Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31362e302f32302d3230203d3e203233373731.roa
File:                     3230322e3135302e31362e302f32302d3230203d3e203233373731.roa (raw, json)
Hash identifier:          v2TgaAIHHDunNAOw1JM/bm0zQw8XfmuertseUpkXSRc=
Subject key identifier:   C2:7E:EB:B7:3C:21:53:5D:18:98:0F:35:22:DE:F3:5C:4E:4D:45:0D
Certificate issuer:       /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial:       051A20DA76892C645F250EC3922904708DD74637
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31362e302f32302d3230203d3e203233373731.roa
Signing time:             Tue 14 Apr 2026 02:17:59 +0000
ROA not before:           Tue 14 Apr 2026 02:12:59 +0000
ROA not after:            Tue 13 Apr 2027 02:17:59 +0000
asID:                     23771
IP address blocks:        202.150.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1a:20:da:76:89:2c:64:5f:25:0e:c3:92:29:04:70:8d:d7:46:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
        Validity
            Not Before: Apr 14 02:12:59 2026 GMT
            Not After : Apr 13 02:17:59 2027 GMT
        Subject: CN=C27EEBB73C21535D18980F3522DEF35C4E4D450D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:63:28:ee:42:72:21:86:d5:fc:b9:0f:8e:
                    29:d2:2f:26:e8:36:c5:c5:79:1c:1f:5f:a3:c7:16:
                    81:15:3b:39:e2:f0:42:00:13:54:c7:14:4d:8d:b7:
                    43:d8:8d:ce:5a:d7:46:58:9c:84:1c:7e:10:bd:f0:
                    4f:4f:31:ce:92:4d:8f:ef:f6:5b:39:83:13:a6:f3:
                    ea:26:8d:6d:6c:46:4c:8f:f1:14:18:30:6b:29:50:
                    10:15:54:ab:61:fb:3d:cb:29:10:c5:31:2a:7c:b0:
                    8e:23:7a:6f:84:b2:6a:49:c1:1e:93:08:9b:ab:59:
                    50:5b:3d:b8:f7:99:de:e6:70:38:b8:16:0c:d6:c4:
                    02:c2:71:7a:f2:21:94:16:52:35:aa:0a:fc:15:09:
                    b1:0d:a6:1b:6f:93:c6:1e:7b:5c:aa:8e:07:7c:98:
                    2f:5e:dd:7b:5c:b4:d9:e3:6e:eb:03:81:76:2f:71:
                    15:a5:d8:dd:21:af:b3:a1:58:54:dc:d4:96:06:bf:
                    08:e2:36:83:3c:9d:0b:79:86:a7:5f:eb:b5:91:76:
                    2d:a2:c3:c2:4b:37:4e:4f:a3:e7:f0:d8:a6:de:79:
                    14:81:f3:3d:8e:39:5f:5c:93:d7:18:2e:95:b2:98:
                    5f:7d:37:7b:8a:18:03:ee:28:c6:06:65:db:4e:81:
                    c7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7E:EB:B7:3C:21:53:5D:18:98:0F:35:22:DE:F3:5C:4E:4D:45:0D
            X509v3 Authority Key Identifier:
                keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31362e302f32302d3230203d3e203233373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:f3:df:5b:5a:b4:da:aa:0f:8e:42:c9:04:6c:38:e5:8f:
         7c:62:39:9e:c3:aa:dd:1c:46:af:8f:bc:cb:62:d1:f0:89:98:
         b8:91:13:6e:e1:9f:32:df:43:1b:1c:f1:fb:c5:39:2a:cf:42:
         51:bc:fc:55:12:58:7d:e9:75:37:f7:cf:c8:1d:6a:8f:0a:48:
         0f:75:75:20:1d:dd:7e:6f:70:9d:68:97:c8:66:2e:bc:b6:06:
         9d:14:ff:78:db:db:33:ed:f2:5a:85:ab:e7:73:af:39:a6:63:
         4a:c0:b1:b0:10:f5:ea:99:9f:72:52:25:99:9b:f6:8b:29:22:
         0a:d8:ec:5c:11:69:0a:95:ab:f5:99:05:e6:fd:f7:b2:81:42:
         17:87:2f:6b:6f:fd:a7:ae:fa:62:b3:93:56:7c:ef:cb:f3:2c:
         b9:8b:c7:b8:b7:3a:98:bf:59:a0:25:58:b2:71:da:75:44:d1:
         4d:6b:e7:c2:ee:f3:6a:ea:df:5c:e3:0a:fb:61:4e:b5:99:1c:
         35:ca:38:35:87:39:cc:0e:54:e0:9f:32:81:1c:9a:c8:a9:f4:
         a3:e3:06:70:3f:69:3f:f4:b1:74:06:87:68:ba:d0:80:8e:4e:
         fc:78:c1:9e:7f:f2:17:e5:08:5b:a5:58:1b:14:da:40:cc:2f:
         ca:74:f4:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:08 2026 by rpki-client