Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e31382e302f32332d3233203d3e203130323132.roa
File:                     3231302e352e31382e302f32332d3233203d3e203130323132.roa (raw, json)
Hash identifier:          Q+olQzB5mtvhdyDV1TsDp/amlPVITI2dyc/Kgnhj+6I=
Subject key identifier:   58:AD:49:70:88:CC:5B:7C:DE:A6:02:22:67:A0:F1:EA:39:D1:31:94
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       2EAA7ACCD5F296D6EA0162EA6280C4B9D78182F6
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e31382e302f32332d3233203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 07:14:41 +0000
ROA not before:           Tue 28 Apr 2026 07:09:41 +0000
ROA not after:            Tue 27 Apr 2027 07:14:41 +0000
asID:                     10212
IP address blocks:        210.5.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:aa:7a:cc:d5:f2:96:d6:ea:01:62:ea:62:80:c4:b9:d7:81:82:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 07:09:41 2026 GMT
            Not After : Apr 27 07:14:41 2027 GMT
        Subject: CN=58AD497088CC5B7CDEA6022267A0F1EA39D13194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:c9:9a:a3:7c:1f:ec:62:47:a4:d4:02:ae:
                    1e:83:68:a1:8d:b9:70:3e:72:de:57:04:03:b0:b4:
                    98:73:3a:29:92:d9:72:56:e5:49:8f:a9:7c:61:61:
                    68:47:54:71:84:90:ed:3b:9d:1d:f7:f5:50:e8:7f:
                    1e:bb:4e:57:da:1f:f0:86:90:78:f3:f8:cd:0e:ca:
                    dd:55:38:0d:f3:4d:63:15:05:28:d3:59:ca:cd:83:
                    00:62:87:53:69:10:16:c2:65:b6:33:ff:df:c4:db:
                    02:82:56:5b:3a:0c:c0:8b:70:9a:d0:67:2b:6f:bf:
                    2e:d9:67:76:38:dd:2b:af:29:a7:00:96:83:7e:14:
                    0f:20:61:31:25:f8:e9:b9:4f:db:01:7e:7f:d1:55:
                    7c:c6:16:cc:64:6f:ef:95:9b:24:06:a2:a9:92:0d:
                    82:79:6a:d0:9e:63:fe:fe:59:79:20:e3:c7:7b:b6:
                    2b:35:10:fe:48:fd:dd:9e:06:96:a7:b6:f6:77:7c:
                    84:06:cc:5a:89:73:14:47:1a:11:61:00:28:28:b8:
                    e1:66:b3:db:3b:a2:19:6c:d2:6a:d5:0a:fb:c7:65:
                    a5:bc:1a:69:e3:62:45:e7:17:4b:32:04:46:c5:93:
                    70:25:c8:24:1a:77:bb:a0:d6:64:c5:20:7b:3e:a0:
                    e2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AD:49:70:88:CC:5B:7C:DE:A6:02:22:67:A0:F1:EA:39:D1:31:94
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231302e352e31382e302f32332d3233203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.5.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:7a:15:54:cf:15:0c:76:2a:e0:33:67:56:55:d0:46:3d:e4:
         86:90:ab:22:66:63:3f:49:53:cd:20:ea:fb:8b:75:d6:42:69:
         11:d0:ad:21:24:ec:1b:4f:9b:b6:ae:b0:4a:5e:15:e4:b9:56:
         6b:fd:bc:93:28:66:f4:64:8d:5d:a2:1d:7c:8c:f4:97:6c:9d:
         8e:2a:c0:3b:92:46:8a:ec:0f:e9:4e:90:c5:e0:25:8e:c7:a9:
         6a:d7:2a:dd:34:c4:aa:5a:00:1c:a1:64:72:3f:66:36:89:74:
         41:90:a0:df:9e:c0:9e:b9:e2:fe:56:98:f1:03:5a:dd:18:4a:
         c6:f2:a9:20:4c:33:a4:42:95:26:10:1a:27:f8:ff:74:8e:20:
         a5:57:0d:b5:5d:1d:57:0a:7e:c5:7d:7b:5c:02:17:a1:1d:7c:
         25:9b:a6:d1:43:8f:d4:bb:87:fd:33:36:46:b1:33:a7:aa:b9:
         da:22:f6:7f:b2:a9:39:e8:10:c8:84:4b:a6:4f:af:61:81:f1:
         c4:3d:22:c1:57:fa:95:04:a6:59:62:bb:3d:43:7d:27:aa:cb:
         b2:0c:36:c8:2c:df:47:ba:e1:ec:20:32:e6:65:19:c3:ba:ae:
         f6:c1:dd:88:03:c7:c1:e3:d9:b5:25:db:90:99:f0:7a:aa:23:
         90:fc:8d:2f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIULqp6zNXyltbqAWLqYoDEudeBgvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx
NkYzQTdFRjAeFw0yNjA0MjgwNzA5NDFaFw0yNzA0MjcwNzE0NDFaMDMxMTAvBgNV
BAMTKDU4QUQ0OTcwODhDQzVCN0NERUE2MDIyMjY3QTBGMUVBMzlEMTMxOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGmMmao3wf7GJHpNQCrh6DaKGN
uXA+ct5XBAOwtJhzOimS2XJW5UmPqXxhYWhHVHGEkO07nR339VDofx67TlfaH/CG
kHjz+M0Oyt1VOA3zTWMVBSjTWcrNgwBih1NpEBbCZbYz/9/E2wKCVls6DMCLcJrQ
Zytvvy7ZZ3Y43SuvKacAloN+FA8gYTEl+Om5T9sBfn/RVXzGFsxkb++VmyQGoqmS
DYJ5atCeY/7+WXkg48d7tis1EP5I/d2eBpantvZ3fIQGzFqJcxRHGhFhACgouOFm
s9s7ohls0mrVCvvHZaW8GmnjYkXnF0syBEbFk3AlyCQad7ug1mTFIHs+oOIhAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUWK1JcIjMW3zepgIiZ6Dx6jnRMZQwHwYDVR0j
BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5
QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTMwMmUzNTJl
MzEzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzAzMjMxMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHSBRIwDQYJKoZIhvcNAQELBQADggEBAKZ6FVTPFQx2KuAzZ1ZV0EY95IaQqyJm
Yz9JU80g6vuLddZCaRHQrSEk7BtPm7ausEpeFeS5Vmv9vJMoZvRkjV2iHXyM9Jds
nY4qwDuSRorsD+lOkMXgJY7HqWrXKt00xKpaAByhZHI/ZjaJdEGQoN+ewJ654v5W
mPEDWt0YSsbyqSBMM6RClSYQGif4/3SOIKVXDbVdHVcKfsV9e1wCF6EdfCWbptFD
j9S7h/0zNkaxM6equdoi9n+yqTnoEMiES6ZPr2GB8cQ9IsFX+pUEplliuz1DfSeq
y7IMNsgs30e64ewgMuZlGcO6rvbB3YgDx8Hj2bUl25CZ8HqqI5D8jS8=
-----END CERTIFICATE-----
Generated at Wed May 13 19:36:25 2026 by rpki-client