Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3130312e302f32342d3234203d3e20313331353336.roa
File:                     3231312e3136312e3130312e302f32342d3234203d3e20313331353336.roa (raw, json)
Hash identifier:          ii3JZMAtftwEr9yCKrIhjf4ILpgRV/V4U1+/dSss/xU=
Subject key identifier:   B6:CA:1E:A4:E7:7C:94:52:61:A3:06:63:28:F7:6F:E1:CC:09:DD:40
Certificate issuer:       /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial:       666C2263A17D061345D064750CFA8FE6CE2579FD
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3130312e302f32342d3234203d3e20313331353336.roa
Signing time:             Thu 11 Jun 2026 04:09:35 +0000
ROA not before:           Thu 11 Jun 2026 04:04:35 +0000
ROA not after:            Thu 10 Jun 2027 04:09:35 +0000
asID:                     131536
IP address blocks:        211.161.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Jun 2026 07:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:6c:22:63:a1:7d:06:13:45:d0:64:75:0c:fa:8f:e6:ce:25:79:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
        Validity
            Not Before: Jun 11 04:04:35 2026 GMT
            Not After : Jun 10 04:09:35 2027 GMT
        Subject: CN=B6CA1EA4E77C945261A3066328F76FE1CC09DD40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:9c:01:eb:91:27:18:46:a8:70:a5:76:d8:
                    fc:57:86:15:ed:f2:cc:5a:ac:f9:30:2a:7e:cc:48:
                    fa:d7:38:c8:03:01:36:81:3a:fc:b2:cf:09:f8:2e:
                    23:67:5a:2b:42:34:7f:1e:94:ae:15:75:e6:2f:00:
                    19:3e:90:82:e4:50:5a:1f:92:e4:2a:56:33:cf:16:
                    d5:e2:88:ec:20:7b:c7:04:36:59:38:5e:5d:ba:c1:
                    44:ea:7b:93:7b:cd:91:bb:11:f0:fd:f1:03:81:40:
                    6d:dd:00:8b:03:71:64:db:7b:80:2e:fc:f3:ef:a8:
                    41:cb:82:55:5e:a6:11:78:77:f2:59:10:a2:8a:70:
                    f4:2e:a5:98:ed:14:09:17:3b:4d:c1:77:69:1d:3e:
                    84:ac:47:b5:c6:29:fe:8a:bd:43:7c:fc:22:1e:cc:
                    86:0d:da:e9:24:50:ce:e9:97:05:28:48:09:54:9d:
                    9d:02:41:25:d0:d6:9e:1a:e2:66:e8:a0:24:67:c9:
                    f4:c4:a4:93:2a:ba:8c:e7:54:c7:b7:44:44:e5:79:
                    f3:d5:b2:fd:ee:3e:59:f6:c7:2f:7f:b7:d2:b1:85:
                    9c:80:d8:27:11:33:a9:52:08:2d:f1:65:56:57:fa:
                    9e:b3:e7:1c:81:2e:cd:55:11:ef:d5:f0:81:64:88:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CA:1E:A4:E7:7C:94:52:61:A3:06:63:28:F7:6F:E1:CC:09:DD:40
            X509v3 Authority Key Identifier:
                keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3130312e302f32342d3234203d3e20313331353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.161.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:40:a5:35:a5:77:36:47:ea:67:df:ed:ba:2e:61:6f:86:6c:
         12:50:e6:df:32:c9:53:5c:1f:4f:8b:b6:db:b1:6d:1c:a0:e5:
         da:69:d1:e9:f7:4f:d8:27:fc:29:98:c1:05:23:47:b8:e0:e8:
         a4:57:f1:88:6b:e8:57:53:fe:d2:ae:ae:e3:19:d8:41:75:2e:
         4e:5f:79:56:f3:d7:de:55:0e:e1:19:9a:3f:5a:b9:a7:97:75:
         b0:cc:13:78:bb:5f:ec:0b:16:f6:80:78:53:d7:27:fd:60:fa:
         59:42:b5:7d:b0:52:b7:a9:e8:ef:a8:40:19:f3:a4:85:cf:20:
         1e:7d:f4:44:ad:59:bb:19:80:06:a0:d0:15:a5:2b:86:80:23:
         03:e6:49:b4:f8:ce:6e:10:d3:40:b5:f0:08:2e:e4:81:7f:4f:
         05:99:39:46:51:8e:c5:10:57:aa:a9:07:c5:36:3f:f6:7d:d6:
         22:9b:40:8b:b6:16:dd:cf:2a:82:78:97:72:b3:70:54:de:47:
         5c:30:e8:90:97:5e:91:09:d1:43:48:ca:f6:a1:af:54:15:1a:
         90:33:d4:2f:56:ca:9a:82:79:a9:9d:03:9a:0e:3b:81:28:fd:
         f9:c3:38:2c:c7:01:d9:7b:40:7a:43:06:0d:b5:3b:bd:92:28:
         4b:ea:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:05:51 2026 by rpki-client