Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/3136302e3235302e39312e302f32342d3234203d3e2030.roa
File:                     3136302e3235302e39312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=
Subject key identifier:   E2:61:E3:34:ED:EC:2F:9C:FB:91:8D:FF:8F:1B:CB:DF:96:67:CD:53
Certificate issuer:       /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385
Certificate serial:       11101CB94D1B3F1DE6B6963AC696B7E62471BC9A
Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/3136302e3235302e39312e302f32342d3234203d3e2030.roa
Signing time:             Wed 15 Apr 2026 13:28:01 +0000
ROA not before:           Wed 15 Apr 2026 13:23:01 +0000
ROA not after:            Wed 14 Apr 2027 13:28:01 +0000
asID:                     0
IP address blocks:        160.250.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 08:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:10:1c:b9:4d:1b:3f:1d:e6:b6:96:3a:c6:96:b7:e6:24:71:bc:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385
        Validity
            Not Before: Apr 15 13:23:01 2026 GMT
            Not After : Apr 14 13:28:01 2027 GMT
        Subject: CN=E261E334EDEC2F9CFB918DFF8F1BCBDF9667CD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:5b:20:ad:e1:a4:28:b9:e1:e9:75:e4:a4:
                    42:5f:c0:6f:cf:7f:5d:43:52:2b:ff:93:86:d9:7d:
                    cb:2d:a5:b4:8f:e1:9b:25:40:3a:f2:c4:5f:d3:11:
                    9d:10:4e:da:55:18:50:36:ce:7f:35:93:e0:d6:fd:
                    60:73:11:01:95:8c:d4:d8:53:1e:06:62:76:22:f2:
                    50:0a:e3:46:ef:f6:62:7c:21:ee:50:1c:ba:67:bb:
                    90:fa:4c:47:e5:1a:69:51:28:41:7a:7c:71:46:5f:
                    df:22:0c:0d:5b:71:23:d1:4e:15:fd:9c:98:39:25:
                    bd:17:1c:2f:f0:c1:24:94:b5:e8:fd:52:c0:14:ee:
                    81:be:24:f4:e1:c0:fa:df:39:fb:77:a4:26:6b:4a:
                    bd:35:d5:b6:62:0a:7f:39:ca:06:82:06:9b:8d:cc:
                    b3:41:c2:0c:15:94:c1:35:2b:81:ee:7d:2a:72:f8:
                    8b:12:61:4b:71:30:01:99:8d:7e:fb:35:d8:67:5e:
                    1d:36:8d:13:73:14:e5:62:5d:b7:c6:c9:80:b5:7a:
                    85:55:a8:2c:80:f9:5d:13:b8:d0:e6:f2:91:c7:07:
                    fc:77:20:70:ae:7b:a0:6c:27:94:e4:34:c5:02:eb:
                    49:79:01:5b:44:a1:04:db:38:44:d3:83:2a:9e:a0:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:61:E3:34:ED:EC:2F:9C:FB:91:8D:FF:8F:1B:CB:DF:96:67:CD:53
            X509v3 Authority Key Identifier:
                keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/3136302e3235302e39312e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:b9:39:ad:4d:e3:c8:e6:0c:74:e5:84:74:a9:8b:a6:5e:
         70:83:2f:0e:b4:80:ed:10:45:ae:ba:9c:b3:cd:56:59:8a:fd:
         bd:7e:39:c4:32:9f:22:c3:da:f6:ef:1b:41:fc:d3:ae:54:6b:
         cb:0c:c8:c8:0a:fc:86:c0:77:9e:ca:9e:b0:f2:0b:37:f1:78:
         67:fe:8e:df:98:1c:78:3d:3c:ec:7d:e6:47:8a:46:d9:3d:79:
         f2:4b:bb:4f:8f:c8:81:72:b7:37:a4:dd:a8:88:73:6b:d7:09:
         03:6d:14:3d:f3:ed:8d:7e:be:a1:5f:4a:6b:96:14:15:35:97:
         66:17:35:8d:a6:0e:0a:49:ca:fe:8a:03:b2:3f:83:68:26:77:
         6f:7a:17:ce:2b:aa:b9:33:fc:b7:13:82:25:48:1c:d8:41:f5:
         81:86:61:aa:21:5c:08:e9:28:2a:6c:2b:cf:ad:cd:14:24:69:
         80:78:88:5c:53:ce:81:e1:64:1b:52:bd:8d:4a:37:a4:68:20:
         f0:56:18:03:55:cd:60:f4:92:66:1b:f4:82:1d:a0:f3:cf:f5:
         5a:2d:80:7b:3e:9f:3b:b6:25:5b:1f:d8:18:97:3d:ee:d5:c7:
         50:cf:7b:be:93:58:b2:a6:cd:06:29:6e:eb:5c:37:5b:03:e2:
         11:12:5c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:38 2026 by rpki-client