Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa
File:                     3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa (raw, json)
Hash identifier:          5xMWNkW1klQcDp4QWHmfoXOnt2+cbg8IcOUQAYdb1Io=
Subject key identifier:   45:56:86:B0:E4:CE:93:3C:9D:87:C3:10:F0:EE:57:64:50:59:23:8B
Certificate issuer:       /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial:       5928C0CFF5EFC3818D4A917E217374E61F249CA1
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa
Signing time:             Thu 07 May 2026 02:57:51 +0000
ROA not before:           Thu 07 May 2026 02:52:51 +0000
ROA not after:            Thu 06 May 2027 02:57:51 +0000
asID:                     131574
IP address blocks:        103.39.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:28:c0:cf:f5:ef:c3:81:8d:4a:91:7e:21:73:74:e6:1f:24:9c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
        Validity
            Not Before: May  7 02:52:51 2026 GMT
            Not After : May  6 02:57:51 2027 GMT
        Subject: CN=455686B0E4CE933C9D87C310F0EE57645059238B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:c0:c0:4d:81:81:ee:ac:17:fa:d9:6f:12:
                    da:7f:31:06:41:38:50:82:60:91:a9:e9:89:6e:cc:
                    61:13:22:9f:b6:64:7f:c1:a7:15:38:51:d8:4e:79:
                    32:05:22:5f:61:87:f0:c4:b3:bc:f5:ac:74:29:24:
                    bd:58:cb:2f:a3:a0:91:de:9a:61:a1:23:b6:f4:59:
                    cc:2f:c3:db:5b:ef:8b:f6:25:28:e4:05:99:7b:13:
                    0b:ec:5f:fc:b6:17:9c:ce:78:c0:97:47:b7:18:e0:
                    e6:e5:93:ec:c0:21:a0:f6:cc:11:21:33:c3:53:ef:
                    cd:e7:6e:e8:a2:53:8d:73:d9:44:ee:20:34:93:ca:
                    2a:a0:07:96:24:8d:18:d1:d4:c2:bd:26:37:0c:86:
                    7f:b5:bd:d1:58:aa:9d:81:dc:4a:cd:1a:78:2b:cf:
                    42:99:60:94:5c:15:4d:49:2e:27:fe:6c:d9:16:36:
                    95:b8:70:28:04:b9:c1:99:ab:1c:ac:99:3a:f7:c3:
                    4b:3f:34:17:f9:ab:de:ae:04:95:22:de:0a:ed:fb:
                    e2:e0:2a:33:77:02:25:f4:c0:70:5f:0c:c7:da:3b:
                    b4:6b:88:9f:d3:13:58:b9:01:05:38:56:b3:9b:cd:
                    eb:5e:5f:26:e8:4b:5b:26:c4:b5:bc:0b:77:b3:c4:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:56:86:B0:E4:CE:93:3C:9D:87:C3:10:F0:EE:57:64:50:59:23:8B
            X509v3 Authority Key Identifier:
                keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:43:d2:c8:9d:81:66:17:2e:c7:1d:fa:36:8d:69:f9:e0:0a:
         af:2c:e3:31:01:ed:bf:26:1d:ab:39:3c:18:a6:6d:4e:75:d7:
         8d:7a:fd:a2:e1:ce:61:09:ec:9b:e1:c1:b1:01:62:fc:b9:ae:
         bc:d5:a5:a1:2c:4c:bd:08:6e:d4:04:0a:34:df:f0:96:21:7c:
         1e:2f:79:28:24:28:12:c0:e7:4b:81:ef:91:be:b6:5e:e2:95:
         f3:e0:8c:24:48:62:14:4b:23:e7:7d:c1:a6:87:52:78:cc:08:
         14:36:0c:cb:ce:9c:d8:8c:71:09:a8:df:cb:3f:0a:f0:b3:b2:
         0f:6e:7b:ae:43:6a:a0:c3:0f:1f:d7:14:c1:49:fa:7b:3b:d9:
         ce:ff:fb:40:77:dc:0c:54:eb:b5:57:8e:e4:37:af:6f:5b:b3:
         35:55:6b:e6:01:fc:45:df:6b:9b:7a:93:a3:a2:ff:d3:df:63:
         8e:d9:82:64:87:b6:f1:77:75:5c:5d:3e:f8:bd:36:82:f8:93:
         1e:d7:c2:4e:cc:c3:44:32:00:22:cd:8a:3d:2a:96:7f:9a:44:
         89:3b:27:de:af:f7:da:53:64:80:2c:b3:59:37:11:0c:ac:ea:
         51:be:8a:60:39:4b:4e:6b:4c:ba:15:f7:f9:13:9c:ac:5d:15:
         4c:82:c5:31
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUWSjAz/Xvw4GNSpF+IXN05h8knKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz
MjI3NDM5RjAeFw0yNjA1MDcwMjUyNTFaFw0yNzA1MDYwMjU3NTFaMDMxMTAvBgNV
BAMTKDQ1NTY4NkIwRTRDRTkzM0M5RDg3QzMxMEYwRUU1NzY0NTA1OTIzOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLyMDATYGB7qwX+tlvEtp/MQZB
OFCCYJGp6YluzGETIp+2ZH/BpxU4UdhOeTIFIl9hh/DEs7z1rHQpJL1Yyy+joJHe
mmGhI7b0Wcwvw9tb74v2JSjkBZl7EwvsX/y2F5zOeMCXR7cY4Oblk+zAIaD2zBEh
M8NT783nbuiiU41z2UTuIDSTyiqgB5YkjRjR1MK9JjcMhn+1vdFYqp2B3ErNGngr
z0KZYJRcFU1JLif+bNkWNpW4cCgEucGZqxysmTr3w0s/NBf5q96uBJUi3grt++Lg
KjN3AiX0wHBfDMfaO7RriJ/TE1i5AQU4VrObzeteXyboS1smxLW8C3ezxEV9AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQURVaGsOTOkzydh8MQ8O5XZFBZI4swHwYDVR0j
BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5
RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5OTAxNDYvMC8zMTMwMzMyZTMz
MzkyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzczNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmcnyDANBgkqhkiG9w0BAQsFAAOCAQEAPkPSyJ2BZhcuxx36No1p
+eAKryzjMQHtvyYdqzk8GKZtTnXXjXr9ouHOYQnsm+HBsQFi/LmuvNWloSxMvQhu
1AQKNN/wliF8Hi95KCQoEsDnS4Hvkb62XuKV8+CMJEhiFEsj533BpodSeMwIFDYM
y86c2IxxCajfyz8K8LOyD257rkNqoMMPH9cUwUn6ezvZzv/7QHfcDFTrtVeO5Dev
b1uzNVVr5gH8Rd9rm3qTo6L/099jjtmCZIe28Xd1XF0++L02gviTHtfCTszDRDIA
Is2KPSqWf5pEiTsn3q/32lNkgCyzWTcRDKzqUb6KYDlLTmtMuhX3+ROcrF0VTILF
MQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:53:21 2026 by rpki-client