Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203633353637.roa
File:                     3131312e3232332e31322e302f32322d3232203d3e203633353637.roa (raw, json)
Hash identifier:          k99LTco67XPo+I0iCG1v+aRGY5vVKShD+1sHCa9pAfQ=
Subject key identifier:   12:C3:46:2A:A4:64:59:7A:BE:02:A6:7B:B6:35:B2:74:72:31:AB:54
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       56EDFC406780ECAA21D8F8132BE508B72B3779F4
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203633353637.roa
Signing time:             Tue 14 Apr 2026 07:27:54 +0000
ROA not before:           Tue 14 Apr 2026 07:22:54 +0000
ROA not after:            Tue 13 Apr 2027 07:27:54 +0000
asID:                     63567
IP address blocks:        111.223.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ed:fc:40:67:80:ec:aa:21:d8:f8:13:2b:e5:08:b7:2b:37:79:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 14 07:22:54 2026 GMT
            Not After : Apr 13 07:27:54 2027 GMT
        Subject: CN=12C3462AA464597ABE02A67BB635B2747231AB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:4f:44:79:f3:67:a6:51:6a:0f:79:cd:5a:
                    55:e5:ba:e5:98:03:ef:f7:f3:57:4e:86:c6:5d:72:
                    84:02:ad:8f:cf:31:ad:e3:23:6f:13:55:1f:7c:62:
                    69:f6:0b:91:49:db:58:c5:c5:fe:a5:eb:3e:d3:a0:
                    76:a2:f0:18:26:2a:96:4a:6c:5a:70:ed:43:cd:7a:
                    35:52:1b:7f:31:9c:00:30:2d:3c:40:31:f4:56:4e:
                    d8:2d:15:b4:c2:aa:c4:84:10:f4:62:82:f3:40:b9:
                    cf:58:54:75:76:e7:3e:b1:e4:fb:1d:ab:8b:fc:10:
                    b8:dc:f0:a8:3d:ba:1c:d6:94:78:89:98:de:77:ee:
                    b3:aa:88:79:5d:f3:7d:4b:cf:25:d7:55:32:6e:89:
                    02:b0:ab:2c:80:e4:8b:6b:16:13:54:35:ec:80:02:
                    19:b5:8c:88:dd:56:6a:bc:88:58:2d:e9:ca:26:6f:
                    b6:20:35:7f:97:4c:21:60:db:1d:eb:44:25:a3:a9:
                    78:56:30:a1:d5:4d:49:f2:14:61:37:92:ae:b2:23:
                    44:fc:26:db:f1:95:44:fc:40:da:00:2b:6e:7d:56:
                    5c:fa:40:1c:2d:e9:b2:cc:8e:e9:f2:c1:5c:97:35:
                    15:90:89:50:ec:9d:32:82:9a:b7:c7:c8:44:ac:1d:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C3:46:2A:A4:64:59:7A:BE:02:A6:7B:B6:35:B2:74:72:31:AB:54
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3131312e3232332e31322e302f32322d3232203d3e203633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.223.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:31:60:58:d1:39:51:06:8b:03:70:4e:ac:ac:c6:2e:3a:bc:
         86:a8:e4:63:3c:6d:fe:cd:53:ef:d9:4b:dd:b4:bc:23:1a:0d:
         ce:c0:af:ae:c5:27:49:58:ec:b5:01:48:b3:b0:e2:9e:90:96:
         88:2c:66:ea:74:2a:91:b6:4c:e8:4d:be:31:4c:cb:96:72:7a:
         50:72:89:d8:96:b5:56:37:0b:a4:dc:af:80:79:c4:9a:c0:c8:
         08:d3:78:ea:5b:a1:7a:24:e6:de:4d:d2:34:e9:69:ea:9d:75:
         08:1e:d4:33:00:17:24:f6:62:8e:4c:47:1b:ad:00:b2:2a:b0:
         76:3a:65:d7:41:85:13:f2:f3:b9:59:d4:fa:1c:11:eb:9f:b1:
         42:94:4c:1f:8a:88:05:bc:98:09:e2:53:41:cc:62:c3:74:26:
         98:45:ba:f9:25:5d:c8:86:94:8a:10:a5:0a:b4:af:98:2b:59:
         20:f7:2e:1b:9b:4a:00:f2:6e:da:91:66:00:be:57:c2:c3:9f:
         1c:f3:36:81:e9:05:76:01:e0:c2:f6:7e:13:bb:a0:88:7c:a1:
         48:35:ec:28:5f:76:bd:d4:31:ec:b6:6e:fb:0e:6d:ec:3e:94:
         53:4f:78:53:4c:7d:f0:ac:7f:07:b5:01:b1:0a:82:14:2c:36:
         70:cc:5d:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:58 2026 by rpki-client