Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e3230302e302e302f31352d3234203d3e203337393633.roa
File:                     3130312e3230302e302e302f31352d3234203d3e203337393633.roa (raw, json)
Hash identifier:          zn/9l4qN57XLrwIEN7kb5sfk9KGOUZN72QrDd+bpvRE=
Subject key identifier:   EA:34:57:47:13:A9:71:0B:10:63:1C:2B:62:E3:FD:BE:4C:E6:C5:EC
Certificate issuer:       /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial:       45D6F244CE58D0F736020CD85D3F953C9486A7B7
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e3230302e302e302f31352d3234203d3e203337393633.roa
Signing time:             Thu 16 Apr 2026 03:02:48 +0000
ROA not before:           Thu 16 Apr 2026 02:57:48 +0000
ROA not after:            Thu 15 Apr 2027 03:02:48 +0000
asID:                     37963
IP address blocks:        101.200.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 11:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d6:f2:44:ce:58:d0:f7:36:02:0c:d8:5d:3f:95:3c:94:86:a7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
        Validity
            Not Before: Apr 16 02:57:48 2026 GMT
            Not After : Apr 15 03:02:48 2027 GMT
        Subject: CN=EA34574713A9710B10631C2B62E3FDBE4CE6C5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:bc:54:39:b9:31:eb:25:04:58:6e:53:6f:
                    14:f6:f2:9e:7e:bd:6d:e4:68:a6:86:b0:4b:9d:ad:
                    af:d1:72:9d:f9:55:32:14:39:0c:15:38:16:0c:f1:
                    5a:09:72:da:d2:f9:0f:0a:22:60:e0:a9:37:82:54:
                    fa:e9:e7:0f:6d:33:61:f2:69:04:29:63:83:51:ba:
                    0d:48:06:ed:d1:61:5a:42:61:ba:30:5a:2a:ac:2a:
                    80:ac:bc:59:b0:72:05:75:d0:97:1a:c0:29:25:ad:
                    b4:58:d5:96:c6:27:1a:8b:ca:0f:66:6b:7d:0c:63:
                    99:23:de:bf:f6:11:bc:b5:ba:66:b8:84:4a:d3:f9:
                    01:a8:4e:58:5f:13:6c:16:05:63:88:ab:62:24:84:
                    81:11:af:98:74:37:35:75:cc:52:0c:80:9b:c1:c0:
                    e2:6e:de:1c:13:25:39:e2:08:c2:ea:4c:c3:9c:86:
                    7d:24:ae:8f:08:28:44:a2:46:b3:cd:00:06:df:c3:
                    43:52:e3:a5:12:70:23:e8:bb:39:d9:65:5e:3e:14:
                    74:d3:fa:03:c9:b2:f7:4a:7a:3a:23:c7:cf:c8:f8:
                    21:52:93:8a:b7:41:2d:82:99:7e:ea:fd:3a:36:1d:
                    c4:bc:c5:e8:3e:81:fe:38:96:e0:10:e3:2d:ec:62:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:34:57:47:13:A9:71:0B:10:63:1C:2B:62:E3:FD:BE:4C:E6:C5:EC
            X509v3 Authority Key Identifier:
                keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e3230302e302e302f31352d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.200.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9d:80:be:82:0f:ec:78:24:f5:4b:68:fb:28:25:20:97:22:e4:
         c4:83:0c:b6:94:53:10:bb:21:ad:11:14:13:39:c7:fa:1a:e7:
         ea:e0:e4:55:4e:f8:84:cc:87:37:a2:8e:0f:15:12:8a:b0:79:
         70:25:14:b4:90:38:d4:bb:60:33:fa:fd:f0:fa:42:3e:c8:4a:
         9b:6c:7b:50:e1:7e:78:76:6e:cb:fe:55:43:c8:e3:cb:76:eb:
         ee:25:b8:f2:3c:9e:ff:9a:86:ab:d8:27:8b:65:b7:ee:0b:68:
         90:1f:47:ad:91:4b:fa:c7:04:aa:f4:db:39:63:95:4a:88:b0:
         39:b3:6a:2d:08:b2:e5:a3:4d:b5:81:c3:26:8b:ab:17:51:c8:
         6e:bc:05:46:76:aa:df:65:9b:53:82:15:d5:bc:71:ab:62:b6:
         17:c1:09:20:0d:6d:55:67:87:1d:a7:bc:e2:14:3f:77:dc:e3:
         c8:3c:f4:74:bf:d7:5c:6b:bc:9c:30:f5:75:c7:08:78:15:33:
         ce:c2:4c:6d:f3:6d:1c:d1:b7:4d:7d:86:13:18:c4:ac:15:15:
         59:ac:6f:96:cf:99:e4:3e:1f:20:91:9e:44:a5:20:a1:d6:01:
         de:83:59:9c:63:ef:a2:2a:c7:f8:29:da:a4:c5:50:60:e7:32:
         2c:39:7d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:51 2026 by rpki-client