Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38322e302f32342d3234203d3e203234313439.roa
File:                     3230332e3131392e38322e302f32342d3234203d3e203234313439.roa (raw, json)
Hash identifier:          WHy2r38x2YhyyospCvu1c8cYo9+O0OIDkR2xpEWrpO8=
Subject key identifier:   83:DB:69:AB:66:6D:28:2B:98:FD:D6:FF:CB:72:E9:08:55:D9:71:85
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       1712A7908591F0B25B4B41E6D10CF3F410A3C2D1
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38322e302f32342d3234203d3e203234313439.roa
Signing time:             Fri 08 May 2026 10:24:21 +0000
ROA not before:           Fri 08 May 2026 10:19:21 +0000
ROA not after:            Fri 07 May 2027 10:24:21 +0000
asID:                     24149
IP address blocks:        203.119.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:12:a7:90:85:91:f0:b2:5b:4b:41:e6:d1:0c:f3:f4:10:a3:c2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: May  8 10:19:21 2026 GMT
            Not After : May  7 10:24:21 2027 GMT
        Subject: CN=83DB69AB666D282B98FDD6FFCB72E90855D97185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:42:f7:cb:7a:fc:2c:e8:1c:72:28:e6:ed:34:
                    ab:85:62:70:3b:02:b7:b3:bb:94:b7:d0:a3:cb:15:
                    94:f1:96:1d:12:d0:74:e1:c6:af:6a:f6:9f:d0:70:
                    b9:2b:9c:97:f8:08:0b:fe:e7:e2:07:21:d2:25:3e:
                    3d:63:30:c8:b5:76:73:5b:eb:6f:41:1c:3b:fb:0b:
                    09:b6:67:96:ee:c3:1c:8a:8b:ad:f9:2b:1f:4f:3b:
                    4a:f1:2b:55:0b:3a:33:71:cd:76:f2:81:9b:c2:82:
                    93:93:01:1b:85:a3:00:9d:b7:00:18:01:9d:e4:7e:
                    04:9b:7e:0c:75:b3:01:8e:0f:a0:e2:f2:e0:b1:06:
                    5f:43:27:90:70:f2:a0:1c:b7:f7:2d:1e:19:85:49:
                    2c:2d:63:d8:c9:dc:fb:32:a2:dc:51:fe:8e:20:89:
                    b7:bc:f7:a8:a7:af:0d:27:bb:26:80:97:2b:70:c5:
                    a0:c6:95:3b:19:87:16:f5:44:a4:09:c1:bd:38:9f:
                    4d:d7:8c:19:29:68:4e:48:58:2d:4e:b1:c4:10:fd:
                    30:06:49:b7:3f:ad:13:8b:e7:8a:7c:3d:ec:08:68:
                    95:1b:e8:a6:70:5f:ed:6c:3f:b0:58:11:8d:6f:12:
                    f4:24:8e:f0:02:d0:cd:f8:48:c5:45:93:b6:e9:79:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DB:69:AB:66:6D:28:2B:98:FD:D6:FF:CB:72:E9:08:55:D9:71:85
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38322e302f32342d3234203d3e203234313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:58:25:23:fe:51:44:33:a5:ee:56:1b:81:8b:00:c6:6c:
         df:72:b1:d4:33:f3:7f:78:d2:29:1e:e1:83:60:6b:09:b7:e7:
         34:50:dd:59:75:49:6a:2a:00:b2:76:fc:a0:a7:6e:4d:eb:0d:
         18:64:b3:97:7f:47:66:f7:26:7e:ed:3a:3e:83:e3:ee:ca:6d:
         8e:c8:d6:a1:88:95:7f:62:c9:f7:78:cd:3c:61:fc:bb:37:c7:
         a8:5b:51:19:71:f0:05:dd:a2:c7:b0:4b:d4:51:dd:f8:ae:df:
         a5:65:e6:45:07:dc:74:48:bf:1e:cf:e7:bd:9f:3b:93:d7:c6:
         7c:21:66:9b:2d:c0:86:73:7d:d3:4a:b9:c0:58:c8:ca:66:4a:
         d5:ed:fb:38:30:9a:fa:a5:b6:9c:dc:8d:d2:11:b5:64:39:1d:
         33:4e:ea:92:69:f1:ed:df:f3:c4:e1:d0:68:d1:d3:26:18:d2:
         75:1e:82:df:6c:fb:e8:f4:39:55:e0:be:92:e1:ec:c8:fa:a6:
         73:74:86:64:54:ca:d5:c9:09:36:6f:71:4c:a7:47:14:da:f9:
         6f:d1:76:99:9f:26:46:8e:d7:cc:62:81:0c:36:6e:16:20:99:
         2c:06:5e:e8:ab:3a:83:2b:8d:ec:00:15:89:35:d6:e7:da:76:
         37:3d:dc:d5
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUFxKnkIWR8LJbS0Hm0Qzz9BCjwtEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0
MzYwQUU4NjAeFw0yNjA1MDgxMDE5MjFaFw0yNzA1MDcxMDI0MjFaMDMxMTAvBgNV
BAMTKDgzREI2OUFCNjY2RDI4MkI5OEZERDZGRkNCNzJFOTA4NTVEOTcxODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbQvfLevws6BxyKObtNKuFYnA7
Arezu5S30KPLFZTxlh0S0HThxq9q9p/QcLkrnJf4CAv+5+IHIdIlPj1jMMi1dnNb
629BHDv7Cwm2Z5buwxyKi635Kx9PO0rxK1ULOjNxzXbygZvCgpOTARuFowCdtwAY
AZ3kfgSbfgx1swGOD6Di8uCxBl9DJ5Bw8qAct/ctHhmFSSwtY9jJ3PsyotxR/o4g
ibe896inrw0nuyaAlytwxaDGlTsZhxb1RKQJwb04n03XjBkpaE5IWC1OscQQ/TAG
Sbc/rROL54p8PewIaJUb6KZwX+1sP7BYEY1vEvQkjvAC0M34SMVFk7bpefvDAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUg9tpq2ZtKCuY/db/y3LpCFXZcYUwHwYDVR0j
BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx
QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NDg4NDcyNzI1NDQ4Mjk0Ny8wLzMyMzAzMzJlMzEz
MTM5MmUzODMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMt3UjANBgkqhkiG9w0BAQsFAAOCAQEAmzVYJSP+UUQzpe5WG4GLAMZs
33Kx1DPzf3jSKR7hg2BrCbfnNFDdWXVJaioAsnb8oKduTesNGGSzl39HZvcmfu06
PoPj7sptjsjWoYiVf2LJ93jNPGH8uzfHqFtRGXHwBd2ix7BL1FHd+K7fpWXmRQfc
dEi/Hs/nvZ87k9fGfCFmmy3AhnN900q5wFjIymZK1e37ODCa+qW2nNyN0hG1ZDkd
M07qkmnx7d/zxOHQaNHTJhjSdR6C32z76PQ5VeC+kuHsyPqmc3SGZFTK1ckJNm9x
TKdHFNr5b9F2mZ8mRo7XzGKBDDZuFiCZLAZe6Ks6gyuN7AAViTXW59p2Nz3c1Q==
-----END CERTIFICATE-----
Generated at Wed May 13 21:32:10 2026 by rpki-client