Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e33302e302f32342d3234203d3e203130323132.roa
File:                     3231382e39372e33302e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier:          iVBmiB4Mjt2ztizw7TYzv8GUTRfj4q0dTkddn6aor2o=
Subject key identifier:   F9:08:ED:13:01:32:5B:AC:8C:25:68:2B:B0:2F:6F:46:6D:C3:37:44
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       485CF167A21478BB684B4125FB72A9325245A649
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e33302e302f32342d3234203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 01:15:38 +0000
ROA not before:           Tue 28 Apr 2026 01:10:38 +0000
ROA not after:            Tue 27 Apr 2027 01:15:38 +0000
asID:                     10212
IP address blocks:        218.97.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5c:f1:67:a2:14:78:bb:68:4b:41:25:fb:72:a9:32:52:45:a6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 01:10:38 2026 GMT
            Not After : Apr 27 01:15:38 2027 GMT
        Subject: CN=F908ED1301325BAC8C25682BB02F6F466DC33744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:22:49:02:8b:55:75:89:00:f9:2a:67:eb:
                    9f:7a:08:6d:51:9f:23:e1:d0:3e:cf:2e:59:de:a6:
                    fb:f9:88:e8:ca:cd:b8:93:19:2a:64:28:5d:ee:dc:
                    28:06:79:32:5c:98:7b:72:36:ed:89:79:dc:74:dd:
                    9e:2b:bb:25:1b:7a:86:b6:bf:1c:65:ad:f2:85:25:
                    d6:33:9e:9e:f3:ae:ed:c2:e7:57:d1:f2:4e:61:32:
                    e5:de:e1:1d:93:65:cc:04:2f:3a:45:5f:2c:97:d2:
                    49:28:80:5e:50:40:f3:fe:f1:15:b9:7d:d2:c1:2a:
                    07:cd:8c:7c:e6:a4:a7:10:3d:48:2d:c0:f1:05:7e:
                    46:ca:a2:13:b9:1e:b0:10:12:f3:48:b9:d6:7a:39:
                    e9:a4:a0:b1:e9:10:9e:47:26:b0:a8:92:a8:4e:7e:
                    72:fc:e2:7a:b5:47:e4:ba:81:54:22:0d:2c:ad:b2:
                    99:ec:cf:6b:18:b8:ba:15:7c:a1:61:10:17:31:86:
                    7c:2d:e1:67:38:7f:fc:3e:50:2d:57:9c:d1:c4:85:
                    e6:d3:85:04:01:ac:59:51:06:72:98:8b:b0:25:fe:
                    38:20:61:d6:1f:9c:4a:9c:da:9b:e7:9c:a4:4c:f4:
                    3d:d1:ae:f2:1e:a5:29:a7:ec:42:47:d9:11:16:ff:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:08:ED:13:01:32:5B:AC:8C:25:68:2B:B0:2F:6F:46:6D:C3:37:44
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e33302e302f32342d3234203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.97.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:70:82:7a:a4:a9:8c:07:10:f1:21:8c:f2:17:1a:fe:3e:81:
         c7:87:1a:9d:72:8d:7f:14:69:50:e6:7a:57:13:25:cb:28:54:
         4e:e8:ec:22:d2:33:5a:60:b4:ac:61:51:f3:20:31:53:77:c8:
         82:66:b2:73:5c:13:dc:78:c2:b7:61:cf:6a:35:d1:2e:23:5d:
         bd:86:70:a0:4f:a0:18:69:c1:38:19:a5:9a:83:71:f2:82:a4:
         14:89:0e:2c:7c:6c:bd:d9:4e:12:4c:84:67:a8:8f:bf:ee:b5:
         24:3f:12:d1:6f:7a:56:41:59:c7:15:51:24:a5:f0:6d:d9:ae:
         a2:81:63:21:34:68:1d:21:68:0e:26:63:86:52:32:a4:68:1a:
         9e:a1:8d:ac:8f:6b:50:70:c8:46:c4:ca:19:f4:f0:dd:ec:23:
         b0:93:57:b5:c9:61:8b:fb:2e:86:d3:30:c5:0a:af:c7:75:4c:
         20:11:92:69:c0:be:7b:3d:ae:06:3b:48:cf:83:95:5a:de:dd:
         8d:2f:4b:f3:41:12:8a:6f:2e:1b:de:16:11:d7:82:d6:d0:a7:
         a5:69:6d:f6:36:87:41:18:69:74:fd:40:cf:74:5f:c0:7b:27:
         64:e2:c9:f6:54:58:c3:ad:9e:84:da:dc:78:52:34:b9:ad:48:
         12:14:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:36:12 2026 by rpki-client