Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3233322e302f32322d3232203d3e2030.roa
File:                     3130332e38362e3233322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          OKvDntyF2/YpKqLVbJe235q2Bfga61uWC1eHgBKfFPo=
Subject key identifier:   16:19:9D:6C:64:84:6D:A7:53:8C:EA:E0:CB:D3:5B:C2:53:21:9C:FA
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       0FF38FC1D66FD205CC6270124191CC8848720A0C
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3233322e302f32322d3232203d3e2030.roa
Signing time:             Thu 23 Apr 2026 07:54:10 +0000
ROA not before:           Thu 23 Apr 2026 07:49:10 +0000
ROA not after:            Thu 22 Apr 2027 07:54:10 +0000
asID:                     0
IP address blocks:        103.86.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f3:8f:c1:d6:6f:d2:05:cc:62:70:12:41:91:cc:88:48:72:0a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: Apr 23 07:49:10 2026 GMT
            Not After : Apr 22 07:54:10 2027 GMT
        Subject: CN=16199D6C64846DA7538CEAE0CBD35BC253219CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4d:8f:ef:49:b6:dc:db:d3:06:13:51:93:b5:
                    81:92:33:a7:6f:6a:03:c0:f8:85:58:66:bf:a6:6a:
                    d8:1e:9b:0c:b1:09:b6:a6:c6:0d:60:53:4e:d9:f5:
                    a8:fd:fe:62:48:26:be:77:07:12:54:98:7a:42:ee:
                    c3:c1:f3:36:57:c1:08:2e:91:f0:3e:db:8d:76:fa:
                    52:6c:3e:0f:b1:c4:57:04:a8:a6:ed:4f:cc:a8:b9:
                    40:28:b9:23:2a:4f:dc:04:6d:b9:74:54:33:67:0e:
                    08:e4:66:a4:b7:60:72:d2:1e:17:b5:3a:44:0a:7a:
                    1f:17:f1:0b:a1:4a:3b:0a:3b:2f:0c:b8:0a:e4:ce:
                    22:8e:cc:92:cb:a2:f8:78:f5:d2:14:ba:c7:66:16:
                    d3:e8:7e:3a:6a:e0:b4:51:5e:af:8e:ec:7f:91:64:
                    78:20:cb:1d:c7:b0:e4:ff:ee:96:20:ff:fb:2c:32:
                    20:29:d2:98:8a:81:b3:5b:5a:72:bc:fb:4a:dc:19:
                    6d:05:37:33:cc:7d:16:bf:fa:3c:9f:6e:8e:68:e2:
                    5f:05:db:d2:23:87:5b:46:05:fe:f7:ae:4d:2e:03:
                    68:15:2e:fb:03:20:d6:a1:88:41:3b:ab:04:f5:a0:
                    04:2c:60:60:9e:83:78:4a:5c:27:3c:38:5a:18:89:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:19:9D:6C:64:84:6D:A7:53:8C:EA:E0:CB:D3:5B:C2:53:21:9C:FA
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3233322e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:c1:b9:8a:d9:43:05:d4:79:e8:c1:ad:bb:85:0a:f1:6c:ab:
         ba:39:b3:90:b1:55:e7:10:19:2d:61:0c:d5:6c:42:ee:32:2a:
         2a:6c:9a:18:fc:3e:37:52:af:11:79:ce:83:01:51:3e:24:54:
         52:78:0b:7a:70:da:3f:37:5c:af:91:76:5f:33:34:1c:0d:bc:
         7a:3c:ee:f9:dc:84:dd:90:c6:f7:3d:d0:54:ae:cb:2f:ac:4b:
         dd:13:76:47:5f:06:0d:c9:c2:eb:43:ee:b9:6d:a7:b1:51:1f:
         eb:30:32:6e:bc:cf:81:1f:94:d7:08:75:f1:c5:a8:2a:02:a9:
         07:fb:f2:fc:4d:0b:bd:9e:37:64:e2:cc:ac:da:99:2e:34:7e:
         a4:af:ba:f1:aa:95:29:15:b4:bb:ef:d5:a2:8e:6b:61:4a:89:
         ed:92:fc:d0:89:db:81:d6:56:a7:72:e9:6a:8a:9c:fe:86:a6:
         43:fc:fc:b0:63:17:9a:82:88:17:31:b4:fd:1a:a9:96:23:4d:
         31:9f:2d:7c:76:05:32:2c:fd:01:2f:9b:bf:53:57:71:bc:53:
         94:a3:3a:dc:62:27:30:a3:b9:b9:62:90:93:2c:4d:01:5e:ce:
         40:d5:df:e4:ec:91:40:a8:8c:05:0a:94:bd:9d:0f:14:ce:19:
         ed:eb:a5:5c
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUD/OPwdZv0gXMYnASQZHMiEhyCgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB
N0QxNEI0MDAeFw0yNjA0MjMwNzQ5MTBaFw0yNzA0MjIwNzU0MTBaMDMxMTAvBgNV
BAMTKDE2MTk5RDZDNjQ4NDZEQTc1MzhDRUFFMENCRDM1QkMyNTMyMTlDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlTY/vSbbc29MGE1GTtYGSM6dv
agPA+IVYZr+matgemwyxCbamxg1gU07Z9aj9/mJIJr53BxJUmHpC7sPB8zZXwQgu
kfA+2412+lJsPg+xxFcEqKbtT8youUAouSMqT9wEbbl0VDNnDgjkZqS3YHLSHhe1
OkQKeh8X8QuhSjsKOy8MuArkziKOzJLLovh49dIUusdmFtPofjpq4LRRXq+O7H+R
ZHggyx3HsOT/7pYg//ssMiAp0piKgbNbWnK8+0rcGW0FNzPMfRa/+jyfbo5o4l8F
29Ijh1tGBf73rk0uA2gVLvsDINahiEE7qwT1oAQsYGCeg3hKXCc8OFoYiclzAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUFhmdbGSEbadTjOrgy9NbwlMhnPowHwYDVR0j
BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC
RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzEzMDMzMmUzODM2
MmUzMjMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdW
6DANBgkqhkiG9w0BAQsFAAOCAQEA4cG5itlDBdR56MGtu4UK8WyrujmzkLFV5xAZ
LWEM1WxC7jIqKmyaGPw+N1KvEXnOgwFRPiRUUngLenDaPzdcr5F2XzM0HA28ejzu
+dyE3ZDG9z3QVK7LL6xL3RN2R18GDcnC60PuuW2nsVEf6zAybrzPgR+U1wh18cWo
KgKpB/vy/E0LvZ43ZOLMrNqZLjR+pK+68aqVKRW0u+/Voo5rYUqJ7ZL80InbgdZW
p3Lpaoqc/oamQ/z8sGMXmoKIFzG0/RqpliNNMZ8tfHYFMiz9AS+bv1NXcbxTlKM6
3GInMKO5uWKQkyxNAV7OQNXf5OyRQKiMBQqUvZ0PFM4Z7eulXA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:48:06 2026 by rpki-client