Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3230322e38352e3230382e302f32302d3332203d3e2034383437.roa
File:                     3230322e38352e3230382e302f32302d3332203d3e2034383437.roa (raw, json)
Hash identifier:          MJznlIX3zI4qsW625+AJvOuHZgx0J6xkMG7sCLm7esc=
Subject key identifier:   4C:F3:31:BD:67:E3:C6:F6:01:CD:3B:51:93:5B:13:EB:78:6C:40:D0
Certificate issuer:       /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Certificate serial:       4C2A132D023A3A870AD75F00C0544925FC9169D1
Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3230322e38352e3230382e302f32302d3332203d3e2034383437.roa
Signing time:             Tue 28 Apr 2026 06:49:12 +0000
ROA not before:           Tue 28 Apr 2026 06:44:12 +0000
ROA not after:            Tue 27 Apr 2027 06:49:12 +0000
asID:                     4847
IP address blocks:        202.85.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2a:13:2d:02:3a:3a:87:0a:d7:5f:00:c0:54:49:25:fc:91:69:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
        Validity
            Not Before: Apr 28 06:44:12 2026 GMT
            Not After : Apr 27 06:49:12 2027 GMT
        Subject: CN=4CF331BD67E3C6F601CD3B51935B13EB786C40D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:b4:76:5e:67:0a:10:b1:5a:6b:a6:f1:9a:
                    48:2d:c8:41:48:f8:61:24:a3:57:32:1b:7d:d1:14:
                    ce:10:e9:c9:8f:ea:31:52:0a:a4:bc:71:86:6c:48:
                    e2:5a:bf:c7:79:b4:db:cb:11:c5:a4:8d:53:cc:f2:
                    c6:57:de:3d:ab:7b:f1:75:3a:3b:c8:b3:b6:4e:19:
                    c6:92:2b:ff:fa:27:67:da:ea:e1:dc:11:ba:ef:cd:
                    fa:42:41:84:4e:93:9d:28:f1:1c:94:7d:9d:81:04:
                    31:15:e6:49:52:04:b2:8f:ce:ab:92:3e:72:0f:29:
                    98:0f:db:29:cc:3a:4e:09:a6:ae:0c:ec:11:f1:cb:
                    ae:09:e2:e5:4f:a6:35:6d:9e:4c:09:4a:10:d9:b1:
                    ce:5f:e1:cf:0c:3c:67:3d:d3:30:62:75:40:12:34:
                    24:7f:13:b6:5c:f9:ec:7d:bc:c3:91:5e:86:a0:41:
                    5a:11:14:82:94:61:14:50:ff:50:8f:24:a1:3b:22:
                    13:32:e1:21:1a:65:3c:c4:ac:37:03:63:5a:c7:81:
                    c6:5b:fb:0f:76:14:d8:d8:99:74:03:6b:7d:05:7f:
                    c9:12:68:24:e4:5c:ce:f5:bf:f2:9b:3f:14:9a:eb:
                    c1:c7:72:49:2f:a4:c6:72:d6:14:72:61:5f:e5:4e:
                    5e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F3:31:BD:67:E3:C6:F6:01:CD:3B:51:93:5B:13:EB:78:6C:40:D0
            X509v3 Authority Key Identifier:
                keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3230322e38352e3230382e302f32302d3332203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.85.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:5b:06:2e:a2:28:15:4b:39:ac:e8:7f:59:06:df:bc:c0:71:
         5d:c8:5f:2e:b4:16:68:84:09:32:3d:34:df:3b:c9:72:e5:a5:
         fb:2a:df:5b:d1:55:ca:e9:2f:e1:41:96:78:0a:9c:43:b2:2c:
         2c:48:56:88:40:40:9c:ca:f6:f7:ef:8a:58:90:ce:99:90:1e:
         89:14:23:99:26:41:e5:1f:09:51:9d:30:8a:25:16:17:5d:f1:
         6a:0b:fa:44:02:3e:3b:37:93:53:62:15:41:b7:0d:8a:8d:b6:
         1e:d8:36:8a:78:36:21:94:fa:57:62:7a:0e:06:29:bc:81:25:
         50:5f:03:2f:02:b3:bc:a9:a6:47:e7:5e:ed:f5:64:18:41:79:
         01:71:b3:0e:6d:3e:6a:55:0e:12:ca:cb:8e:9c:08:6c:a7:01:
         4f:55:55:fb:3f:1f:97:d8:b6:db:c7:3b:f4:0a:16:b5:57:79:
         72:9a:52:cd:b5:c3:2c:0c:59:1f:74:48:31:9a:99:4f:97:29:
         1f:37:c6:31:9d:84:09:16:b8:64:c9:17:30:a3:b6:b6:6d:53:
         da:a2:d7:13:e4:54:6a:9e:80:70:f0:d7:84:e9:4a:c9:de:a2:
         f6:ef:79:82:d1:40:f1:2d:7b:f0:7c:df:1b:aa:97:90:43:30:
         98:8b:21:44
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUTCoTLQI6OocK118AwFRJJfyRadEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBB
NjFDRTA2MTAeFw0yNjA0MjgwNjQ0MTJaFw0yNzA0MjcwNjQ5MTJaMDMxMTAvBgNV
BAMTKDRDRjMzMUJENjdFM0M2RjYwMUNEM0I1MTkzNUIxM0VCNzg2QzQwRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBa7R2XmcKELFaa6bxmkgtyEFI
+GEko1cyG33RFM4Q6cmP6jFSCqS8cYZsSOJav8d5tNvLEcWkjVPM8sZX3j2re/F1
OjvIs7ZOGcaSK//6J2fa6uHcEbrvzfpCQYROk50o8RyUfZ2BBDEV5klSBLKPzquS
PnIPKZgP2ynMOk4Jpq4M7BHxy64J4uVPpjVtnkwJShDZsc5f4c8MPGc90zBidUAS
NCR/E7Zc+ex9vMORXoagQVoRFIKUYRRQ/1CPJKE7IhMy4SEaZTzErDcDY1rHgcZb
+w92FNjYmXQDa30Ff8kSaCTkXM71v/KbPxSa68HHckkvpMZy1hRyYV/lTl5HAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUTPMxvWfjxvYBzTtRk1sT63hsQNAwHwYDVR0j
BBgwFoAUM0uT929byqogMOW92M7yIKYc4GEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MTM5NDIwNzEzOTk1NDY5My8wLzMzNEI5M0Y3NkY1QkNBQUEyMDMwRTVCREQ4Q0VG
MjIwQTYxQ0UwNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBBNjFDRTA2MS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTAxMzk0MjA3MTM5OTU0NjkzLzAvMzIzMDMyMmUzODM1
MmUzMjMwMzgyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMpV0DANBgkqhkiG9w0BAQsFAAOCAQEAZlsGLqIoFUs5rOh/WQbfvMBxXchf
LrQWaIQJMj003zvJcuWl+yrfW9FVyukv4UGWeAqcQ7IsLEhWiEBAnMr29++KWJDO
mZAeiRQjmSZB5R8JUZ0wiiUWF13xagv6RAI+OzeTU2IVQbcNio22Htg2ing2IZT6
V2J6DgYpvIElUF8DLwKzvKmmR+de7fVkGEF5AXGzDm0+alUOEsrLjpwIbKcBT1VV
+z8fl9i228c79AoWtVd5cppSzbXDLAxZH3RIMZqZT5cpHzfGMZ2ECRa4ZMkXMKO2
tm1T2qLXE+RUap6AcPDXhOlKyd6i9u95gtFA8S178HzfG6qXkEMwmIshRA==
-----END CERTIFICATE-----
Generated at Wed May 13 14:40:37 2026 by rpki-client