Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa
File:                     3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa (raw, json)
Hash identifier:          E5iVhVPLWbT/XT4sHNLiVBGtFgA8psi4gNVecPAc8O4=
Subject key identifier:   C1:74:39:92:0D:50:CB:AE:BC:0F:27:A6:5D:C8:02:F4:BC:15:4A:E3
Certificate issuer:       /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial:       08545AB5BF120154496CC5CFCA6C7B3D4B50702F
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa
Signing time:             Tue 14 Apr 2026 06:47:42 +0000
ROA not before:           Tue 14 Apr 2026 06:42:42 +0000
ROA not after:            Tue 13 Apr 2027 06:47:42 +0000
asID:                     21859
IP address blocks:        202.165.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:54:5a:b5:bf:12:01:54:49:6c:c5:cf:ca:6c:7b:3d:4b:50:70:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
        Validity
            Not Before: Apr 14 06:42:42 2026 GMT
            Not After : Apr 13 06:47:42 2027 GMT
        Subject: CN=C17439920D50CBAEBC0F27A65DC802F4BC154AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:cb:cd:13:a3:b7:0d:6f:39:3c:f7:ba:0d:
                    d7:f0:41:5e:61:cb:70:22:32:8f:f7:0e:a3:45:50:
                    9b:83:8b:df:81:3c:0b:a9:a4:8d:e5:b7:c8:e0:8d:
                    b9:71:8b:39:8f:a4:06:2a:e6:39:f0:f8:d3:ee:a5:
                    d9:70:f5:02:68:a6:46:a2:fc:42:7b:52:58:af:04:
                    01:d4:d6:fb:ea:f5:46:e6:f5:fc:77:38:d8:7e:0d:
                    2c:27:28:5b:49:0a:f4:5e:7f:4e:e1:03:98:75:6a:
                    65:72:89:39:8a:cf:b6:41:87:3f:c9:08:67:6a:cf:
                    76:e5:37:e8:c9:3b:c9:06:0d:a0:94:29:36:a1:f0:
                    53:89:4f:9b:f0:b0:48:fa:56:01:15:c4:b9:b4:aa:
                    a6:1c:5c:09:6b:72:d8:93:cd:40:5a:f0:1e:17:84:
                    79:1d:f0:01:0d:5e:37:a3:19:94:70:ed:83:99:a8:
                    ce:80:0e:08:c4:17:0b:b4:be:27:a2:e3:f4:b2:5f:
                    ba:51:90:b6:e0:e0:24:fb:8d:cb:ea:b3:78:27:06:
                    12:4e:7e:9c:b0:c4:48:59:57:eb:e1:9c:5d:c8:d2:
                    e4:9c:e1:09:60:72:bc:cb:8f:53:78:37:50:a6:da:
                    d3:31:52:af:31:05:5b:a4:ce:72:88:fc:a8:ce:96:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:74:39:92:0D:50:CB:AE:BC:0F:27:A6:5D:C8:02:F4:BC:15:4A:E3
            X509v3 Authority Key Identifier:
                keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3230322e3136352e3231362e302f32312d3231203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:38:af:b3:34:ab:92:e4:06:27:d6:30:aa:f2:5b:61:b0:d5:
         27:53:d2:4b:b2:50:47:b2:a2:0f:b8:a7:f2:80:fe:cb:74:2c:
         20:97:11:7a:c4:3d:7c:c1:bb:48:ef:6d:0c:4f:53:1f:3f:03:
         84:d7:5b:29:d6:80:61:05:dd:04:36:8d:9d:53:30:64:5b:0d:
         21:e5:ff:ec:94:02:b5:bb:79:ed:7c:ec:aa:a9:c5:92:9a:8d:
         27:a7:55:5f:46:28:b1:58:7c:0a:73:5d:5d:b7:9f:24:1b:3b:
         9a:10:69:eb:c1:39:a5:cd:e0:3d:dd:1d:d6:6b:21:99:eb:fd:
         d5:8f:3d:49:d1:88:c3:a9:f2:fd:35:9c:c1:be:4e:ed:9b:87:
         7c:00:51:fb:b4:27:b6:d9:cb:b0:7d:c5:9d:c3:29:63:e6:f3:
         1c:38:4b:7d:e9:ac:fc:19:a0:a6:e0:ea:1c:9c:8c:8d:9f:6d:
         dc:ac:e2:a3:68:55:66:57:5d:a3:0c:fb:38:96:be:89:4e:4a:
         4a:6c:7b:2c:d8:61:34:cf:72:d7:2c:ac:fd:48:18:a0:fa:da:
         7e:7a:79:81:8b:13:d1:17:72:11:24:cc:d2:73:ab:27:79:66:
         8a:5f:ef:1d:82:c8:f1:3b:52:a7:dd:51:54:cd:16:21:b6:c3:
         ae:ff:02:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:15:18 2026 by rpki-client