Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e2034383437.roa
File:                     3130332e3231332e38382e302f32312d3231203d3e2034383437.roa (raw, json)
Hash identifier:          Fn2JIsnI62FG5JIafJX3uo71G48Qp28JYYGCBSo+m2s=
Subject key identifier:   01:A6:96:99:0F:EC:F5:3B:B0:04:EB:24:66:73:A7:D7:D0:7F:E1:CF
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       62A6BD219A7ADBD6E83A10E5E47E5627CA75119B
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e2034383437.roa
Signing time:             Tue 12 May 2026 08:20:41 +0000
ROA not before:           Tue 12 May 2026 08:15:41 +0000
ROA not after:            Tue 11 May 2027 08:20:41 +0000
asID:                     4847
IP address blocks:        103.213.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a6:bd:21:9a:7a:db:d6:e8:3a:10:e5:e4:7e:56:27:ca:75:11:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: May 12 08:15:41 2026 GMT
            Not After : May 11 08:20:41 2027 GMT
        Subject: CN=01A696990FECF53BB004EB246673A7D7D07FE1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:2d:57:c3:cd:31:40:9d:27:a6:23:90:57:
                    45:68:be:a3:18:61:d6:2e:57:a4:b1:33:a8:d7:ca:
                    26:ea:e6:b5:9e:1c:3d:47:40:ed:2c:ad:21:ee:52:
                    9f:1a:c3:fc:d4:4e:80:c7:4b:39:d4:48:71:48:d9:
                    8c:91:29:dc:fa:6e:41:ca:52:24:f2:76:58:43:12:
                    f7:65:08:ef:de:7b:3f:da:a4:a8:56:ea:04:71:f8:
                    d2:6d:11:d5:da:02:9c:89:bc:da:ac:06:2b:04:45:
                    ff:77:43:0e:6a:76:db:4c:0c:ee:d3:2b:60:07:cb:
                    d4:e7:f9:c1:49:57:e7:80:2f:9e:4e:b3:f6:e9:e3:
                    2f:41:df:f9:a7:36:57:bf:d2:bf:c0:6a:9f:09:07:
                    b0:44:10:69:ed:e5:91:9e:27:36:b1:6e:9c:7e:74:
                    6e:b2:1e:7a:35:63:61:29:a0:9b:7f:62:2b:1b:e9:
                    69:be:64:ee:ae:a1:85:3c:06:82:78:75:f1:54:61:
                    2a:fd:55:20:a4:a2:c3:f8:1b:31:79:41:e7:e8:b1:
                    3e:a7:5c:b0:39:26:6d:5c:78:6c:68:9f:84:24:7b:
                    67:51:50:da:a6:b8:58:a5:b5:19:1d:6e:04:e8:81:
                    32:8e:38:01:df:6e:9f:80:eb:53:02:d2:f0:cc:62:
                    66:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A6:96:99:0F:EC:F5:3B:B0:04:EB:24:66:73:A7:D7:D0:7F:E1:CF
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:f5:9f:76:0b:95:fe:e8:0a:69:4b:f0:a3:81:00:dc:a4:
         a8:16:24:f1:f1:9c:7c:67:85:df:3a:77:79:c4:b6:d3:68:66:
         43:5e:1e:50:46:72:69:af:89:3a:00:01:a5:69:aa:1e:7a:d5:
         96:20:1d:d9:49:01:f6:50:65:7e:5b:a8:4f:b5:3d:71:33:3e:
         ca:f2:b5:62:9a:ec:bd:43:2d:b1:cc:e8:09:58:e2:74:80:22:
         93:9d:94:59:70:cf:a9:23:37:6c:93:67:fc:c4:04:5a:b8:c4:
         b2:9f:d9:7e:02:35:cb:5e:c9:c1:68:59:87:f6:ce:22:c7:b3:
         fd:42:32:52:30:24:dc:31:3b:a8:e8:60:de:1d:5c:09:01:44:
         54:66:11:f4:52:0a:fd:5b:4b:3f:aa:e8:4e:bc:c9:66:b6:ad:
         23:7b:6e:ee:51:9e:5d:a4:d4:98:75:f7:e9:72:1c:93:58:2f:
         9c:93:02:f1:84:7e:8c:4b:fa:eb:3b:61:9d:ad:8f:95:c2:db:
         00:6f:d1:d9:ba:5f:98:39:f8:c9:20:28:0f:34:08:8a:41:53:
         00:fa:88:18:f2:a3:c2:72:03:15:ff:94:eb:cc:75:79:cb:af:
         45:cc:d4:58:2b:b6:bf:4e:9c:a8:ea:7a:f7:d0:38:91:1d:54:
         07:d3:d1:cc
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUYqa9IZp629boOhDl5H5WJ8p1EZswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1
QUQzRjM5ODAeFw0yNjA1MTIwODE1NDFaFw0yNzA1MTEwODIwNDFaMDMxMTAvBgNV
BAMTKDAxQTY5Njk5MEZFQ0Y1M0JCMDA0RUIyNDY2NzNBN0Q3RDA3RkUxQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOC1Xw80xQJ0npiOQV0VovqMY
YdYuV6SxM6jXyibq5rWeHD1HQO0srSHuUp8aw/zUToDHSznUSHFI2YyRKdz6bkHK
UiTydlhDEvdlCO/eez/apKhW6gRx+NJtEdXaApyJvNqsBisERf93Qw5qdttMDO7T
K2AHy9Tn+cFJV+eAL55Os/bp4y9B3/mnNle/0r/Aap8JB7BEEGnt5ZGeJzaxbpx+
dG6yHno1Y2EpoJt/Yisb6Wm+ZO6uoYU8BoJ4dfFUYSr9VSCkosP4GzF5QefosT6n
XLA5Jm1ceGxon4Qke2dRUNqmuFiltRkdbgTogTKOOAHfbp+A61MC0vDMYmYBAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUAaaWmQ/s9TuwBOskZnOn19B/4c8wHwYDVR0j
BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB
NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTc4MzE2ODg1NjU1NTU1LzAvMzEzMDMzMmUzMjMx
MzMyZTM4MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA2fVWDANBgkqhkiG9w0BAQsFAAOCAQEAJ/X1n3YLlf7oCmlL8KOBANykqBYk
8fGcfGeF3zp3ecS202hmQ14eUEZyaa+JOgABpWmqHnrVliAd2UkB9lBlfluoT7U9
cTM+yvK1YprsvUMtsczoCVjidIAik52UWXDPqSM3bJNn/MQEWrjEsp/ZfgI1y17J
wWhZh/bOIsez/UIyUjAk3DE7qOhg3h1cCQFEVGYR9FIK/VtLP6roTrzJZratI3tu
7lGeXaTUmHX36XIck1gvnJMC8YR+jEv66zthna2PlcLbAG/R2bpfmDn4ySAoDzQI
ikFTAPqIGPKjwnIDFf+U68x1ecuvRczUWCu2v06cqOp699A4kR1UB9PRzA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:41:13 2026 by rpki-client