Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e2034383337.roa
File:                     3131312e3232332e31322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          7L65d3NUCsavOk08fi048GZkIGHybVqFzU8Y4+1K4Ss=
Subject key identifier:   72:48:8B:84:89:C3:79:74:5F:21:67:67:DD:77:7D:13:63:46:48:2B
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       674838869E248E8545CABD768EE06DD31CC467FB
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e2034383337.roa
Signing time:             Tue 14 Apr 2026 07:27:54 +0000
ROA not before:           Tue 14 Apr 2026 07:22:54 +0000
ROA not after:            Tue 13 Apr 2027 07:27:54 +0000
asID:                     4837
IP address blocks:        111.223.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 15:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:48:38:86:9e:24:8e:85:45:ca:bd:76:8e:e0:6d:d3:1c:c4:67:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 14 07:22:54 2026 GMT
            Not After : Apr 13 07:27:54 2027 GMT
        Subject: CN=72488B8489C379745F216767DD777D136346482B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:8d:b5:ba:03:05:2b:09:af:27:2a:68:6c:
                    9e:20:1e:a1:04:df:eb:3e:f8:f3:a6:5e:d9:fb:e9:
                    c9:8b:5a:d1:70:bb:08:da:5b:57:bd:97:8e:3b:c8:
                    11:4f:6b:ec:7a:97:4b:da:72:7a:df:2e:93:d5:92:
                    5b:4d:c4:73:ff:ba:1c:09:27:18:d1:a1:b1:bf:84:
                    07:7e:a0:2f:98:6b:70:91:24:f6:38:18:76:f6:76:
                    d5:31:2b:83:d2:04:0b:b4:e7:b0:fe:44:4c:07:90:
                    16:99:7d:9a:64:b6:c7:5a:ea:b0:07:c8:c7:8f:89:
                    06:3b:45:4c:e7:0c:ac:47:bf:3e:56:d9:dc:90:9e:
                    98:da:66:7b:4e:d9:be:fa:14:16:28:03:e3:25:0d:
                    dd:ea:93:b0:e2:3f:1d:2d:10:3b:31:41:c9:d9:18:
                    57:cb:15:8f:75:03:3e:c0:2f:d6:f9:92:31:8e:b0:
                    c4:af:21:04:f5:0a:8b:5b:ce:2c:8c:8f:1e:21:6f:
                    b1:a2:98:34:61:e1:ca:67:56:2d:d5:2a:5b:5f:d9:
                    e8:6f:7e:03:77:fe:3d:68:43:58:5d:38:b9:6e:c7:
                    97:68:76:04:b9:12:a8:af:f5:e8:c9:56:14:44:88:
                    49:c4:09:6b:17:b5:cf:65:61:47:6b:77:e1:e9:ad:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:48:8B:84:89:C3:79:74:5F:21:67:67:DD:77:7D:13:63:46:48:2B
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.223.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:97:f9:7c:27:64:bb:8f:d9:58:0c:3e:8c:4a:90:07:fe:44:
         06:b8:14:be:d7:0a:ce:f3:c3:bc:24:39:c5:0b:ec:5d:a7:b0:
         3f:7a:37:40:23:af:01:e8:1c:b0:ce:63:22:6c:bb:83:03:43:
         7c:6a:bd:f1:13:6c:6f:a7:7d:0b:bc:40:de:a6:60:5a:e6:22:
         12:5f:0a:d3:c3:c3:f3:80:49:08:ff:14:a3:57:91:bb:6f:d1:
         de:6c:45:d9:11:19:8d:85:d6:ab:e1:98:fc:cb:94:fa:69:72:
         3c:31:65:76:74:ca:eb:df:e4:c9:8a:d1:ce:10:7f:06:5a:65:
         97:18:51:10:ec:5a:22:50:4a:98:ff:6d:cb:e5:c6:9e:7d:44:
         7d:c3:04:72:7d:22:92:46:85:ee:cc:b7:2b:03:47:0e:14:3a:
         8d:50:94:49:fe:f3:88:d6:f3:3f:dc:6f:69:1f:34:79:14:f4:
         41:0e:4e:3d:17:b8:59:35:ed:4a:ff:ee:de:89:60:39:a2:02:
         dc:2a:09:91:3f:86:6a:cc:ee:3c:b2:ac:2c:28:dc:5e:9d:67:
         1a:ab:54:c0:5e:f1:de:ec:38:ad:31:f2:1a:8a:24:d8:de:7c:
         32:9e:67:af:2a:53:1e:cb:60:2c:a8:59:d2:c8:74:8c:5f:83:
         92:02:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:20 2026 by rpki-client