Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa
File:                     3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa (raw, json)
Hash identifier:          Toe4XK9/hHjGe7TiXrq9wIpaDbrD72THIrtz/qMMlBE=
Subject key identifier:   8D:BA:D9:1A:B1:9F:7D:4D:D0:B9:22:C6:50:B9:9E:B7:4C:4B:7D:93
Certificate issuer:       /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial:       31E7C1F97D781D55757E338280DAD00F4E165A43
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa
Signing time:             Thu 16 Apr 2026 06:00:57 +0000
ROA not before:           Thu 16 Apr 2026 05:55:57 +0000
ROA not after:            Thu 15 Apr 2027 06:00:57 +0000
asID:                     21859
IP address blocks:        116.199.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e7:c1:f9:7d:78:1d:55:75:7e:33:82:80:da:d0:0f:4e:16:5a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
        Validity
            Not Before: Apr 16 05:55:57 2026 GMT
            Not After : Apr 15 06:00:57 2027 GMT
        Subject: CN=8DBAD91AB19F7D4DD0B922C650B99EB74C4B7D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:e9:00:9b:f0:56:bc:5b:3b:bf:d1:0e:34:
                    af:f9:ad:61:ad:c6:26:bd:87:15:44:d3:e9:36:6c:
                    1d:2f:43:a6:fb:42:cc:1d:2c:24:d3:2b:17:74:69:
                    8a:41:84:09:9b:03:3a:01:0a:bb:45:6c:6a:48:08:
                    65:6a:4e:61:cc:b9:e7:3c:f2:32:b7:29:81:66:87:
                    3a:6a:be:32:d6:e0:9a:59:7c:7b:92:9a:27:a0:2b:
                    14:35:f3:5a:92:68:2e:c9:f6:3c:d7:20:9c:98:ee:
                    55:ef:9f:e6:8f:b6:94:2a:56:45:9e:62:d6:38:e6:
                    2b:65:4a:0a:fc:24:64:1b:ca:1c:48:89:47:67:2a:
                    35:ad:44:b6:69:9b:7c:93:be:1d:47:ac:6f:26:73:
                    42:80:ed:a3:49:26:40:51:6f:c2:66:5c:ce:8b:28:
                    55:34:49:06:5d:0b:97:80:53:5a:63:da:5c:3f:fd:
                    2c:17:75:98:c5:68:26:01:1a:97:f6:b4:72:80:2e:
                    9e:39:2d:81:77:9e:3e:cf:ac:d4:ee:09:7a:a5:8e:
                    f0:28:2e:27:2c:03:38:2a:29:b0:7d:32:9b:68:f9:
                    05:cb:6e:9c:75:61:b5:b5:2f:ad:42:08:25:a1:7c:
                    4e:bc:36:a4:95:e0:28:c8:76:1b:5c:b9:9b:38:c4:
                    89:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BA:D9:1A:B1:9F:7D:4D:D0:B9:22:C6:50:B9:9E:B7:4C:4B:7D:93
            X509v3 Authority Key Identifier:
                keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3131362e3139392e3135322e302f32322d3232203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:04:cb:fd:08:e9:a2:e6:dc:2f:ef:5f:58:c9:4e:35:ef:d4:
         e1:06:ad:48:d2:cd:b0:32:5a:96:ff:4f:5e:07:47:83:c6:20:
         5e:a8:ad:4e:a9:1a:40:9e:26:f4:df:f8:af:cb:61:44:18:7a:
         b3:9e:bb:17:91:59:38:fb:78:b1:4f:d4:89:96:3f:1b:f1:41:
         0a:ed:c7:ff:38:59:f1:86:23:25:a3:72:ca:24:51:0e:67:87:
         37:3f:95:cd:7e:c8:d3:14:f4:8f:23:b4:f0:7b:e7:96:87:5c:
         68:45:e3:87:da:5e:1f:8c:d6:7d:8c:20:cd:37:66:58:f7:c9:
         c3:be:b6:93:7f:1a:21:89:09:25:f5:a1:44:68:57:40:f0:02:
         15:36:5f:67:eb:28:4d:3d:b1:52:a6:dc:69:72:24:26:76:1d:
         b6:d0:6b:71:5a:ee:fa:bf:0e:d5:10:2f:b3:68:f1:db:d0:25:
         50:62:22:60:ae:63:33:30:64:cb:f1:cf:e7:43:35:12:e6:ac:
         ae:7b:7f:b2:1b:0b:44:2a:e5:97:90:f0:73:3d:8c:32:d9:9b:
         1a:5c:1a:0d:4c:20:02:ac:58:71:f2:47:3c:d2:44:fd:01:ba:
         9e:a2:b3:21:18:28:c7:01:1c:86:ba:b4:0e:ad:65:d2:b3:90:
         4a:18:26:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:15:18 2026 by rpki-client