Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36342e302f32322d3232203d3e203130323132.roa
File:                     3231382e39362e36342e302f32322d3232203d3e203130323132.roa (raw, json)
Hash identifier:          fkoLwqEj3uFzNxAIdo08LYmkxpQv1OrvimOaXtvU8j0=
Subject key identifier:   F9:05:C3:AE:F0:85:AE:F6:0A:53:0A:DA:5B:40:8B:1B:E2:6C:FD:80
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       32CC90B9FA92A786D29A9AAA806C698F0F88D654
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36342e302f32322d3232203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 07:14:41 +0000
ROA not before:           Tue 28 Apr 2026 07:09:41 +0000
ROA not after:            Tue 27 Apr 2027 07:14:41 +0000
asID:                     10212
IP address blocks:        218.96.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cc:90:b9:fa:92:a7:86:d2:9a:9a:aa:80:6c:69:8f:0f:88:d6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 07:09:41 2026 GMT
            Not After : Apr 27 07:14:41 2027 GMT
        Subject: CN=F905C3AEF085AEF60A530ADA5B408B1BE26CFD80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:e2:35:0a:e9:66:d7:9e:4f:b2:9c:e3:17:
                    ba:89:22:dd:9e:4f:6e:2e:9a:70:51:33:ac:a2:0b:
                    f2:e1:5e:67:e9:db:72:c0:0a:ef:2e:0b:b3:aa:1f:
                    f5:8e:39:c5:6c:d0:64:d0:0f:e7:40:93:2f:42:1b:
                    d5:b7:fa:c8:e2:24:df:1c:16:ac:1f:63:05:57:52:
                    21:05:21:6d:d5:d1:37:c1:c4:99:11:0d:71:4f:a5:
                    12:fd:86:f2:0c:be:cb:ed:8a:71:42:76:68:df:50:
                    db:54:5a:0a:9e:14:6d:e3:ab:b4:aa:e5:42:a0:e7:
                    87:95:96:9b:e3:e2:32:51:1b:f2:e1:ff:4c:0a:08:
                    ee:92:f8:21:1f:27:f0:59:74:8c:d1:1b:8f:f0:cd:
                    02:44:28:88:c4:49:14:34:d9:4e:c0:64:3c:ee:0b:
                    63:00:13:14:7c:ca:8b:75:3a:50:7f:90:aa:78:c4:
                    c1:97:ab:69:b9:ed:e6:27:24:11:a1:d4:b8:04:94:
                    0d:36:5f:2e:de:6a:87:84:d0:25:e7:e8:fb:98:df:
                    77:ea:cb:4a:59:c7:68:fa:c0:32:40:d2:f0:9a:33:
                    a6:fe:22:18:88:d0:3e:67:f5:cd:a5:b5:c5:0a:f4:
                    32:07:0e:92:f8:33:d8:2d:11:f3:7c:50:75:f1:eb:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:05:C3:AE:F0:85:AE:F6:0A:53:0A:DA:5B:40:8B:1B:E2:6C:FD:80
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36342e302f32322d3232203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.96.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:2f:a8:a1:20:0c:91:40:ad:34:50:de:46:df:be:92:91:7a:
         40:60:ca:c4:44:f4:8c:6f:6c:68:9c:69:5a:84:27:01:40:14:
         68:4f:3e:a8:ae:b1:ba:a3:f0:04:b5:f8:bb:45:43:9f:d6:31:
         66:dd:eb:77:d4:52:3e:49:49:fa:20:83:9d:32:bc:c6:b5:86:
         28:5b:50:36:48:d8:c6:76:22:4b:4f:55:9f:3c:b2:9d:87:7a:
         11:e9:21:47:99:be:a8:10:39:db:49:5f:e3:30:fc:27:63:59:
         fc:78:2d:80:4c:01:32:cb:e3:28:93:15:52:c7:33:cf:2d:f1:
         70:94:5e:c0:37:cc:9c:b1:55:61:33:07:bd:cd:d5:ed:de:e0:
         93:4e:7a:6f:2f:54:78:93:0c:ef:74:2e:5d:cd:e4:7f:de:ba:
         d2:13:d9:01:0c:29:73:1c:42:e5:5b:1d:a8:fc:6a:0e:92:37:
         2a:5b:54:1c:04:34:13:42:f4:3a:f7:0c:76:53:25:4c:c5:ff:
         de:6d:d4:6b:4f:1a:bf:b0:b5:67:2e:f2:8e:fa:4b:44:89:68:
         d9:e7:21:c3:45:09:ce:66:f0:0e:12:53:e8:b6:5f:16:49:77:
         e6:a1:37:ee:eb:2c:98:6f:5d:2d:44:1e:47:ac:ca:2d:37:2b:
         f7:92:56:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:10 2026 by rpki-client