Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa
File:                     3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (raw, json)
Hash identifier:          M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=
Subject key identifier:   A7:01:5A:F3:64:FC:E4:09:00:5E:5D:EF:F0:F4:1C:B4:DA:43:E2:16
Certificate issuer:       /CN=97B5B7009501E4718F06B9B36D215369C958203F
Certificate serial:       1ADA597DD7D14DD1F3147754933040756489EB06
Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa
Signing time:             Wed 08 Apr 2026 05:29:35 +0000
ROA not before:           Wed 08 Apr 2026 05:24:35 +0000
ROA not after:            Wed 07 Apr 2027 05:29:35 +0000
asID:                     134765
IP address blocks:        160.30.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:28:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:da:59:7d:d7:d1:4d:d1:f3:14:77:54:93:30:40:75:64:89:eb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F
        Validity
            Not Before: Apr  8 05:24:35 2026 GMT
            Not After : Apr  7 05:29:35 2027 GMT
        Subject: CN=A7015AF364FCE409005E5DEFF0F41CB4DA43E216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:b6:f6:c1:95:d8:4c:38:7c:0b:91:6a:c5:
                    c1:d3:05:cb:87:26:d2:ae:dd:05:06:22:6e:3c:2b:
                    d2:a5:97:3a:59:52:5f:86:1f:f2:98:1b:6e:20:1b:
                    16:a0:3c:94:fa:af:d0:9f:29:38:fa:ea:76:60:81:
                    9d:e6:6d:fe:4c:0d:2d:b8:61:71:fb:f2:70:ea:fc:
                    5d:f4:70:21:49:e8:f6:6c:99:ad:b7:82:83:f7:af:
                    2c:9a:82:c1:29:79:69:4d:e5:d6:30:43:b3:e8:e5:
                    69:a1:30:c6:8c:62:99:a2:99:13:8d:0b:de:52:e0:
                    ab:d7:2d:4b:c5:06:bc:c5:40:5b:88:af:61:67:4d:
                    9b:9e:52:c9:b0:44:ef:ce:f1:e7:ba:8e:43:18:ac:
                    6d:15:05:65:1f:e9:f3:57:c3:d0:a2:53:e0:ec:0a:
                    14:a5:53:55:ec:ac:82:26:37:40:4b:04:91:51:5a:
                    6d:60:5b:4c:32:8b:34:04:26:fb:8f:d8:43:2c:94:
                    1b:50:dc:c3:1f:70:46:ac:41:5d:d5:05:0c:bf:8d:
                    78:05:41:b1:62:5e:c3:8f:c0:d2:ab:e6:8d:a1:04:
                    68:1f:ff:1b:2d:a2:ed:0f:84:e4:20:97:7e:29:6e:
                    c9:da:82:cc:91:d3:0a:44:91:dd:df:84:41:5e:e8:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:01:5A:F3:64:FC:E4:09:00:5E:5D:EF:F0:F4:1C:B4:DA:43:E2:16
            X509v3 Authority Key Identifier:
                keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:10:20:93:40:49:6f:40:3b:0c:34:8e:f9:7b:03:b4:5c:56:
         10:be:4c:76:8b:fa:97:81:46:83:10:6e:65:3b:14:74:76:df:
         42:f0:2e:a4:0b:1c:73:ca:fc:ce:f3:29:d1:23:81:4b:c7:80:
         a9:44:a2:ef:2a:28:cd:fd:7a:36:c1:84:0f:39:1c:24:8a:08:
         33:89:c3:39:38:fd:00:82:ab:0c:78:ed:77:7e:ec:e2:98:28:
         58:65:98:85:00:88:b8:ae:d1:53:05:4f:72:c2:b5:9b:69:ae:
         21:98:d1:fa:d9:e8:68:60:20:1e:e9:94:22:fd:73:f9:65:d6:
         1d:df:74:66:36:a0:95:06:a1:4c:6a:34:e7:45:ea:4a:7b:62:
         7a:e5:69:c3:7f:5d:a2:45:e8:0c:c9:49:2b:68:8b:86:5e:52:
         c2:d9:a9:bd:04:39:ab:5e:5b:cf:90:aa:32:09:c1:e3:45:65:
         4b:0d:e0:0a:c9:bb:f4:9d:75:32:f7:14:a5:b0:af:49:e3:62:
         ff:63:20:e4:81:fd:42:c1:41:36:7d:d8:f9:4e:9d:32:cb:ab:
         40:d9:b0:98:f1:92:3f:a1:85:21:cd:2c:bd:74:be:12:f1:76:
         8e:d3:ed:e8:7a:14:39:74:12:4e:c2:da:38:f7:2d:52:ce:1f:
         e3:5b:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:33:34 2026 by rpki-client