Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117016035443146775/0/3136322e342e3133362e302f32332d3234203d3e20313336323530.roa
File:                     3136322e342e3133362e302f32332d3234203d3e20313336323530.roa (raw, json)
Hash identifier:          1EIqmfJpGg9YGua/kg8dNOeN9v4HQ/9sl12YP3T1lzc=
Subject key identifier:   2E:9D:4D:5E:CF:6F:4A:6A:2E:5A:03:A8:32:35:8F:2F:32:F0:32:40
Certificate issuer:       /CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C
Certificate serial:       529EED5F04750BF976E6B679F0CA0B5C649F9AAC
Authority key identifier: 4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/3136322e342e3133362e302f32332d3234203d3e20313336323530.roa
Signing time:             Wed 10 Jun 2026 09:12:46 +0000
ROA not before:           Wed 10 Jun 2026 09:07:46 +0000
ROA not after:            Wed 09 Jun 2027 09:12:46 +0000
asID:                     136250
IP address blocks:        162.4.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 12:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9e:ed:5f:04:75:0b:f9:76:e6:b6:79:f0:ca:0b:5c:64:9f:9a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C
        Validity
            Not Before: Jun 10 09:07:46 2026 GMT
            Not After : Jun  9 09:12:46 2027 GMT
        Subject: CN=2E9D4D5ECF6F4A6A2E5A03A832358F2F32F03240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:1b:77:4b:09:26:0d:f6:b3:66:ff:f4:c3:
                    1c:ed:d5:8b:93:ff:d9:b3:cd:37:e8:e4:64:65:39:
                    13:d1:ad:26:61:b2:e6:2c:5d:a1:a8:6f:b6:dc:cf:
                    12:e7:c3:d3:fc:d1:7c:f9:12:54:9c:65:02:c7:ec:
                    9e:8b:c0:46:6c:24:6e:48:8c:84:82:47:40:94:44:
                    6c:bf:8c:fd:89:09:16:fa:99:ca:3c:29:77:64:dc:
                    12:27:4c:6d:f0:c4:bc:eb:e0:5c:98:28:aa:be:09:
                    42:43:de:a2:32:e2:ba:95:2e:67:d8:e2:49:fe:31:
                    cd:f3:13:67:f5:ba:8a:9b:b5:d1:a3:4f:a8:0f:69:
                    5d:5c:11:ee:ad:4b:d6:3d:8f:3b:1f:2e:b4:33:7e:
                    49:f6:85:63:87:16:17:01:da:fc:49:93:03:d1:cc:
                    55:af:ee:98:51:50:28:bf:ad:ff:d5:e0:d5:52:85:
                    81:70:c8:0f:c5:a0:cc:0a:6b:1d:41:31:e1:74:26:
                    13:cc:9b:e4:9e:14:3f:53:95:e0:49:03:7b:20:26:
                    e3:93:74:cd:db:90:5a:6c:43:00:d8:6c:40:92:de:
                    e1:93:6a:7e:5b:cb:a7:a3:c5:e8:df:22:a9:cc:a1:
                    7a:23:44:e0:8b:63:9b:c6:51:6d:23:ff:0f:00:fb:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9D:4D:5E:CF:6F:4A:6A:2E:5A:03:A8:32:35:8F:2F:32:F0:32:40
            X509v3 Authority Key Identifier:
                keyid:4E:F5:FA:B9:59:4A:1D:46:B9:FC:A2:CE:FA:FD:12:EA:0E:11:4A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4EF5FAB9594A1D46B9FCA2CEFAFD12EA0E114A1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117016035443146775/0/3136322e342e3133362e302f32332d3234203d3e20313336323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:61:54:94:95:7b:09:d3:49:34:de:73:01:ac:05:cf:16:1f:
         e9:be:83:52:86:bd:0a:03:fb:8d:23:9d:dd:63:56:27:e0:f9:
         7c:4b:3f:d6:da:e6:39:dc:6f:90:ea:9a:21:be:23:02:59:b2:
         5a:4f:30:77:4d:b3:f3:c1:38:74:c6:75:cf:af:0e:46:6b:45:
         51:ba:37:da:13:9d:82:09:30:64:f4:46:3d:35:b3:89:58:c6:
         89:42:86:00:99:29:b1:b6:61:bf:9b:8d:d1:ad:b7:69:36:1d:
         35:43:28:f5:e8:14:2b:a0:51:b3:8f:7a:d1:6b:06:26:ba:7e:
         4e:a2:4c:ef:44:59:b5:3c:bf:62:c4:c2:b8:dc:7d:33:2c:53:
         03:19:54:95:69:c1:5a:07:93:55:15:33:81:05:78:61:cb:87:
         25:20:8b:e8:33:21:7e:9d:85:78:68:85:9a:d5:75:82:99:e1:
         44:bb:d8:69:b2:73:8d:49:9d:c7:6e:8d:4c:0c:84:8c:e7:ce:
         f2:28:47:72:f4:38:fb:47:8b:7c:64:84:fa:37:33:c9:af:83:
         81:3d:54:ea:a8:e5:b8:c7:71:50:7e:2d:bd:be:7b:51:e9:00:
         ab:f0:7b:56:e3:23:7a:4e:50:f4:61:5d:f8:46:0e:0d:2f:58:
         89:6d:1e:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:41 2026 by rpki-client