Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa
File:                     3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier:          bK38O+wDDBO753c5azCJn5pqUThQEDZ04zoRei8ZckI=
Subject key identifier:   4B:63:D7:3B:4C:74:98:5E:83:C5:70:B7:43:E0:E8:F3:91:94:DD:3F
Certificate issuer:       /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645
Certificate serial:       78424F671FDA85179488018288501F21C965214C
Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa
Signing time:             Sat 09 May 2026 07:54:30 +0000
ROA not before:           Sat 09 May 2026 07:49:30 +0000
ROA not after:            Sat 08 May 2027 07:54:30 +0000
asID:                     4808
IP address blocks:        103.142.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:42:4f:67:1f:da:85:17:94:88:01:82:88:50:1f:21:c9:65:21:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645
        Validity
            Not Before: May  9 07:49:30 2026 GMT
            Not After : May  8 07:54:30 2027 GMT
        Subject: CN=4B63D73B4C74985E83C570B743E0E8F39194DD3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:7d:c4:c9:a0:7d:bf:14:1e:2c:99:fb:96:
                    ba:fb:3d:9e:bd:9b:0f:c0:b2:cf:34:ba:22:01:16:
                    43:cc:fa:bc:e6:66:31:8e:95:4b:ce:e9:f0:73:5d:
                    52:7f:e2:9f:f3:0d:f0:7c:99:9b:ec:10:b0:be:76:
                    24:c0:ee:4e:77:59:a9:c6:41:aa:1c:5e:5b:6b:f7:
                    ac:84:03:94:44:5c:ee:b6:ab:b9:57:7b:8e:ab:50:
                    6e:1d:74:68:b7:d6:70:ba:79:3a:cc:d8:71:fe:5f:
                    80:e9:7c:4d:5d:4f:cf:a8:1c:61:60:d7:2e:ae:18:
                    64:4d:26:c4:76:b7:69:8c:1c:b6:b5:a8:f9:79:c3:
                    23:5f:5e:15:59:b5:e1:9c:f4:f3:d5:88:e8:25:31:
                    09:97:b3:72:84:52:1c:d1:92:7f:fa:f2:70:34:cf:
                    8f:c6:92:ec:dd:15:43:39:d3:de:6d:67:d4:dd:4d:
                    cc:3c:f5:44:44:0c:54:54:2a:77:ad:2e:f0:eb:2e:
                    b9:07:6d:48:0f:20:12:9d:9b:44:4e:70:e3:9e:9d:
                    07:d5:36:96:c0:0b:e9:34:d1:50:47:24:5e:64:8b:
                    41:e8:a6:59:fe:e9:6e:38:0c:ac:2c:dd:c6:f2:95:
                    04:6f:73:8c:9e:b6:bf:8c:12:51:69:8d:69:81:1f:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:63:D7:3B:4C:74:98:5E:83:C5:70:B7:43:E0:E8:F3:91:94:DD:3F
            X509v3 Authority Key Identifier:
                keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:a3:b9:48:1d:a1:e1:a3:8e:e3:0c:f9:77:89:25:8c:0e:fb:
         3d:a6:0d:a6:29:32:e1:03:df:30:38:13:76:f6:19:ab:da:42:
         b1:58:3c:e3:36:cc:ff:81:b1:a5:7a:59:83:e2:6d:56:8b:c2:
         d8:43:7d:a3:6f:d9:7b:27:85:67:bd:f4:71:0e:c0:17:be:e5:
         83:da:b8:1b:53:fb:34:18:c4:09:c1:48:e8:98:5a:73:79:4e:
         0f:eb:94:1d:8b:24:7c:22:fc:d8:f9:22:3a:bf:ec:76:7c:e7:
         84:bd:c8:15:2b:38:53:ab:3d:fb:0d:de:0f:f0:f9:75:55:53:
         63:24:08:a2:ed:a7:41:92:d2:46:f4:fc:25:a9:3b:8e:e7:e3:
         86:fc:e1:f5:4b:77:3e:a2:dd:1f:ef:fd:e2:00:3a:4a:0b:cb:
         96:e2:9b:41:17:e0:92:1e:ee:d0:2c:18:20:27:74:a4:79:58:
         89:2f:95:32:1c:5a:b9:7d:d5:4f:83:4f:d4:48:1e:b3:7b:eb:
         fa:09:bf:4c:ae:2f:d6:3f:f9:3b:e1:06:07:22:69:76:b1:9f:
         34:25:54:91:b7:ea:94:4c:fa:12:29:18:c7:cd:e6:2a:c5:27:
         f4:2c:8d:a9:7c:a1:92:72:56:69:bf:a0:3f:ba:93:f8:90:31:
         56:8a:f8:4e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUeEJPZx/ahReUiAGCiFAfIcllIUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5
QTJCRDY0NTAeFw0yNjA1MDkwNzQ5MzBaFw0yNzA1MDgwNzU0MzBaMDMxMTAvBgNV
BAMTKDRCNjNENzNCNEM3NDk4NUU4M0M1NzBCNzQzRTBFOEYzOTE5NEREM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCX3EyaB9vxQeLJn7lrr7PZ69
mw/Ass80uiIBFkPM+rzmZjGOlUvO6fBzXVJ/4p/zDfB8mZvsELC+diTA7k53WanG
QaocXltr96yEA5REXO62q7lXe46rUG4ddGi31nC6eTrM2HH+X4DpfE1dT8+oHGFg
1y6uGGRNJsR2t2mMHLa1qPl5wyNfXhVZteGc9PPViOglMQmXs3KEUhzRkn/68nA0
z4/GkuzdFUM5095tZ9TdTcw89UREDFRUKnetLvDrLrkHbUgPIBKdm0ROcOOenQfV
NpbAC+k00VBHJF5ki0Hopln+6W44DKws3cbylQRvc4yetr+MElFpjWmBHxzJAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUS2PXO0x0mF6DxXC3Q+Do85GU3T8wHwYDVR0j
BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB
QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5OTk5NDY2MzE2MDM4MTQ0MS8wLzMxMzAzMzJlMzEz
NDMyMmUzMjMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWeO6jANBgkqhkiG9w0BAQsFAAOCAQEAyKO5SB2h4aOO4wz5d4kljA77
PaYNpiky4QPfMDgTdvYZq9pCsVg84zbM/4GxpXpZg+JtVovC2EN9o2/ZeyeFZ730
cQ7AF77lg9q4G1P7NBjECcFI6Jhac3lOD+uUHYskfCL82PkiOr/sdnznhL3IFSs4
U6s9+w3eD/D5dVVTYyQIou2nQZLSRvT8Jak7jufjhvzh9Ut3PqLdH+/94gA6SgvL
luKbQRfgkh7u0CwYICd0pHlYiS+VMhxauX3VT4NP1Eges3vr+gm/TK4v1j/5O+EG
ByJpdrGfNCVUkbfqlEz6EikYx83mKsUn9CyNqXyhknJWab+gP7qT+JAxVor4Tg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:03 2026 by rpki-client