Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/3230332e39342e302e302f31392d3139203d3e203137373339.roa
File:                     3230332e39342e302e302f31392d3139203d3e203137373339.roa (raw, json)
Hash identifier:          +m3tQEFjHE7EvQqZt5ZFMX5uxgUV2P9Xu/hnIBd3mN4=
Subject key identifier:   B7:05:94:F4:64:E5:14:45:68:0F:1C:D1:0F:8A:1A:AA:E5:31:4D:DD
Certificate issuer:       /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Certificate serial:       342FE6170BECFBDC7373E7AAE864E4B86B36446A
Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/3230332e39342e302e302f31392d3139203d3e203137373339.roa
Signing time:             Mon 27 Apr 2026 07:43:43 +0000
ROA not before:           Mon 27 Apr 2026 07:38:43 +0000
ROA not after:            Mon 26 Apr 2027 07:43:43 +0000
asID:                     17739
IP address blocks:        203.94.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2f:e6:17:0b:ec:fb:dc:73:73:e7:aa:e8:64:e4:b8:6b:36:44:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
        Validity
            Not Before: Apr 27 07:38:43 2026 GMT
            Not After : Apr 26 07:43:43 2027 GMT
        Subject: CN=B70594F464E51445680F1CD10F8A1AAAE5314DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5b:cb:cf:41:dc:97:f0:59:0a:af:6a:ef:a7:
                    05:df:3d:89:32:df:bf:73:cf:be:48:14:71:06:e1:
                    ed:ee:d6:f1:a0:ea:cc:37:34:5e:bb:aa:b6:a8:5d:
                    fb:d9:ca:d8:e4:9a:60:3c:83:35:eb:c5:1e:75:20:
                    04:92:29:b3:38:a3:9e:3b:bb:74:28:96:96:70:09:
                    f0:44:a7:39:82:75:91:37:22:07:c7:11:3b:df:24:
                    87:59:ce:95:78:7a:7b:3a:0d:a7:a8:c6:0d:4f:99:
                    92:23:6a:48:22:30:e3:21:88:a2:76:e7:d2:6b:7a:
                    74:7d:1d:13:4f:8a:cc:e9:b3:49:98:68:be:ba:d5:
                    21:3f:ee:e7:d4:30:61:95:25:da:c2:57:5a:f7:ec:
                    7f:b7:6c:4d:aa:57:f0:f2:d6:ad:13:74:95:97:83:
                    f3:e2:bd:b7:7c:4e:b8:29:8a:67:66:47:e0:44:a1:
                    f1:54:33:dc:48:cb:51:1e:2f:44:67:91:b4:a0:95:
                    cd:88:6b:af:86:c6:44:87:92:0c:e6:a1:7c:0c:9d:
                    e1:f1:89:b7:d2:b2:53:0d:bc:58:f2:04:25:04:a7:
                    8e:a7:e7:f3:5e:69:16:09:64:e2:79:c1:3d:d9:b1:
                    94:4b:e5:a5:f0:c7:4a:86:62:c4:3f:c5:d2:d2:43:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:94:F4:64:E5:14:45:68:0F:1C:D1:0F:8A:1A:AA:E5:31:4D:DD
            X509v3 Authority Key Identifier:
                keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/3230332e39342e302e302f31392d3139203d3e203137373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.94.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         76:5a:bd:eb:a7:36:23:17:e3:51:a8:c5:19:8f:ed:0a:37:2e:
         d7:18:5e:15:d1:05:5b:35:cc:40:3a:0b:ec:24:3f:c9:eb:9c:
         1b:db:9a:62:e3:d5:91:cd:ff:1e:dc:af:2c:24:bd:f8:ee:1a:
         e7:45:ac:e9:81:2b:08:a2:29:a2:64:0b:a1:49:7b:f1:da:d6:
         d0:a6:ea:69:d0:8e:d6:38:e5:70:72:fe:2e:62:00:bb:33:80:
         46:fd:49:fc:53:98:15:ba:d2:da:e9:48:27:7a:1b:a1:68:1a:
         1b:31:52:1b:3a:cd:6b:17:b7:d3:47:c4:76:20:21:72:17:bb:
         e2:5e:72:92:35:58:99:39:63:0a:d3:e0:99:cc:cf:8b:33:39:
         ae:e9:ac:48:96:48:f2:26:ce:2c:05:9b:15:a0:06:63:4d:0c:
         f8:df:11:6f:5f:b4:8e:68:5b:32:c4:ce:db:75:23:e2:7e:dc:
         6b:7f:d1:fa:f0:3a:f3:0a:ac:ab:b6:d0:73:1f:80:7f:a2:19:
         26:d0:11:a5:07:7b:86:4b:e4:99:30:c3:3f:d1:39:fd:47:b0:
         ac:94:9b:28:c6:c7:9f:6b:00:64:1e:cc:b6:0c:51:cb:a3:f8:
         a4:50:7e:dc:71:29:bd:ca:77:c9:2a:60:89:93:71:54:5d:c7:
         53:7a:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:41 2026 by rpki-client