Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e302e302f31362d3234203d3e2037363431.roa
File:                     3231312e3134362e302e302f31362d3234203d3e2037363431.roa (raw, json)
Hash identifier:          5Vxerp08ZYtbI+pTvW4qz63YJDH/MDAWEpr9dQV/6Wc=
Subject key identifier:   74:D4:27:4D:6A:39:FD:44:8C:00:04:A6:F3:17:AC:3C:5D:AC:76:6D
Certificate issuer:       /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial:       77460A819942287AACDF329EEEEEFEFD97E3AA71
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e302e302f31362d3234203d3e2037363431.roa
Signing time:             Thu 16 Apr 2026 01:41:01 +0000
ROA not before:           Thu 16 Apr 2026 01:36:01 +0000
ROA not after:            Thu 15 Apr 2027 01:41:01 +0000
asID:                     7641
IP address blocks:        211.146.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:46:0a:81:99:42:28:7a:ac:df:32:9e:ee:ee:fe:fd:97:e3:aa:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
        Validity
            Not Before: Apr 16 01:36:01 2026 GMT
            Not After : Apr 15 01:41:01 2027 GMT
        Subject: CN=74D4274D6A39FD448C0004A6F317AC3C5DAC766D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:7d:39:09:0c:6d:f9:29:c7:db:fe:3c:56:
                    87:1a:ca:57:70:5c:e0:86:0f:a2:20:4a:9d:7c:e4:
                    43:45:83:fb:dd:0e:01:b1:85:ca:75:46:46:67:a0:
                    ab:fb:1e:b4:01:77:01:b5:2d:c8:a3:12:5d:33:59:
                    c6:a8:32:86:cb:24:3d:9a:77:26:da:3a:7f:92:b5:
                    4b:15:20:dc:0a:25:1a:9c:2a:a5:8b:96:1d:12:89:
                    b2:21:4f:58:99:0d:22:e1:0f:cf:d0:40:0e:07:25:
                    7e:79:d5:9d:61:be:cb:af:92:85:c9:a9:64:0f:89:
                    d7:3a:68:f1:67:06:c1:6e:c3:9f:2a:e3:56:f7:11:
                    6c:1f:22:5e:b7:65:57:2c:ca:59:dc:c8:0c:67:1a:
                    f8:9c:c9:24:43:79:01:06:46:f3:af:79:a0:31:18:
                    16:ff:cb:af:c8:ca:69:f6:c2:8e:04:da:61:2e:87:
                    78:cb:20:80:21:69:1e:8b:61:12:aa:22:e4:8b:82:
                    c2:26:ec:fc:0e:fa:e0:77:bf:dd:0c:c6:15:ba:99:
                    34:9e:fa:4d:b7:6e:d4:f9:df:85:bc:51:e1:c8:d8:
                    de:b6:9d:5f:91:6a:c5:06:a2:86:7d:d3:9b:e7:41:
                    ed:67:ff:a9:76:8c:fc:d0:b1:3c:bb:f4:7d:0d:6a:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D4:27:4D:6A:39:FD:44:8C:00:04:A6:F3:17:AC:3C:5D:AC:76:6D
            X509v3 Authority Key Identifier:
                keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3231312e3134362e302e302f31362d3234203d3e2037363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:b8:f6:0e:d0:05:27:70:1c:09:bb:22:28:16:4a:04:76:
         3b:5c:67:fe:78:96:fb:df:89:30:22:85:eb:ad:dd:04:b5:62:
         72:33:97:b2:f7:c5:eb:04:a9:c1:f2:07:cf:92:2b:08:8f:f7:
         0f:4c:bf:7c:eb:c7:a7:2c:32:f3:95:ff:5f:d5:50:cc:f8:8a:
         43:7e:be:48:35:7c:f1:45:6a:dc:7e:60:25:c4:7e:ec:cf:9d:
         31:05:19:c2:57:aa:1a:1a:bb:63:cf:cd:9a:b8:e7:0d:da:c6:
         39:a4:8a:cb:da:ea:a8:e5:83:d2:7b:46:2b:3d:69:19:83:3a:
         50:0a:bf:73:07:67:34:8e:47:f5:20:cf:50:a8:68:ba:4d:ad:
         7d:5b:b0:9a:1d:63:a1:28:db:45:f1:d3:07:f1:df:cd:c1:b7:
         54:a3:18:14:fc:a2:24:44:d0:3c:a0:f6:57:fe:01:d5:5d:9c:
         60:89:a5:d9:9a:b8:77:9f:bb:38:0a:4a:63:94:65:3e:05:c3:
         4f:a8:55:82:31:46:7d:c6:55:df:5e:60:39:a9:15:08:af:ed:
         c9:75:ab:b9:b7:fd:94:81:ef:a7:d9:8f:84:bb:10:59:ee:6e:
         03:af:c6:cb:64:44:b6:5f:32:66:8c:a5:f7:39:b7:b4:f5:48:
         f9:47:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:23:37 2026 by rpki-client