Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203536303436.roa
File:                     3131312e3232332e31322e302f32322d3232203d3e203536303436.roa (raw, json)
Hash identifier:          1uXgwSQpOOXIpjCSuq7v7q6EV6y3epDpSiwPZ4KfmcQ=
Subject key identifier:   3A:5F:29:FB:9D:48:F8:81:DE:39:8E:70:BD:05:C9:3E:55:02:33:80
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       71617B57E7919EAC48CBF9EDCA9053281DA10EF0
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203536303436.roa
Signing time:             Tue 14 Apr 2026 07:28:17 +0000
ROA not before:           Tue 14 Apr 2026 07:23:17 +0000
ROA not after:            Tue 13 Apr 2027 07:28:17 +0000
asID:                     56046
IP address blocks:        111.223.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:61:7b:57:e7:91:9e:ac:48:cb:f9:ed:ca:90:53:28:1d:a1:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 14 07:23:17 2026 GMT
            Not After : Apr 13 07:28:17 2027 GMT
        Subject: CN=3A5F29FB9D48F881DE398E70BD05C93E55023380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:ed:76:aa:5b:30:54:00:21:4c:e7:9f:95:
                    b7:96:27:92:d5:0f:93:32:2a:dd:91:20:85:c9:2f:
                    1f:2b:ab:15:31:ff:fb:f6:3c:bd:a8:c6:81:00:cd:
                    4f:3d:c2:c7:7b:9d:7d:a3:7f:cb:a1:b3:12:d7:93:
                    a8:35:ea:42:69:36:5c:0c:00:6f:b0:3b:89:0d:cf:
                    88:c4:90:d3:b7:ad:e3:f1:ee:b4:c0:54:a3:23:09:
                    6c:a5:09:e7:79:bc:2f:a5:b0:c6:f3:20:71:9e:70:
                    9b:66:fa:f0:11:87:16:9e:4b:00:df:9d:27:c7:0d:
                    c3:6a:21:ae:ed:d6:3c:f8:31:6a:21:11:6d:e4:69:
                    97:47:de:22:c8:4d:fd:be:c4:34:42:1b:80:01:12:
                    c0:e0:6d:f9:38:74:d5:54:45:6e:d2:3c:b3:6f:55:
                    95:b9:52:ef:43:68:55:96:eb:dc:95:d6:4e:eb:2c:
                    9a:b6:8e:f3:03:d9:cc:b3:43:ae:b6:bb:4d:59:7f:
                    17:0e:89:81:10:af:70:4a:27:2d:65:06:2d:a2:da:
                    5b:6c:45:22:54:9d:94:96:f6:0d:b7:74:64:76:9a:
                    a0:f2:07:6c:52:ee:a7:53:bc:69:72:99:ef:d5:ef:
                    c3:97:93:c9:fe:55:d6:e5:a2:a5:1b:57:e1:28:99:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5F:29:FB:9D:48:F8:81:DE:39:8E:70:BD:05:C9:3E:55:02:33:80
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.223.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:0a:43:0d:a5:b8:f0:ab:5f:76:43:d6:0b:cb:3d:04:c9:92:
         5f:81:fd:6b:ce:43:1b:c2:f9:d7:b5:ab:64:50:d5:9a:c7:fc:
         fb:e8:34:45:4f:89:8a:91:d8:45:5b:1e:bd:1a:41:6d:0f:40:
         8f:14:7d:d9:42:04:c4:32:de:21:7e:b5:c0:75:9a:5b:d0:b5:
         cf:3d:bd:81:1a:5e:5b:e5:37:54:d1:3d:83:94:19:4a:19:ac:
         64:b3:48:1f:b0:fe:1e:99:14:e7:58:85:65:bb:cf:8f:aa:90:
         4d:b2:0a:a6:d8:f5:25:5f:97:fc:69:f5:2e:78:cb:2a:ca:5e:
         b4:0d:35:08:03:96:e7:0a:a9:36:95:12:38:d0:ff:7d:52:95:
         0c:33:ac:bc:a5:26:f1:1d:c7:7e:16:40:bb:7f:38:43:70:52:
         ec:54:71:60:82:1b:4e:64:65:25:38:bb:57:6a:1f:fd:a0:72:
         05:80:d6:4c:1e:40:c3:bb:6d:4b:8e:82:f9:73:0d:cc:ff:cb:
         9b:71:dd:b9:53:e9:39:c1:fa:56:a2:40:16:83:c0:30:01:dc:
         06:af:ed:39:ca:07:1d:36:8a:6b:f2:64:4a:71:bd:92:3a:e5:
         72:19:fe:42:85:f6:ea:49:fc:37:5d:50:a4:ee:f3:71:ca:06:
         1a:91:d9:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:04 2026 by rpki-client