Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3232312e3132392e302e302f31362d3136203d3e203233383431.roa
File:                     3232312e3132392e302e302f31362d3136203d3e203233383431.roa (raw, json)
Hash identifier:          LXzAf6+hhsdt/TNw4PFtDGl7SS8I2bBwjZ8Gp200CMo=
Subject key identifier:   25:11:97:7E:96:C0:8B:64:DD:2B:56:4B:B6:07:E3:86:CB:85:D8:1D
Certificate issuer:       /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial:       3C44F0548DA012B5DC86B09C791F2D41172D5D73
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3232312e3132392e302e302f31362d3136203d3e203233383431.roa
Signing time:             Wed 15 Apr 2026 01:17:05 +0000
ROA not before:           Wed 15 Apr 2026 01:12:05 +0000
ROA not after:            Wed 14 Apr 2027 01:17:05 +0000
asID:                     23841
IP address blocks:        221.129.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:44:f0:54:8d:a0:12:b5:dc:86:b0:9c:79:1f:2d:41:17:2d:5d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
        Validity
            Not Before: Apr 15 01:12:05 2026 GMT
            Not After : Apr 14 01:17:05 2027 GMT
        Subject: CN=2511977E96C08B64DD2B564BB607E386CB85D81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:07:10:61:45:63:d6:4e:85:73:2e:7a:47:
                    0a:24:bb:fd:b3:a8:e6:67:95:43:31:d5:b0:19:04:
                    20:a7:2c:67:bb:ff:fb:dc:7e:26:95:b2:4a:07:15:
                    8a:42:9f:64:2a:bc:43:06:9c:f3:b7:c1:b3:bd:18:
                    39:df:50:b7:d5:64:bc:bb:21:99:80:b1:28:cd:9d:
                    f9:a3:03:a3:83:64:44:cb:87:b0:56:3f:12:a6:74:
                    12:75:34:94:48:c2:51:50:93:03:7d:45:37:61:d9:
                    ef:b0:00:51:d9:b1:9b:51:1b:fe:bc:de:5a:f8:7b:
                    e8:ec:f8:6a:0e:9f:45:b0:8c:ec:73:f1:19:fd:33:
                    04:87:52:59:3f:46:76:d9:bc:db:67:58:9c:ee:db:
                    53:f4:ad:ce:fd:86:fc:fc:8f:ba:12:4c:e2:b8:6a:
                    66:e5:63:ee:41:cf:bd:3c:7f:e7:96:00:06:a0:61:
                    8f:94:c9:f7:bb:2c:5b:c7:96:ea:96:77:f3:32:f8:
                    36:bd:3b:2e:bf:89:c8:1a:ab:ae:b8:28:6c:d5:82:
                    76:10:f5:dd:72:17:f6:25:cb:7a:08:ee:12:a5:fb:
                    42:b0:2b:fa:36:6b:c4:cc:cc:93:c4:d8:6f:56:e3:
                    b7:cc:5f:2f:f0:ae:76:38:fd:71:5a:09:36:af:61:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:97:7E:96:C0:8B:64:DD:2B:56:4B:B6:07:E3:86:CB:85:D8:1D
            X509v3 Authority Key Identifier:
                keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3232312e3132392e302e302f31362d3136203d3e203233383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         26:6e:3d:5e:6f:71:a8:47:44:0d:13:a6:1f:87:52:ee:4c:e5:
         ab:ee:45:55:5d:15:01:63:c8:cf:92:e4:58:7f:4c:09:57:b9:
         b6:19:f8:f3:18:ee:c6:0b:63:49:de:48:b8:01:e8:78:ca:95:
         bf:16:45:14:48:91:e0:dc:cc:44:70:4a:a7:03:73:4e:4c:c5:
         be:17:1e:a9:f6:f9:2a:11:45:24:87:7e:42:e5:9f:1a:17:f8:
         62:43:89:b3:62:21:1a:5f:80:ab:ae:cc:85:42:e5:3e:c1:33:
         95:3f:0d:03:96:3d:44:6e:cd:5b:3f:4b:be:86:42:14:6e:c4:
         0e:5c:96:d8:63:b1:89:64:86:4d:ea:82:27:39:70:4b:86:4a:
         04:db:70:6a:a0:2d:88:c3:ca:42:35:f6:65:54:11:de:3b:1e:
         60:3e:80:33:96:e1:dc:75:4c:6f:03:f8:2c:c6:75:12:ef:0d:
         01:be:2b:34:c3:6f:c9:24:24:6a:f2:13:9d:4a:17:f3:45:5c:
         d1:71:62:62:d8:4a:5c:4d:63:5f:71:b7:9a:3e:24:07:88:4b:
         84:44:37:3b:d2:39:cc:6a:36:7f:80:37:e2:d6:ad:11:bb:ec:
         04:6b:3a:2d:55:23:49:ab:1c:13:ea:b9:32:79:03:a1:e8:ae:
         77:af:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:58 2026 by rpki-client