Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa
File:                     3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier:          /ox/S6ojTw7NTUHT+hZP9w5PkDnUqJXtTCGiGwolLCk=
Subject key identifier:   57:57:CF:BE:36:F3:7C:6B:39:27:7D:C1:E2:AD:D7:B4:FB:04:7D:5C
Certificate issuer:       /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
Certificate serial:       01D2D2B14275E5204E7CC73BE4DA5473B06C7881
Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa
Signing time:             Wed 15 Apr 2026 03:11:38 +0000
ROA not before:           Wed 15 Apr 2026 03:06:38 +0000
ROA not after:            Wed 14 Apr 2027 03:11:38 +0000
asID:                     4837
IP address blocks:        101.251.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 10:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d2:d2:b1:42:75:e5:20:4e:7c:c7:3b:e4:da:54:73:b0:6c:78:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
        Validity
            Not Before: Apr 15 03:06:38 2026 GMT
            Not After : Apr 14 03:11:38 2027 GMT
        Subject: CN=5757CFBE36F37C6B39277DC1E2ADD7B4FB047D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:e5:0e:ca:4e:bc:72:0b:ce:ef:33:96:a8:
                    c1:18:58:37:dd:06:ee:8c:77:ff:44:a1:ba:30:56:
                    a8:1f:1e:da:be:25:d7:43:35:c1:f2:df:c5:ba:71:
                    be:b0:2e:18:64:76:f7:c1:c4:87:06:60:12:77:93:
                    f4:22:82:b5:31:e1:05:5c:2a:1d:9c:ad:cb:43:0c:
                    14:19:d0:56:0b:44:55:bf:69:f6:bd:0e:d5:dd:9b:
                    5a:0b:e3:03:e8:7e:b2:51:18:5c:e2:86:6e:10:8f:
                    5f:6c:04:32:7c:10:c4:5d:c2:66:53:1c:d7:0c:0c:
                    d9:fc:62:05:d6:14:19:ac:eb:af:d8:7a:01:61:27:
                    c5:7b:24:36:9f:67:5a:d4:8b:b4:03:15:b0:6c:b2:
                    53:eb:cf:1b:12:22:7b:83:5a:78:3a:87:3f:db:5b:
                    2e:7d:7d:bb:45:d3:af:06:70:ea:dd:db:3e:f1:bd:
                    39:2c:57:46:2e:65:e5:1a:1e:8b:e0:e4:d3:55:01:
                    b7:63:84:ca:c6:de:58:95:4c:a1:06:7f:af:01:44:
                    f3:5f:9b:ad:5e:8a:bc:d3:ae:81:dc:e6:43:a8:ce:
                    69:77:7d:84:86:61:62:7f:6d:38:13:3b:7e:de:03:
                    3e:7e:ee:12:f7:ba:58:76:e7:e4:66:aa:11:ed:9d:
                    45:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:57:CF:BE:36:F3:7C:6B:39:27:7D:C1:E2:AD:D7:B4:FB:04:7D:5C
            X509v3 Authority Key Identifier:
                keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.251.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:6c:0e:2f:84:f4:f9:c7:c0:b1:e8:f9:f3:ee:f4:d6:7f:
         b5:b6:90:32:74:72:68:80:16:df:04:cd:0b:f5:dc:dd:b3:ef:
         5e:15:02:d3:f4:c7:32:01:d0:b2:59:3a:2b:7b:39:84:01:14:
         40:35:df:b4:98:74:27:7e:10:1b:e4:5d:78:a7:2f:fe:30:6b:
         6c:ea:6e:c4:72:3f:f7:ac:ed:45:3d:83:e4:ba:e9:40:ee:14:
         3d:12:07:85:3e:d1:7c:f2:dd:e5:ac:fd:be:87:a0:f4:35:7b:
         ba:79:51:51:44:38:92:6f:fa:d3:4e:ee:4f:eb:44:c3:b3:2e:
         3f:c1:c8:18:03:87:4f:38:bb:a8:22:a3:ef:63:08:dd:3d:f0:
         3e:d4:60:84:d8:a0:bf:94:db:a0:a7:12:1b:c3:2d:94:59:b1:
         4b:4b:be:3d:66:59:31:7c:21:5b:38:c6:da:56:bd:eb:e4:90:
         f7:60:c6:90:a7:b9:ca:a9:18:4f:41:62:a9:fc:08:2c:16:19:
         a9:d3:d8:1d:45:71:74:69:74:4b:30:67:1a:85:70:70:24:57:
         5b:ff:e2:fe:83:7f:f3:ee:b3:2c:a4:36:d1:69:b5:c8:e4:38:
         15:39:db:09:21:92:db:31:e3:72:ff:fd:b0:4d:c9:d1:c9:48:
         45:40:fc:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:13 2026 by rpki-client