Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38312e302f32342d3234203d3e203234313439.roa
File:                     3230332e3131392e38312e302f32342d3234203d3e203234313439.roa (raw, json)
Hash identifier:          CI/G9+K0JUUx2xirtqXJdcA7AunXA1Q2LO14caZX8V4=
Subject key identifier:   5D:B2:88:1E:0F:69:BE:3F:9B:65:85:2D:6A:4F:A7:B0:B0:55:A5:CA
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       6B1B6C748E2C974715D757828564295BC3F1999F
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38312e302f32342d3234203d3e203234313439.roa
Signing time:             Fri 08 May 2026 10:24:21 +0000
ROA not before:           Fri 08 May 2026 10:19:21 +0000
ROA not after:            Fri 07 May 2027 10:24:21 +0000
asID:                     24149
IP address blocks:        203.119.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1b:6c:74:8e:2c:97:47:15:d7:57:82:85:64:29:5b:c3:f1:99:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: May  8 10:19:21 2026 GMT
            Not After : May  7 10:24:21 2027 GMT
        Subject: CN=5DB2881E0F69BE3F9B65852D6A4FA7B0B055A5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:e7:83:51:f4:eb:26:83:2f:d2:f5:e0:6f:
                    f0:3b:0d:b7:3a:a0:59:2c:59:39:4c:2c:69:1e:36:
                    5d:55:d0:1c:b6:aa:98:48:56:75:00:b5:03:84:10:
                    74:df:fe:c8:bb:4c:f6:a5:55:fe:d7:41:6a:45:47:
                    5a:a8:47:d2:26:e4:fd:5f:67:6d:75:13:63:25:f1:
                    af:ad:a7:da:e2:5f:c8:b7:e3:61:62:b9:d7:a9:1b:
                    14:26:8e:a3:fb:26:38:3b:b3:78:ef:bd:5b:31:7a:
                    c1:22:36:e7:4f:e3:f2:32:13:c1:78:f7:a7:82:ae:
                    35:e6:70:81:d1:1f:66:74:01:8e:d3:77:a8:87:0d:
                    8b:f6:58:80:28:f9:ce:22:69:f5:15:84:33:a7:48:
                    a5:a7:4f:24:b9:0e:65:47:c8:e1:d2:14:d7:56:44:
                    01:f4:48:8c:74:ad:53:c6:d4:4f:3c:bc:fe:8a:99:
                    dc:66:86:d3:cf:60:1f:13:81:ea:ef:c2:22:05:e9:
                    fa:4a:ae:f8:63:f0:d1:2d:9f:d6:cc:05:0d:ae:1b:
                    73:9d:3a:c0:d7:f5:71:d3:8b:37:9b:4a:3d:a5:2a:
                    0a:7d:28:75:66:15:03:84:f3:94:2a:0c:53:6d:39:
                    3c:e0:02:5b:ae:1a:46:49:de:ac:0b:76:9a:e1:97:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B2:88:1E:0F:69:BE:3F:9B:65:85:2D:6A:4F:A7:B0:B0:55:A5:CA
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38312e302f32342d3234203d3e203234313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ca:41:f7:25:bd:93:16:ba:51:f7:a5:20:1f:de:13:d3:15:
         49:fe:9c:a0:be:e4:87:95:74:c5:ce:cc:03:a2:42:84:cc:f8:
         86:12:6a:9d:31:80:ba:5a:4c:76:94:09:e8:0f:da:85:6b:70:
         35:6b:a5:a0:c7:7e:0f:d3:e7:2e:15:68:19:5f:fb:a7:30:84:
         2b:75:34:0e:b3:9b:1d:17:f7:fd:09:46:fe:00:2b:6c:4f:d4:
         7d:4a:51:5b:09:95:b2:2f:f4:af:36:bd:1f:15:21:7e:aa:6f:
         d7:0c:60:22:60:fc:10:0a:9b:f0:bf:10:72:2f:ba:5b:34:e6:
         ef:c6:13:f1:ec:09:e8:d0:8c:9d:20:99:a9:9a:fa:d7:ab:c5:
         03:6a:c4:4d:e3:dc:3b:8d:b1:4e:ea:05:d7:4d:39:d3:5d:9c:
         9c:44:d2:36:ce:fe:13:cf:80:a2:98:62:89:e4:e0:9d:e5:74:
         df:01:c5:3c:db:d4:8c:db:9b:a7:2c:1d:2b:e5:dc:aa:90:81:
         22:01:3a:7d:7b:91:ce:b7:66:ee:0e:6a:36:8a:bb:1f:92:75:
         0d:3b:0f:bf:e7:b9:1e:f2:42:2f:19:f5:75:c0:b7:87:bf:8d:
         1c:a2:c2:3d:91:7f:ba:92:dd:ea:b6:e9:99:d4:e6:03:bd:4f:
         8e:51:68:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:40 2026 by rpki-client