Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa
File:                     3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa (raw, json)
Hash identifier:          ncGJvfVZz1aXP6VWJdrIhLgknTdYP6bRFVSX0ogc/kg=
Subject key identifier:   5B:3E:E8:04:BA:A0:A0:07:23:B4:02:4E:70:F2:EC:F9:1B:49:00:72
Certificate issuer:       /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial:       28EFA2F0A445A751587E4547F02737B8C75C8965
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa
Signing time:             Thu 25 Jun 2026 08:05:07 +0000
ROA not before:           Thu 25 Jun 2026 08:00:07 +0000
ROA not after:            Thu 24 Jun 2027 08:05:07 +0000
asID:                     134762
IP address blocks:        210.76.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 07:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ef:a2:f0:a4:45:a7:51:58:7e:45:47:f0:27:37:b8:c7:5c:89:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
        Validity
            Not Before: Jun 25 08:00:07 2026 GMT
            Not After : Jun 24 08:05:07 2027 GMT
        Subject: CN=5B3EE804BAA0A00723B4024E70F2ECF91B490072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:77:8f:a0:b9:a9:c3:1e:93:6f:21:ac:04:
                    3b:ed:2c:54:28:2c:65:ce:6b:23:65:e1:3e:39:0d:
                    1d:2b:1e:7d:33:86:c6:9c:66:c8:e6:25:e7:e8:04:
                    60:73:de:4a:a9:65:bc:57:99:d1:e3:5d:28:ba:23:
                    72:61:12:72:a0:21:5a:4a:91:db:0d:62:27:bd:2f:
                    5a:b1:6d:47:c1:69:d4:a9:9b:af:17:57:dc:d8:1c:
                    60:b0:77:3b:23:14:be:8d:84:69:aa:bc:8b:db:64:
                    32:29:0e:20:00:3e:5b:6f:ea:f5:9a:68:0e:21:99:
                    07:66:b1:e9:72:c5:52:e8:fe:a7:6c:8e:eb:68:5f:
                    e2:a4:88:9a:9f:49:78:da:04:2d:7d:9b:63:8b:ed:
                    13:9a:56:16:b3:5c:da:08:6c:27:05:f4:65:2f:ae:
                    9f:25:01:9b:bb:59:68:11:ab:69:d3:c7:b0:81:9e:
                    39:0a:b4:e2:fc:4b:1e:65:c8:9b:eb:f6:fa:0a:dd:
                    b2:e3:3f:c9:3c:b6:b4:46:5c:79:b9:7a:4f:27:55:
                    a2:54:4a:9e:df:58:4c:62:d6:f3:c0:bd:50:a0:3e:
                    ae:f0:8a:97:dd:08:65:d3:11:db:5a:05:98:88:d9:
                    6d:4f:d3:43:f7:c4:0b:42:5c:5a:aa:a4:ae:cb:d3:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3E:E8:04:BA:A0:A0:07:23:B4:02:4E:70:F2:EC:F9:1B:49:00:72
            X509v3 Authority Key Identifier:
                keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.76.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:45:f2:27:19:57:0b:96:3d:aa:07:1b:e4:1f:b5:ac:a9:c4:
         e2:fe:58:45:01:1e:3d:60:05:c9:8b:43:26:f6:57:bf:a3:5f:
         78:82:e7:a8:2d:20:83:f7:f4:f0:3d:d7:fe:3f:7c:8f:2f:80:
         bb:81:be:5f:02:f1:7e:65:3f:54:10:b6:ef:29:76:c6:42:bc:
         0f:e7:d1:69:35:ae:f2:cc:f3:0c:6c:15:42:79:29:90:e8:3e:
         81:53:00:04:9b:57:5a:c6:ea:d5:fc:a1:25:55:ab:cb:7f:ba:
         aa:65:68:1d:9f:a0:40:a8:12:bd:70:44:e3:bf:01:ed:04:fd:
         ee:00:f8:95:37:31:a6:ab:1a:a0:a9:8a:37:bf:57:c8:f7:f1:
         ff:9d:cb:de:ac:99:76:46:26:9c:11:59:5d:5b:ea:94:e8:e0:
         cf:f5:6b:62:1c:ac:0c:61:ed:58:a7:6d:1d:2f:54:e4:92:e4:
         07:13:a1:b6:ac:91:d6:f8:48:42:ca:e7:b5:2a:84:33:12:83:
         ac:39:25:52:f1:b0:dd:fd:8a:c2:34:cd:c0:ea:b4:0b:bf:64:
         a3:99:f7:01:05:c8:3f:03:35:5a:27:f8:f3:43:47:b3:1d:de:
         60:89:10:e9:3a:03:fd:72:d6:d5:f5:e0:46:b1:57:b8:f4:26:
         25:72:bb:10
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUKO+i8KRFp1FYfkVH8Cc3uMdciWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAz
QjE5MTZGQTAeFw0yNjA2MjUwODAwMDdaFw0yNzA2MjQwODA1MDdaMDMxMTAvBgNV
BAMTKDVCM0VFODA0QkFBMEEwMDcyM0I0MDI0RTcwRjJFQ0Y5MUI0OTAwNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/XePoLmpwx6TbyGsBDvtLFQo
LGXOayNl4T45DR0rHn0zhsacZsjmJefoBGBz3kqpZbxXmdHjXSi6I3JhEnKgIVpK
kdsNYie9L1qxbUfBadSpm68XV9zYHGCwdzsjFL6NhGmqvIvbZDIpDiAAPltv6vWa
aA4hmQdmselyxVLo/qdsjutoX+KkiJqfSXjaBC19m2OL7ROaVhazXNoIbCcF9GUv
rp8lAZu7WWgRq2nTx7CBnjkKtOL8Sx5lyJvr9voK3bLjP8k8trRGXHm5ek8nVaJU
Sp7fWExi1vPAvVCgPq7wipfdCGXTEdtaBZiI2W1P00P3xAtCXFqqpK7L017jAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUWz7oBLqgoAcjtAJOcPLs+RtJAHIwHwYDVR0j
BBgwFoAUsLU3sHR9YBOwYVKu530VIDsZFvowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
MjA2NTI5Mjk5NDgwNTc5Ny8wL0IwQjUzN0IwNzQ3RDYwMTNCMDYxNTJBRUU3N0Qx
NTIwM0IxOTE2RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAzQjE5MTZGQS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMjIwNjUyOTI5OTQ4MDU3OTcvMC8zMjMxMzAyZTM3
MzYyZTMxMzgzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNDM3MzYzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAtJMtDANBgkqhkiG9w0BAQsFAAOCAQEAn0XyJxlXC5Y9qgcb5B+1
rKnE4v5YRQEePWAFyYtDJvZXv6NfeILnqC0gg/f08D3X/j98jy+Au4G+XwLxfmU/
VBC27yl2xkK8D+fRaTWu8szzDGwVQnkpkOg+gVMABJtXWsbq1fyhJVWry3+6qmVo
HZ+gQKgSvXBE478B7QT97gD4lTcxpqsaoKmKN79XyPfx/53L3qyZdkYmnBFZXVvq
lOjgz/VrYhysDGHtWKdtHS9U5JLkBxOhtqyR1vhIQsrntSqEMxKDrDklUvGw3f2K
wjTNwOq0C79ko5n3AQXIPwM1Wif480NHsx3eYIkQ6ToD/XLW1fXgRrFXuPQmJXK7
EA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 18:04:09 2026 by rpki-client