Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3230332e302f32342d3234203d3e20313331353336.roa
File:                     3231312e3136312e3230332e302f32342d3234203d3e20313331353336.roa (raw, json)
Hash identifier:          EUY+yW80diYWVuOiJtIlBhTG+YWMpD67vHScGqyUTZg=
Subject key identifier:   C7:7A:41:4D:59:23:EC:0B:06:19:7E:61:54:B9:F6:FE:48:90:BC:6D
Certificate issuer:       /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial:       6D515310DBBB4996A7A4C52DC032062C866DFC31
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3230332e302f32342d3234203d3e20313331353336.roa
Signing time:             Thu 11 Jun 2026 04:33:31 +0000
ROA not before:           Thu 11 Jun 2026 04:28:31 +0000
ROA not after:            Thu 10 Jun 2027 04:33:31 +0000
asID:                     131536
IP address blocks:        211.161.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:51:53:10:db:bb:49:96:a7:a4:c5:2d:c0:32:06:2c:86:6d:fc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
        Validity
            Not Before: Jun 11 04:28:31 2026 GMT
            Not After : Jun 10 04:33:31 2027 GMT
        Subject: CN=C77A414D5923EC0B06197E6154B9F6FE4890BC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:61:d7:3e:54:8c:bb:79:f7:12:20:0f:9e:
                    fe:51:7b:dc:21:5b:61:90:cb:73:22:d8:11:7e:ff:
                    36:84:80:96:ac:41:f0:0a:43:83:9e:86:ca:03:94:
                    af:46:0e:31:a0:33:c5:39:4a:5a:ff:6d:84:46:0c:
                    ec:98:f1:a1:2a:8f:c6:73:66:61:82:1e:80:cd:2b:
                    f5:37:35:4f:d1:ae:f7:90:14:6a:50:b8:fb:66:e5:
                    65:25:eb:b3:99:d0:f8:5d:67:26:58:b6:c2:9e:16:
                    4d:8b:5e:6c:e5:5f:8d:76:e4:87:fa:6a:79:9c:b4:
                    0d:aa:f1:5c:19:00:ba:22:ce:5e:59:38:fb:60:eb:
                    97:2f:2c:61:e5:28:3f:b5:9e:5c:7c:dd:31:50:23:
                    4e:36:47:a2:13:2a:4c:a4:85:0c:62:93:99:09:96:
                    ca:b1:e2:ad:e0:a8:51:91:11:79:9b:0b:06:9b:b7:
                    6f:bb:3d:97:c7:76:76:fd:e4:c5:4a:64:b9:da:f1:
                    f8:fa:d8:97:19:f5:f1:96:60:0f:b9:eb:73:54:61:
                    22:d4:0a:63:a8:d4:52:c1:07:30:16:bb:1c:76:de:
                    7f:6b:a2:75:7b:d2:6e:02:53:bd:e9:aa:5a:1c:93:
                    ed:02:e0:1e:ab:2d:1b:4d:70:b5:5a:15:1c:b4:ee:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7A:41:4D:59:23:EC:0B:06:19:7E:61:54:B9:F6:FE:48:90:BC:6D
            X509v3 Authority Key Identifier:
                keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3230332e302f32342d3234203d3e20313331353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.161.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:74:cb:42:7e:a1:b6:04:e5:64:a3:db:f2:b6:c6:10:92:1f:
         70:27:57:4f:ef:54:bc:4f:93:38:22:ab:5d:43:64:04:7d:b9:
         fa:12:80:71:e1:d2:f9:60:bf:d1:1e:7a:cd:e0:08:d5:46:68:
         31:1d:2f:28:0c:d6:22:9c:ac:9b:2d:37:61:42:ff:7d:82:99:
         1d:dd:e9:21:6e:29:58:0f:d7:a2:0b:bb:4b:0a:44:b9:90:a8:
         03:b6:0c:9c:b4:d4:0b:f1:8c:7b:21:40:3a:33:03:86:4d:da:
         59:24:65:b9:bc:1c:1e:60:f3:e2:f6:9c:3d:56:5e:3c:ad:fc:
         6d:5f:f8:ea:0e:41:df:8e:e0:a5:38:8d:d3:e7:ac:ac:30:f3:
         a1:2b:c6:a9:5c:3b:48:db:28:5a:73:ab:63:a4:82:cd:c6:34:
         af:e7:a5:d2:a7:10:a5:16:e6:fe:6f:8c:2e:e2:cd:ee:40:e2:
         16:c5:55:4b:0f:f9:d3:60:64:44:7a:0d:4a:4c:04:3d:6f:ec:
         4a:55:4c:06:49:78:97:e5:bd:ca:9f:5d:91:a9:35:08:1a:c2:
         eb:75:17:ab:4c:42:bf:a3:07:51:5a:c9:be:05:56:f2:13:21:
         f0:c3:4f:3a:0b:f3:c0:a2:97:37:82:04:67:65:eb:5d:eb:28:
         37:d4:d1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:58 2026 by rpki-client