Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e302e302f31392d3139203d3e203130323132.roa
File:                     3231302e352e302e302f31392d3139203d3e203130323132.roa (raw, json)
Hash identifier:          JvpKEbAeXygpqY9OwvcLj2Hi9B68NFmOly4j/0JgcNM=
Subject key identifier:   9D:B1:85:9A:D7:89:78:6D:C4:2E:CF:F9:6A:0F:6B:F5:EC:0F:1A:7E
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       20B4FDE1D21E163950A0762078FCCEB579DD088C
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e302e302f31392d3139203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 07:28:27 +0000
ROA not before:           Tue 28 Apr 2026 07:23:27 +0000
ROA not after:            Tue 27 Apr 2027 07:28:27 +0000
asID:                     10212
IP address blocks:        210.5.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b4:fd:e1:d2:1e:16:39:50:a0:76:20:78:fc:ce:b5:79:dd:08:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 07:23:27 2026 GMT
            Not After : Apr 27 07:28:27 2027 GMT
        Subject: CN=9DB1859AD789786DC42ECFF96A0F6BF5EC0F1A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:48:59:da:67:30:b8:df:fe:80:4a:2a:34:
                    c9:d8:2f:c6:70:8c:ca:17:96:aa:40:cf:1e:ab:57:
                    e6:ed:dc:87:32:87:96:b5:a9:03:a1:76:7d:f8:b3:
                    1e:ae:8a:0d:e3:8c:53:d3:00:e4:94:94:d5:f4:8a:
                    fc:d4:35:e4:1f:ea:6f:bd:c7:3f:c7:db:51:7e:86:
                    65:7b:4c:a8:6a:eb:78:26:bb:fc:81:26:18:a7:43:
                    a4:a2:e3:e0:d8:09:ee:bc:94:c6:42:d7:cf:54:9b:
                    0b:f5:46:04:9e:48:dc:42:43:fa:b3:92:2a:ed:49:
                    3e:65:20:bb:d3:3a:c1:8c:8f:cd:1c:af:c5:05:a0:
                    e5:e0:19:aa:12:0a:b3:c5:f7:b7:20:fa:ef:c6:c5:
                    b1:eb:e0:00:57:52:b3:84:a8:69:b2:2a:b1:d7:04:
                    f9:bb:65:a0:25:ac:a7:ee:b2:6c:86:db:c1:78:d4:
                    9d:97:b0:98:8e:fc:fc:fb:6d:a3:3b:bc:44:fd:a7:
                    54:98:1e:42:84:d0:80:f8:0c:d0:62:b5:89:71:b1:
                    88:fd:b3:bf:45:42:09:18:0e:78:b5:66:a9:4b:42:
                    68:e1:28:aa:00:c8:df:ab:58:d8:97:37:77:99:39:
                    2f:51:35:6a:e6:09:99:3e:d8:84:30:5f:ca:41:e4:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B1:85:9A:D7:89:78:6D:C4:2E:CF:F9:6A:0F:6B:F5:EC:0F:1A:7E
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e302e302f31392d3139203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.5.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:35:c4:e4:2a:11:b6:79:60:a3:9e:85:97:9e:b4:5e:be:d0:
         1a:4a:15:5c:80:ef:06:4e:d2:3d:3a:63:18:dc:51:43:d9:dd:
         d0:d1:30:45:83:2f:a6:68:54:55:ce:e7:b3:10:3a:5b:29:e3:
         e1:6d:2e:96:1d:94:1e:a1:19:0e:ac:bf:57:bf:20:30:be:05:
         a9:bd:91:ee:bf:bb:1b:30:a1:d7:ce:14:60:5b:ec:f7:b2:b1:
         7a:87:a8:d1:f8:8e:95:31:d6:a1:58:ab:32:dc:90:9d:ad:cc:
         e4:01:b3:67:23:f4:b6:8c:e0:a6:06:91:10:83:12:06:b7:f7:
         64:1b:8d:2f:12:27:79:9f:1d:a3:4a:d5:4d:47:17:c3:36:b6:
         59:6e:da:d1:82:dc:e2:88:2f:60:38:d4:8e:b2:65:d5:27:0a:
         5f:42:5e:68:41:fc:8d:d2:24:71:b4:f3:06:57:c8:03:f2:9b:
         1a:0b:b0:94:42:8a:b3:6c:8c:9c:58:eb:59:50:95:d9:9a:63:
         44:24:92:95:b5:a0:91:42:72:dd:b1:4f:2e:2a:87:e0:e4:d8:
         b5:fc:b0:42:53:af:cf:7d:3e:42:e6:58:aa:4b:cf:21:2d:5e:
         cd:14:5d:01:c8:bd:91:ec:db:b3:5d:54:a7:ed:0d:d4:48:2c:
         29:9b:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:24 2026 by rpki-client