Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e302e302f31392d3139203d3e203130323132.roa
File:                     3231382e39372e302e302f31392d3139203d3e203130323132.roa (raw, json)
Hash identifier:          jkfreUpvfI0fKDkwGijcN0Vb1A7QBYaW2wdokv5SAc0=
Subject key identifier:   EF:1F:32:98:C7:84:C7:9F:BA:CB:27:74:72:0E:B8:1A:1D:5A:FC:B7
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       203FE6614DAC54B52BF25A45818AA7BE987353CA
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e302e302f31392d3139203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 07:38:12 +0000
ROA not before:           Tue 28 Apr 2026 07:33:12 +0000
ROA not after:            Tue 27 Apr 2027 07:38:12 +0000
asID:                     10212
IP address blocks:        218.97.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3f:e6:61:4d:ac:54:b5:2b:f2:5a:45:81:8a:a7:be:98:73:53:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 07:33:12 2026 GMT
            Not After : Apr 27 07:38:12 2027 GMT
        Subject: CN=EF1F3298C784C79FBACB2774720EB81A1D5AFCB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:5a:ad:90:8e:cc:4c:d0:3e:5d:04:e2:38:
                    bd:c6:98:3d:1c:e5:02:6a:3d:01:9b:7c:2f:c4:7e:
                    81:e7:70:1e:83:d2:b1:25:0c:18:53:af:ee:48:0c:
                    3a:f9:5f:8b:78:91:04:9c:c7:30:cf:88:3a:72:a3:
                    d1:85:db:03:bc:c7:ed:19:e5:b4:b9:26:aa:fc:eb:
                    24:8d:56:17:6b:72:f9:45:f0:dc:c1:72:7b:af:a3:
                    1d:ec:09:40:4e:9c:8c:0f:05:aa:be:5c:24:81:94:
                    44:aa:6e:c2:f1:72:cd:44:3f:85:1e:83:64:65:b9:
                    da:ae:b6:b1:dd:0d:fb:87:e9:96:54:17:26:b7:e3:
                    e0:37:7b:72:bd:33:db:a0:83:e6:79:70:43:08:1d:
                    7a:83:e9:ec:70:eb:0e:7c:3a:83:dd:f5:55:50:7e:
                    45:76:e4:a1:2e:90:57:bc:75:4a:51:c4:e8:3f:1f:
                    13:fc:29:34:dc:a9:cc:ad:ee:1f:56:39:6e:78:cd:
                    a4:81:28:61:38:62:6c:51:47:59:bd:03:35:06:61:
                    f2:4d:d5:25:17:66:ec:d1:33:4f:25:6a:7e:40:6a:
                    ac:b7:68:c1:b5:46:43:c5:17:bf:c0:4b:e0:21:71:
                    ad:fa:10:6c:e8:20:43:aa:70:2c:5d:16:87:a0:79:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1F:32:98:C7:84:C7:9F:BA:CB:27:74:72:0E:B8:1A:1D:5A:FC:B7
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e302e302f31392d3139203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.97.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:89:ac:9e:64:e2:ff:9a:3b:91:7a:ee:37:51:e5:53:6c:e1:
         0d:eb:45:3f:d6:f4:15:99:80:03:fb:12:40:df:4f:fa:d6:70:
         c2:a9:9b:a4:81:8b:41:c5:ec:a8:64:c0:fd:75:13:e0:82:96:
         0b:78:4f:94:cb:b9:b2:ee:87:82:ea:1f:ed:54:d6:57:07:61:
         00:bb:71:6f:c8:4d:8b:30:73:8d:48:b3:a5:da:dd:3b:9c:f1:
         ef:7b:24:6b:90:b9:fe:30:9d:d2:cc:23:65:9c:a9:ff:73:fb:
         8b:17:fc:ff:8c:cd:f8:23:c4:42:e3:db:95:38:5b:4b:90:30:
         62:0f:62:d7:0d:1f:b7:d5:2e:13:16:9e:91:31:a7:2b:e3:46:
         06:6e:15:fb:a2:64:9c:d3:03:84:77:4c:27:d2:41:d2:ff:07:
         e7:4b:dc:72:49:d3:3e:e5:66:f9:45:86:8c:73:97:d1:b6:48:
         15:f2:9d:10:79:34:68:36:04:e2:48:ef:60:8e:8a:a9:38:71:
         ea:58:4f:95:c8:14:28:ee:3f:fa:82:61:b4:c7:d5:e5:16:3f:
         4c:9d:a9:eb:3f:8f:23:4c:bc:2f:14:0d:66:c1:84:46:f3:64:
         76:a5:02:67:d3:7a:1d:de:bd:91:a2:52:24:c4:bd:22:34:a0:
         77:c9:5c:80
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUID/mYU2sVLUr8lpFgYqnvphzU8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx
NkYzQTdFRjAeFw0yNjA0MjgwNzMzMTJaFw0yNzA0MjcwNzM4MTJaMDMxMTAvBgNV
BAMTKEVGMUYzMjk4Qzc4NEM3OUZCQUNCMjc3NDcyMEVCODFBMUQ1QUZDQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvc1qtkI7MTNA+XQTiOL3GmD0c
5QJqPQGbfC/EfoHncB6D0rElDBhTr+5IDDr5X4t4kQScxzDPiDpyo9GF2wO8x+0Z
5bS5Jqr86ySNVhdrcvlF8NzBcnuvox3sCUBOnIwPBaq+XCSBlESqbsLxcs1EP4Ue
g2RludqutrHdDfuH6ZZUFya34+A3e3K9M9ugg+Z5cEMIHXqD6exw6w58OoPd9VVQ
fkV25KEukFe8dUpRxOg/HxP8KTTcqcyt7h9WOW54zaSBKGE4YmxRR1m9AzUGYfJN
1SUXZuzRM08lan5Aaqy3aMG1RkPFF7/AS+Ahca36EGzoIEOqcCxdFoegeYpPAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU7x8ymMeEx5+6yyd0cg64Gh1a/LcwHwYDVR0j
BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5
QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTM4MmUzOTM3
MmUzMDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMxMzAzMjMxMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXaYQAwDQYJKoZIhvcNAQELBQADggEBAHqJrJ5k4v+aO5F67jdR5VNs4Q3rRT/W
9BWZgAP7EkDfT/rWcMKpm6SBi0HF7KhkwP11E+CClgt4T5TLubLuh4LqH+1U1lcH
YQC7cW/ITYswc41Is6Xa3Tuc8e97JGuQuf4wndLMI2Wcqf9z+4sX/P+MzfgjxELj
25U4W0uQMGIPYtcNH7fVLhMWnpExpyvjRgZuFfuiZJzTA4R3TCfSQdL/B+dL3HJJ
0z7lZvlFhoxzl9G2SBXynRB5NGg2BOJI72COiqk4cepYT5XIFCjuP/qCYbTH1eUW
P0ydqes/jyNMvC8UDWbBhEbzZHalAmfTeh3evZGiUiTEvSI0oHfJXIA=
-----END CERTIFICATE-----
Generated at Wed May 13 19:36:19 2026 by rpki-client