Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a353030303a3a2f33362d3336203d3e203130323132.roa
File:                     323430333a623430303a353030303a3a2f33362d3336203d3e203130323132.roa (raw, json)
Hash identifier:          INx9Q3cYKdRbw2CkrDBbyXDDGYH5+MnRlrlQZpZCU1I=
Subject key identifier:   BB:D0:6B:B6:31:83:06:47:BA:71:E0:C7:A2:3B:BB:81:54:87:2B:EF
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       184437FB2AA4FC31F0FE875BA47F6201CFF4555D
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a353030303a3a2f33362d3336203d3e203130323132.roa
Signing time:             Tue 28 Apr 2026 01:16:42 +0000
ROA not before:           Tue 28 Apr 2026 01:11:42 +0000
ROA not after:            Tue 27 Apr 2027 01:16:42 +0000
asID:                     10212
IP address blocks:        2403:b400:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:44:37:fb:2a:a4:fc:31:f0:fe:87:5b:a4:7f:62:01:cf:f4:55:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 28 01:11:42 2026 GMT
            Not After : Apr 27 01:16:42 2027 GMT
        Subject: CN=BBD06BB631830647BA71E0C7A23BBB8154872BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9b:8a:dd:36:01:ac:27:b2:39:7f:20:86:33:
                    34:01:15:20:44:14:8a:2f:0b:f1:d8:e0:23:88:c0:
                    b1:0a:31:11:2b:17:56:05:6e:ac:e7:9d:76:14:af:
                    b7:19:dc:a1:d4:7d:c8:54:34:ad:f6:93:64:f1:7c:
                    1f:31:e1:e5:3d:51:cb:c3:de:04:09:08:b7:ed:a7:
                    44:49:ed:1c:ef:a4:84:3b:25:7c:17:52:bc:3b:b3:
                    3a:f7:05:6a:91:70:a7:35:fa:d6:0a:c4:0f:a7:a6:
                    c6:06:0c:8e:a6:4d:4d:35:29:c2:4d:f3:8b:d9:84:
                    a9:de:32:20:3e:2f:ee:a2:7e:8e:7b:e8:f3:2e:3b:
                    f1:f4:e6:08:ce:f3:3a:66:eb:5c:19:f5:c1:1c:d2:
                    f8:23:bd:a6:c7:e0:29:bc:1f:f6:33:ec:56:96:b0:
                    73:1d:07:d9:46:b1:f0:ce:ba:b0:38:e4:f4:21:2d:
                    fb:02:23:20:2f:b7:4c:40:d1:59:8b:45:d9:a1:4e:
                    e9:da:77:73:12:3e:2d:0f:d1:e7:7d:07:be:f1:2d:
                    02:a2:a4:82:b1:e0:e1:f2:59:90:58:50:5d:64:f9:
                    9a:cd:a2:0e:a6:82:1b:a5:58:70:d4:de:5c:60:0e:
                    9f:7a:7a:2b:4a:98:de:f5:13:0b:92:e1:31:4c:30:
                    75:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D0:6B:B6:31:83:06:47:BA:71:E0:C7:A2:3B:BB:81:54:87:2B:EF
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a353030303a3a2f33362d3336203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b400:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:47:f1:f2:6a:94:8f:5d:cf:7e:0e:45:f3:6a:0b:1d:3d:c2:
         03:34:5f:8c:4d:5c:03:e3:fe:e1:b8:6d:71:8e:66:0e:46:82:
         89:77:88:5c:f2:21:63:3a:bc:05:2f:23:09:46:e8:d9:5c:ac:
         e4:2e:3c:e7:e2:d8:de:f4:6f:24:1f:1d:cd:32:ca:ec:de:4b:
         73:39:9d:a7:b0:a4:c0:57:7a:4b:e8:0c:c9:e0:d0:2c:cf:83:
         1d:6b:f1:7b:66:c9:0d:20:56:e7:b2:65:19:e1:47:8d:68:6f:
         a8:d9:12:47:c0:10:31:50:a9:a6:42:68:7d:9f:ac:2a:01:41:
         ac:bf:c2:2b:f2:7f:84:1e:45:eb:21:cf:9f:c6:8e:c8:c7:8f:
         d2:3c:d4:5d:0e:8d:44:68:19:1d:b6:72:6a:e1:19:9b:79:64:
         26:64:e9:03:43:75:7d:75:76:2d:13:01:24:03:e4:0b:fd:ee:
         4b:da:01:70:65:7a:05:00:85:ff:55:c6:a2:d2:cf:d2:ef:15:
         db:64:6a:70:38:9e:1e:29:eb:14:39:83:ed:33:b2:a9:81:6a:
         3d:5c:64:98:b6:81:42:3d:2d:2e:7d:f2:33:e7:25:00:27:ee:
         62:ec:2d:1a:ee:05:d4:6c:f1:63:e7:67:2e:76:7c:76:87:23:
         cd:d4:c1:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUGEQ3+yqk/DHw/odbpH9iAc/0VV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx
NkYzQTdFRjAeFw0yNjA0MjgwMTExNDJaFw0yNzA0MjcwMTE2NDJaMDMxMTAvBgNV
BAMTKEJCRDA2QkI2MzE4MzA2NDdCQTcxRTBDN0EyM0JCQjgxNTQ4NzJCRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcm4rdNgGsJ7I5fyCGMzQBFSBE
FIovC/HY4COIwLEKMRErF1YFbqznnXYUr7cZ3KHUfchUNK32k2TxfB8x4eU9UcvD
3gQJCLftp0RJ7RzvpIQ7JXwXUrw7szr3BWqRcKc1+tYKxA+npsYGDI6mTU01KcJN
84vZhKneMiA+L+6ifo576PMuO/H05gjO8zpm61wZ9cEc0vgjvabH4Cm8H/Yz7FaW
sHMdB9lGsfDOurA45PQhLfsCIyAvt0xA0VmLRdmhTunad3MSPi0P0ed9B77xLQKi
pIKx4OHyWZBYUF1k+ZrNog6mghulWHDU3lxgDp96eitKmN71EwuS4TFMMHVJAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUu9BrtjGDBke6ceDHoju7gVSHK+8wHwYDVR0j
BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5
QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw
gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzNDMwMzMz
YTYyMzQzMDMwM2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzAz
MjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB
Af8EEjAQMA4EAgACMAgDBgQkA7QAUDANBgkqhkiG9w0BAQsFAAOCAQEAHEfx8mqU
j13Pfg5F82oLHT3CAzRfjE1cA+P+4bhtcY5mDkaCiXeIXPIhYzq8BS8jCUbo2Vys
5C485+LY3vRvJB8dzTLK7N5Lczmdp7CkwFd6S+gMyeDQLM+DHWvxe2bJDSBW57Jl
GeFHjWhvqNkSR8AQMVCppkJofZ+sKgFBrL/CK/J/hB5F6yHPn8aOyMeP0jzUXQ6N
RGgZHbZyauEZm3lkJmTpA0N1fXV2LRMBJAPkC/3uS9oBcGV6BQCF/1XGotLP0u8V
22RqcDieHinrFDmD7TOyqYFqPVxkmLaBQj0tLn3yM+clACfuYuwtGu4F1GzxY+dn
LnZ8docjzdTBgA==
-----END CERTIFICATE-----
Generated at Wed May 13 17:49:27 2026 by rpki-client