Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e31352e302f32342d3234203d3e203130323132.roa
File:                     3231382e39372e31352e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier:          rM6lmLH/4A/UHLM4NY9Gnvi1ze5C4XsuKzKUjaVa2+k=
Subject key identifier:   73:48:90:A5:F2:A9:94:B8:4F:24:40:30:66:52:21:42:E3:C3:55:2C
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       0128C0265FCD52A7BA5C7351AC2888236D750E30
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e31352e302f32342d3234203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 01:15:38 +0000
ROA not before:           Tue 28 Apr 2026 01:10:38 +0000
ROA not after:            Tue 27 Apr 2027 01:15:38 +0000
asID:                     10212
IP address blocks:        218.97.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:28:c0:26:5f:cd:52:a7:ba:5c:73:51:ac:28:88:23:6d:75:0e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 01:10:38 2026 GMT
            Not After : Apr 27 01:15:38 2027 GMT
        Subject: CN=734890A5F2A994B84F24403066522142E3C3552C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:7f:6b:ed:a9:90:fe:2b:9c:01:59:1d:de:
                    69:e8:27:60:23:93:c3:27:b0:b4:83:d3:e2:9b:79:
                    1b:85:d7:ec:e9:43:a4:be:55:f9:c6:e5:63:3d:41:
                    b9:73:7e:6b:f9:a7:31:5f:55:f7:92:0e:2f:b6:03:
                    e8:89:42:f0:ea:61:df:45:53:79:bf:4c:59:85:f1:
                    54:6e:c9:5f:3f:50:0f:74:f7:1b:11:50:27:cd:1a:
                    7b:5c:88:22:fd:a7:0f:10:08:94:72:ce:7e:ad:bf:
                    1d:e5:b5:2d:1a:31:40:8f:ab:dc:a7:fc:78:43:1f:
                    e8:7c:cf:d1:30:30:2b:75:76:0b:66:ea:96:c7:fe:
                    b4:dc:4f:4e:22:23:95:3e:e5:7b:46:78:69:3f:ea:
                    17:ed:a4:cb:8b:6b:14:73:bd:07:d0:77:9d:d0:b4:
                    0d:4f:fe:0b:90:5d:f4:5c:90:a2:ee:fb:14:59:01:
                    4f:e7:ea:ad:3a:7e:8f:96:55:e0:30:c3:cb:2a:c4:
                    9b:a7:58:6a:71:ae:ba:df:09:e2:97:ad:5c:f2:07:
                    a6:e5:6c:78:d5:28:71:31:1c:91:02:b0:f3:ce:d6:
                    e7:0b:b8:1d:23:f8:72:9a:f7:92:44:b4:f4:06:73:
                    65:ed:b2:71:8f:d0:26:66:a2:4c:19:0d:84:40:5a:
                    02:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:48:90:A5:F2:A9:94:B8:4F:24:40:30:66:52:21:42:E3:C3:55:2C
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e31352e302f32342d3234203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.97.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:52:be:b6:80:c1:d4:ed:5e:0c:56:2c:ff:96:41:00:b8:
         23:36:c8:9f:97:ff:66:5c:4d:42:4d:9a:f9:fc:2f:31:d5:0f:
         24:fd:a6:88:f6:a5:d7:7e:61:ea:1f:18:1e:c3:2e:25:d2:82:
         55:6d:0b:83:b9:a7:a7:db:fb:3e:38:23:c0:5b:0b:c7:58:a7:
         98:be:1d:3e:7e:da:e1:cb:bd:89:a2:22:d8:a1:46:3c:9f:a5:
         b1:09:4b:ef:a1:40:b9:4e:b7:a7:66:c0:c1:db:60:78:cc:78:
         a4:71:8c:fe:e9:5a:8f:47:24:54:64:82:54:b3:bc:e0:34:4a:
         f4:8a:fe:7b:25:c0:78:fd:8d:a7:d4:91:50:b6:2b:cd:49:b9:
         8e:5d:44:50:1a:8b:0c:ee:3d:a4:5c:c5:93:26:be:bd:fd:8e:
         d2:95:7c:51:8d:04:ff:b1:90:4d:99:17:04:cd:81:55:a0:f8:
         4a:ff:0a:c9:34:02:10:e9:53:9d:aa:e0:78:3a:a9:b2:65:83:
         d6:5e:84:62:33:02:8c:c8:f0:a3:46:5d:9c:84:2f:04:15:9f:
         94:26:52:81:91:fb:67:94:bf:ce:ad:68:6b:ad:20:b9:cd:a9:
         d7:32:58:61:ee:e0:61:06:fa:65:10:f0:34:f0:83:83:38:83:
         b1:a8:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:08 2026 by rpki-client