/hN+HW/NrBS/3Ned4DfxYB7GcdCFUSaMnXN08UZMgiqRZC
bT6TPvqRxqZ395GMuGvhO6esISpTI34hUOtYRTmzqoBgHM5abCVboUm+u9PxAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUEVEi/HWZQrGju6lY1zD04Va+ZW0wHwYDVR0j
BBgwFoAUsLU3sHR9YBOwYVKu530VIDsZFvowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
MjA2NTI5Mjk5NDgwNTc5Ny8wL0IwQjUzN0IwNzQ3RDYwMTNCMDYxNTJBRUU3N0Qx
NTIwM0IxOTE2RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAzQjE5MTZGQS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMjIwNjUyOTI5OTQ4MDU3OTcvMC8zMjMxMzAyZTM3
MzYyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNDM3MzYzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAtJMqDANBgkqhkiG9w0BAQsFAAOCAQEAtZ6sSO/mzOZDhZqgOjs0
ApbN3m47L9mQy0wRW4bU1Nn5aIriJ/4g7K0FHCRYIOFeXjltoME2CzVzPJz+WTSN
nIhbjUMV1CvJY3JdZf0hNZx72kKiNGpxdfARSFDN69cMuRR8th6dwY6damLFpx+3
FSiVZY/d5dr6OBmgVX/770MrutjBkdP8kuN+wzFvgHN1/qeNtwyXE0lbhsLQQjJ0
wL8epcPZ8V9qq14cYMg8xZWyLE1ME3LAj/AV9FKa6Y88Zn3/N8pYk8dPXVTTC+Bn
1rDcKKH6EZzH6gbJImQ0SKMa7rQZQGjeF/j4SZv1RCjomDF1fS0MISXR19TQ1APF
3g==
-----END CERTIFICATE-----
Generated at Tue Jul 7 18:07:44 2026 by rpki-client