Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e39312e33322e302f31392d3139203d3e203233383432.roa
File:                     3230332e39312e33322e302f31392d3139203d3e203233383432.roa (raw, json)
Hash identifier:          ErQU8yFT8y24jJytx9oiI+jAe3QgFI6/xnW3QQs1M28=
Subject key identifier:   0F:F6:0B:A9:40:AA:78:54:30:A8:F0:4C:B5:63:08:8A:3E:C6:C5:79
Certificate issuer:       /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
Certificate serial:       0399BA8C73D56B39C30847F536ED44FFC7F6F4E3
Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e39312e33322e302f31392d3139203d3e203233383432.roa
Signing time:             Fri 24 Apr 2026 09:56:38 +0000
ROA not before:           Fri 24 Apr 2026 09:51:38 +0000
ROA not after:            Fri 23 Apr 2027 09:56:38 +0000
asID:                     23842
IP address blocks:        203.91.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:99:ba:8c:73:d5:6b:39:c3:08:47:f5:36:ed:44:ff:c7:f6:f4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
        Validity
            Not Before: Apr 24 09:51:38 2026 GMT
            Not After : Apr 23 09:56:38 2027 GMT
        Subject: CN=0FF60BA940AA785430A8F04CB563088A3EC6C579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:1b:ec:d6:a7:00:ff:42:cf:17:bc:00:8f:
                    eb:b3:07:d3:5d:b5:62:47:d5:32:c8:48:d5:1d:eb:
                    c0:60:3a:e6:69:c2:f8:0d:72:aa:c9:89:33:20:34:
                    77:2b:1f:7c:43:87:ee:e4:f9:32:07:13:b6:ec:64:
                    6e:a0:e6:f9:7b:df:2b:d8:ef:26:13:05:8f:be:1a:
                    17:9b:9e:08:b1:f4:cc:7c:24:b1:6b:a5:a5:10:bc:
                    ff:3c:ff:82:ce:d9:92:80:77:37:9e:b0:5a:18:81:
                    1e:20:0c:02:f4:45:8b:94:52:25:df:7c:dc:55:41:
                    bc:3a:cd:76:39:82:35:82:73:bc:e6:65:1a:a8:a4:
                    8b:63:93:64:69:0c:bb:4e:b5:02:5b:8d:36:e7:94:
                    eb:d1:17:56:0d:f5:ed:26:14:29:5c:18:59:2c:3e:
                    4e:5e:0d:1e:f7:c1:08:b5:b6:54:e8:65:64:f3:ff:
                    bc:f2:94:45:f9:34:83:71:a3:51:63:ea:07:29:37:
                    63:64:17:4e:11:a8:9e:36:42:2b:34:82:a2:65:ab:
                    fa:2b:ec:5d:98:d2:0d:5b:02:f3:fa:74:3f:06:6c:
                    dc:b8:8f:e9:f7:e0:d9:bc:3f:3f:bd:d5:8c:da:5a:
                    62:98:1d:cf:77:a4:f8:56:f8:fd:73:0d:51:c2:97:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F6:0B:A9:40:AA:78:54:30:A8:F0:4C:B5:63:08:8A:3E:C6:C5:79
            X509v3 Authority Key Identifier:
                keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e39312e33322e302f31392d3139203d3e203233383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.91.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:75:15:69:ca:08:c4:6f:0d:72:d5:16:3a:d5:87:4b:98:ea:
