Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3232312e302f32342d3234203d3e20313331353336.roa
File:                     3231312e3136312e3232312e302f32342d3234203d3e20313331353336.roa (raw, json)
Hash identifier:          HJttaNOAYXD3fpbBJQqAMDoPxtoi8sq6TnfqmNGwbbI=
Subject key identifier:   CA:10:38:74:21:8A:19:53:83:A8:47:3D:26:B7:16:04:57:89:6D:0F
Certificate issuer:       /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial:       4126A4F93DEB629FEC867E8ED6A066252B7FB9CB
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3232312e302f32342d3234203d3e20313331353336.roa
Signing time:             Thu 11 Jun 2026 04:33:31 +0000
ROA not before:           Thu 11 Jun 2026 04:28:31 +0000
ROA not after:            Thu 10 Jun 2027 04:33:31 +0000
asID:                     131536
IP address blocks:        211.161.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:26:a4:f9:3d:eb:62:9f:ec:86:7e:8e:d6:a0:66:25:2b:7f:b9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
        Validity
            Not Before: Jun 11 04:28:31 2026 GMT
            Not After : Jun 10 04:33:31 2027 GMT
        Subject: CN=CA103874218A195383A8473D26B7160457896D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:31:b3:5b:b8:19:d1:3c:73:fe:0d:14:ec:
                    87:45:f7:08:51:a8:88:62:30:d3:cb:0b:34:e2:d0:
                    e9:4d:98:ef:ec:81:4d:7a:fa:2d:a2:f4:ee:9a:14:
                    7c:51:4c:cf:cf:27:5b:00:22:6f:89:ed:e9:7f:73:
                    70:41:63:dc:fd:73:59:a4:f2:3c:cf:49:98:8e:b0:
                    e6:9a:54:8e:16:25:d2:fc:37:cc:a2:65:54:76:59:
                    49:c6:e9:9e:56:e5:a6:da:4e:db:7c:38:45:16:90:
                    90:f2:f3:a3:13:bc:3e:a0:68:42:c6:23:e0:eb:f3:
                    5a:40:cf:3d:10:56:c8:6a:b8:2d:d3:2b:48:6d:a1:
                    3e:3e:91:2a:da:8a:a5:3d:3e:75:7c:1c:c3:c4:4a:
                    f2:c8:ee:bd:77:a0:39:c4:e0:27:f0:4b:6d:92:c4:
                    e2:d5:c5:73:3f:8d:14:be:56:b7:21:6b:e0:cc:75:
                    80:fb:c8:14:f5:e0:ed:56:35:a6:c3:8f:04:32:7f:
                    c2:4b:8a:cb:fc:8d:c6:9a:9a:f5:89:ee:58:3e:74:
                    28:18:4c:57:2d:df:a3:db:79:e2:30:85:4b:68:58:
                    26:48:c6:5e:ad:48:f1:d7:92:e1:79:0e:c1:7a:f6:
                    9f:f4:f1:95:87:08:de:dd:8c:5a:31:63:87:a7:2c:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:10:38:74:21:8A:19:53:83:A8:47:3D:26:B7:16:04:57:89:6D:0F
            X509v3 Authority Key Identifier:
                keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3231312e3136312e3232312e302f32342d3234203d3e20313331353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.161.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:0e:a7:57:94:3c:a3:cf:e7:4e:2c:8b:bd:03:78:1d:ed:
         c3:f1:9e:a9:29:96:64:5e:6f:86:1a:61:f3:32:1b:72:a0:4c:
         d9:13:57:35:a6:5d:b5:77:97:9f:83:fb:af:46:dd:d9:95:da:
         de:6e:5c:9e:cc:3e:50:14:e9:e1:ec:af:28:ff:cc:42:b2:4f:
         3c:21:4e:d4:06:90:a7:03:92:49:e5:4b:9c:e4:39:4d:33:5b:
         4b:1d:9d:4e:bc:68:66:80:dd:85:d8:44:d5:86:32:0c:ff:32:
         d5:7a:4f:52:2f:22:f7:76:4f:fc:39:fa:e5:49:94:4f:e0:79:
         22:c2:24:01:40:0b:33:c3:a3:78:a1:82:b8:00:ef:ed:78:c5:
         99:33:1e:09:b0:05:bc:0a:d9:94:bc:d8:18:84:b8:9f:1e:d6:
         54:09:33:d3:51:78:60:ae:23:cc:51:15:f0:c8:16:ac:6c:df:
         4b:ac:45:2e:a4:e1:2c:f3:b9:6c:ae:72:bc:01:cb:2a:84:9c:
         0a:60:10:0a:9e:f9:0a:92:1b:64:77:52:bb:cc:59:84:44:4e:
         41:6d:c3:cd:d2:49:83:0c:b7:26:ea:e1:73:d9:ce:3b:a2:80:
         70:3f:f5:f6:5a:55:33:2c:40:a1:73:9c:4d:35:30:12:69:63:
         07:9b:50:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:52 2026 by rpki-client