Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/3231382e3234362e36342e302f31392d3139203d3e203138323339.roa
File:                     3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (raw, json)
Hash identifier:          B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=
Subject key identifier:   D5:CC:CE:25:84:78:71:48:31:83:78:22:EF:DD:97:99:82:5E:62:04
Certificate issuer:       /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
Certificate serial:       0B6F848DAA7C6E501A86230F83AFD11699A5BB67
Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/3231382e3234362e36342e302f31392d3139203d3e203138323339.roa
Signing time:             Wed 29 Apr 2026 02:07:55 +0000
ROA not before:           Wed 29 Apr 2026 02:02:55 +0000
ROA not after:            Wed 28 Apr 2027 02:07:55 +0000
asID:                     18239
IP address blocks:        218.246.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6f:84:8d:aa:7c:6e:50:1a:86:23:0f:83:af:d1:16:99:a5:bb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024
        Validity
            Not Before: Apr 29 02:02:55 2026 GMT
            Not After : Apr 28 02:07:55 2027 GMT
        Subject: CN=D5CCCE258478714831837822EFDD9799825E6204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:54:49:9a:34:5b:82:b5:51:34:8e:e6:84:
                    db:83:1b:1d:39:2e:49:01:87:63:81:14:09:03:92:
                    21:8e:80:a2:07:34:c3:8d:75:6b:29:58:bc:9a:59:
                    4d:e8:c1:1d:19:1f:94:02:08:80:17:48:a8:a3:6c:
                    8a:9b:7d:32:cf:cf:ad:42:25:cd:4b:99:bb:49:29:
                    33:8c:14:20:43:10:79:c3:d4:d6:84:a6:9a:88:63:
                    64:99:9f:0b:6a:eb:31:ad:48:2d:6d:a4:51:8a:a7:
                    b8:8b:a9:a1:51:1d:da:db:da:9a:33:ff:8b:0b:af:
                    ee:b2:ed:f2:10:18:81:af:2f:64:a6:bf:d4:c8:b4:
                    ed:91:0e:af:69:eb:df:f3:a5:62:41:94:92:fa:19:
                    c2:d4:ab:da:40:6f:b4:87:4a:f0:eb:2f:27:ef:f0:
                    8a:32:13:b9:15:2b:64:84:f6:9f:51:dd:4a:3f:84:
                    03:b7:64:72:a5:78:4e:90:72:2b:51:b1:ac:b0:2a:
                    51:1f:09:2b:98:bb:e2:7f:97:3a:a8:ee:29:05:64:
                    10:2e:a7:05:ae:3f:00:7b:24:b7:0c:0d:e4:ec:08:
                    eb:5a:03:7d:6c:41:0d:ea:81:77:c4:18:7c:7f:ea:
                    02:c5:c4:97:26:2a:6b:50:f9:d1:b4:6c:d1:92:79:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CC:CE:25:84:78:71:48:31:83:78:22:EF:DD:97:99:82:5E:62:04
            X509v3 Authority Key Identifier:
                keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/3231382e3234362e36342e302f31392d3139203d3e203138323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.246.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:a6:02:a9:1b:f1:fc:ed:db:e3:c2:bd:d3:6d:f8:40:67:1b:
         bb:7a:4d:3f:5a:8a:57:01:16:78:d8:d5:2a:02:7b:04:58:f2:
         48:b5:a9:b2:98:7d:3b:a2:a2:4c:75:63:56:a6:7a:d7:de:d4:
         d4:57:a5:c5:9a:8f:4d:87:80:cf:d8:23:7c:13:0f:16:bb:0b:
         7d:5b:86:0f:00:fb:37:b3:c9:25:bd:d0:58:b4:30:ef:44:15:
         0f:71:a4:59:74:1e:3d:89:ef:6c:4b:ca:38:db:1c:b2:e8:c8:
         27:14:80:66:6c:5f:a7:74:11:84:10:0c:73:10:a8:8b:3b:95:
         d3:d5:c4:5a:df:ed:e1:f9:86:b7:b3:33:4d:ab:91:6f:03:66:
         4c:76:e9:b2:ab:fc:3b:ff:04:67:7b:bf:14:85:16:b9:f0:75:
         72:5a:62:7a:28:cc:12:c8:5c:a7:28:f3:1a:88:80:31:8b:eb:
         68:3a:9b:6f:5c:da:88:a0:41:5c:e1:42:56:e9:4a:eb:3c:50:
         a0:91:1a:80:7d:9a:33:21:cd:53:fa:7c:98:b8:de:3f:ee:9d:
         20:b8:d2:95:13:16:8d:5d:b5:09:31:31:21:33:62:24:eb:83:
         1a:4e:58:6d:c5:66:28:8c:df:66:be:73:48:ea:f1:10:f7:3e:
         8d:ed:d0:96
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUC2+Ejap8blAahiMPg6/RFpmlu2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMx
N0YxOTAyNDAeFw0yNjA0MjkwMjAyNTVaFw0yNzA0MjgwMjA3NTVaMDMxMTAvBgNV
BAMTKEQ1Q0NDRTI1ODQ3ODcxNDgzMTgzNzgyMkVGREQ5Nzk5ODI1RTYyMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiFRJmjRbgrVRNI7mhNuDGx05
LkkBh2OBFAkDkiGOgKIHNMONdWspWLyaWU3owR0ZH5QCCIAXSKijbIqbfTLPz61C
Jc1LmbtJKTOMFCBDEHnD1NaEppqIY2SZnwtq6zGtSC1tpFGKp7iLqaFRHdrb2poz
/4sLr+6y7fIQGIGvL2Smv9TItO2RDq9p69/zpWJBlJL6GcLUq9pAb7SHSvDrLyfv
8IoyE7kVK2SE9p9R3Uo/hAO3ZHKleE6QcitRsaywKlEfCSuYu+J/lzqo7ikFZBAu
pwWuPwB7JLcMDeTsCOtaA31sQQ3qgXfEGHx/6gLFxJcmKmtQ+dG0bNGSeSQpAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU1czOJYR4cUgxg3gi792XmYJeYgQwHwYDVR0j
BBgwFoAUlbCPGNDPjkr61JoIqQdSExfxkCQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MTY4OTcwNDU1MTU0Njg4Ny8wLzk1QjA4RjE4RDBDRjhFNEFGQUQ0OUEwOEE5MDc1
MjEzMTdGMTkwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMxN0YxOTAyNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwMTY4OTcwNDU1MTU0Njg4Ny8wLzMyMzEzODJlMzIz
NDM2MmUzNjM0MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzODMyMzMzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBdr2QDANBgkqhkiG9w0BAQsFAAOCAQEARKYCqRvx/O3b48K90234QGcb
u3pNP1qKVwEWeNjVKgJ7BFjySLWpsph9O6KiTHVjVqZ6197U1FelxZqPTYeAz9gj
fBMPFrsLfVuGDwD7N7PJJb3QWLQw70QVD3GkWXQePYnvbEvKONscsujIJxSAZmxf
p3QRhBAMcxCoizuV09XEWt/t4fmGt7MzTauRbwNmTHbpsqv8O/8EZ3u/FIUWufB1
clpieijMEshcpyjzGoiAMYvraDqbb1zaiKBBXOFCVulK6zxQoJEagH2aMyHNU/p8
mLjeP+6dILjSlRMWjV21CTExITNiJOuDGk5YbcVmKIzfZr5zSOrxEPc+je3Qlg==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:41 2026 by rpki-client