         22:a9:3d:ea:f8:51:94:0f:73:42:d6:be:63:cb:66:ef:76:87:
         a2:c3:9f:77:36:9f:15:6b:17:09:40:a0:cb:7f:b6:f0:ee:2f:
         59:a8:df:f7:96:7e:64:6c:b1:d2:89:92:8a:18:77:84:82:6f:
         b7:83:35:0c:17:9a:99:89:64:7d:a3:5f:f0:ee:32:f3:c9:0f:
         06:54:23:82:3c:43:2e:e7:a8:2f:d7:34:3e:70:3a:da:80:f7:
         fd:71:db:cb:ff:bc:f1:4c:a2:9c:90:ac:61:80:70:6a:9a:f7:
         3a:06:99:c7:5a:25:ba:f1:c8:2a:e1:71:68:ad:51:5a:cb:5c:
         64:6f:20:df:ad:26:6f:06:90:84:06:e7:6a:f8:c6:7a:51:08:
         d4:cd:ec:86:08:9c:5a:02:cc:d7:1d:3f:4b:63:74:9f:bb:7a:
         2c:b7:0b:a0:ee:42:e0:02:0b:cc:f7:4b:a4:5d:a7:af:76:d5:
         ab:70:85:fd:64:13:95:51:4f:c2:ba:1d:9b:9a:f7:cb:0a:f2:
         89:cb:91:62:1b:fe:3d:41:ab:bf:d4:f3:57:f0:6b:89:e6:6d:
         ae:7e:c5:6d:57:c7:8a:d8:03:da:d0:d6:66:63:37:b5:48:e0:
         ab:cd:a8:f1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUA5m6jHPVaznDCEf1Nu1E/8f29OMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0Njgw
RTVEMzE3MjAeFw0yNjA0MjQwOTUxMzhaFw0yNzA0MjMwOTU2MzhaMDMxMTAvBgNV
BAMTKDBGRjYwQkE5NDBBQTc4NTQzMEE4RjA0Q0I1NjMwODhBM0VDNkM1NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLPRvs1qcA/0LPF7wAj+uzB9Nd
tWJH1TLISNUd68BgOuZpwvgNcqrJiTMgNHcrH3xDh+7k+TIHE7bsZG6g5vl73yvY
7yYTBY++Ghebngix9Mx8JLFrpaUQvP88/4LO2ZKAdzeesFoYgR4gDAL0RYuUUiXf
fNxVQbw6zXY5gjWCc7zmZRqopItjk2RpDLtOtQJbjTbnlOvRF1YN9e0mFClcGFks
Pk5eDR73wQi1tlToZWTz/7zylEX5NINxo1Fj6gcpN2NkF04RqJ42Qis0gqJlq/or
7F2Y0g1bAvP6dD8GbNy4j+n34Nm8Pz+91YzaWmKYHc93pPhW+P1zDVHCl/h5AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUD/YLqUCqeFQwqPBMtWMIij7GxXkwHwYDVR0j
BBgwFoAUsNEkp9px8cdGbrngcQ50aA5dMXIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTk4OTQwOTU5NzQ4OTE1My8wL0IwRDEyNEE3REE3MUYxQzc0NjZFQjlFMDcxMEU3
NDY4MEU1RDMxNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0NjgwRTVEMzE3Mi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5OTg5NDA5NTk3NDg5MTUzLzAvMzIzMDMzMmUzOTMx
MmUzMzMyMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzIzMzM4MzQzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBctbIDANBgkqhkiG9w0BAQsFAAOCAQEAnHUVacoIxG8NctUWOtWHS5jqIqk9
6vhRlA9zQta+Y8tm73aHosOfdzafFWsXCUCgy3+28O4vWajf95Z+ZGyx0omSihh3
hIJvt4M1DBeamYlkfaNf8O4y88kPBlQjgjxDLueoL9c0PnA62oD3/XHby/+88Uyi
nJCsYYBwapr3OgaZx1oluvHIKuFxaK1RWstcZG8g360mbwaQhAbnavjGelEI1M3s
hgicWgLM1x0/S2N0n7t6LLcLoO5C4AILzPdLpF2nr3bVq3CF/WQTlVFPwrodm5r3
ywryicuRYhv+PUGrv9TzV/BrieZtrn7FbVfHitgD2tDWZmM3tUjgq82o8Q==
-----END CERTIFICATE-----
Generated at Wed May 13 21:34:32 2026 by rpki-client