Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e31362e302f32302d3230203d3e20313334373734.roa
File:                     3230332e38362e31362e302f32302d3230203d3e20313334373734.roa (raw, json)
Hash identifier:          uMLAeYE9Fso11yhVojhjYyJDAb3WPWH1BlJh/X2DOwQ=
Subject key identifier:   38:C0:77:F6:55:6B:37:7D:DB:5A:D5:43:E5:FE:8B:6C:B6:59:E5:EC
Certificate issuer:       /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial:       12C4160DB5BE93EFD3F80D673F975AB17C28A44F
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e31362e302f32302d3230203d3e20313334373734.roa
Signing time:             Fri 24 Apr 2026 02:42:01 +0000
ROA not before:           Fri 24 Apr 2026 02:37:01 +0000
ROA not after:            Fri 23 Apr 2027 02:42:01 +0000
asID:                     134774
IP address blocks:        203.86.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c4:16:0d:b5:be:93:ef:d3:f8:0d:67:3f:97:5a:b1:7c:28:a4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
        Validity
            Not Before: Apr 24 02:37:01 2026 GMT
            Not After : Apr 23 02:42:01 2027 GMT
        Subject: CN=38C077F6556B377DDB5AD543E5FE8B6CB659E5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:db:e5:62:4f:b7:97:3f:bb:1b:d1:53:72:
                    34:70:ef:02:c9:0f:54:c3:c8:71:4c:39:19:4f:0d:
                    0d:0e:ec:35:33:8c:1f:fb:3c:e4:17:8d:fa:30:bb:
                    e0:b1:6e:83:35:92:ac:66:ff:d7:70:82:b7:fb:23:
                    06:74:2d:45:6b:ef:c3:a3:f5:f2:bf:88:22:22:b5:
                    b6:97:12:d9:da:d7:dc:35:eb:77:86:09:d1:28:ac:
                    9e:5f:d2:88:29:ca:7d:96:e1:ce:6b:8a:be:a4:04:
                    c5:b3:0e:3d:eb:44:2c:10:8f:5d:82:9a:d3:61:fe:
                    32:22:8d:7d:16:03:0d:b2:ea:2c:1f:1b:d0:38:69:
                    7e:bb:3b:26:2c:c7:db:6a:5a:35:bd:fa:52:db:b6:
                    de:6d:d8:a8:85:a3:d3:78:3c:4f:ba:80:1e:7c:c1:
                    8a:78:52:41:19:3d:a8:4e:27:75:c6:da:0c:e7:e2:
                    06:46:78:67:bf:10:18:c1:47:5d:9f:b3:24:19:d0:
                    e7:f0:43:72:79:51:9a:06:4f:40:08:97:b5:ed:5c:
                    2d:ec:58:13:f3:d9:f0:a9:d7:a1:bc:98:2c:69:25:
                    b8:c6:3d:d6:87:61:bc:fd:86:a9:00:e4:6a:db:84:
                    3c:91:ba:be:8f:6d:fc:dd:9c:d8:41:c8:d3:c2:a4:
                    b1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:77:F6:55:6B:37:7D:DB:5A:D5:43:E5:FE:8B:6C:B6:59:E5:EC
            X509v3 Authority Key Identifier:
                keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3230332e38362e31362e302f32302d3230203d3e20313334373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.86.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:a5:a8:8b:b7:fc:a6:aa:17:cd:29:9e:c5:cf:0a:1e:e2:
         f9:b2:b2:75:68:62:f4:5b:95:a0:e7:65:e1:c1:97:d5:82:2d:
         94:3a:e4:96:bf:00:90:33:89:6b:0b:ad:42:14:77:03:92:d8:
         8b:cb:72:5e:fe:3d:31:99:6a:cd:b3:a2:5c:74:f2:e9:29:82:
         7c:71:1a:90:a1:8a:0c:3a:5e:d8:2f:87:fa:f6:e0:08:20:78:
         b9:00:d1:18:03:31:ff:69:a8:08:6f:0a:8c:4a:a0:a1:06:27:
         68:3c:4b:3b:16:3a:ab:dc:71:49:84:ce:e3:73:ec:00:fc:ff:
         ad:00:f5:e1:59:fd:93:11:c7:ab:05:f4:7f:f7:07:66:51:a6:
         e3:dc:f8:40:47:06:93:f4:fe:80:03:da:eb:e1:5f:31:c8:c6:
         e7:8a:17:98:12:41:95:86:0a:ce:fd:98:1e:4d:be:7e:64:9d:
         57:fe:c8:e7:a1:65:0c:fa:28:76:c6:e2:a2:5e:b1:be:32:c3:
         06:e3:e8:2a:82:71:61:01:62:bb:ad:6a:bc:24:3d:b6:58:89:
         d7:d3:06:fb:14:76:07:1b:a9:a1:b5:ab:31:42:9f:45:03:8d:
         62:c6:1c:99:d2:3a:31:f1:21:dc:81:d3:90:cc:bf:b5:b3:99:
         3b:69:de:43
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUEsQWDbW+k+/T+A1nP5dasXwopE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw
NDU3ODE2ODAeFw0yNjA0MjQwMjM3MDFaFw0yNzA0MjMwMjQyMDFaMDMxMTAvBgNV
BAMTKDM4QzA3N0Y2NTU2QjM3N0REQjVBRDU0M0U1RkU4QjZDQjY1OUU1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM69vlYk+3lz+7G9FTcjRw7wLJ
D1TDyHFMORlPDQ0O7DUzjB/7POQXjfowu+CxboM1kqxm/9dwgrf7IwZ0LUVr78Oj
9fK/iCIitbaXEtna19w163eGCdEorJ5f0ogpyn2W4c5rir6kBMWzDj3rRCwQj12C
mtNh/jIijX0WAw2y6iwfG9A4aX67OyYsx9tqWjW9+lLbtt5t2KiFo9N4PE+6gB58
wYp4UkEZPahOJ3XG2gzn4gZGeGe/EBjBR12fsyQZ0OfwQ3J5UZoGT0AIl7XtXC3s
WBPz2fCp16G8mCxpJbjGPdaHYbz9hqkA5GrbhDyRur6PbfzdnNhByNPCpLG5AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUOMB39lVrN33bWtVD5f6LbLZZ5ewwHwYDVR0j
BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw
ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDc0OTk1My8wLzMyMzAzMzJlMzgz
NjJlMzEzNjJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzNDM3MzczNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBMtWEDANBgkqhkiG9w0BAQsFAAOCAQEAHMClqIu3/KaqF80pnsXPCh7i
+bKydWhi9FuVoOdl4cGX1YItlDrklr8AkDOJawutQhR3A5LYi8tyXv49MZlqzbOi
XHTy6SmCfHEakKGKDDpe2C+H+vbgCCB4uQDRGAMx/2moCG8KjEqgoQYnaDxLOxY6
q9xxSYTO43PsAPz/rQD14Vn9kxHHqwX0f/cHZlGm49z4QEcGk/T+gAPa6+FfMcjG
54oXmBJBlYYKzv2YHk2+fmSdV/7I56FlDPoodsbiol6xvjLDBuPoKoJxYQFiu61q
vCQ9tliJ19MG+xR2BxupobWrMUKfRQONYsYcmdI6MfEh3IHTkMy/tbOZO2neQw==
-----END CERTIFICATE-----
Generated at Wed May 13 18:37:09 2026 by rpki-client