Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104956753499389957/0/3230322e36332e3136302e302f32302d3230203d3e2034383337.roa
File:                     3230322e36332e3136302e302f32302d3230203d3e2034383337.roa (raw, json)
Hash identifier:          8hu7dNrKt5Kh0Gug+I9Kc/1oeTX6FuZLquGE19/vspY=
Subject key identifier:   6B:72:BB:7D:7F:D7:4C:C2:70:E0:E2:B1:07:4D:66:B1:57:46:D5:88
Certificate issuer:       /CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6
Certificate serial:       381CC5778B38D0BA38A783C77AE64D5BBEE5001D
Authority key identifier: 81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/3230322e36332e3136302e302f32302d3230203d3e2034383337.roa
Signing time:             Fri 08 May 2026 02:27:25 +0000
ROA not before:           Fri 08 May 2026 02:22:25 +0000
ROA not after:            Fri 07 May 2027 02:27:25 +0000
asID:                     4837
IP address blocks:        202.63.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1c:c5:77:8b:38:d0:ba:38:a7:83:c7:7a:e6:4d:5b:be:e5:00:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6
        Validity
            Not Before: May  8 02:22:25 2026 GMT
            Not After : May  7 02:27:25 2027 GMT
        Subject: CN=6B72BB7D7FD74CC270E0E2B1074D66B15746D588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:0a:97:ae:8a:5b:d2:88:34:be:9c:12:9b:
                    9e:4e:db:ba:49:a1:a0:f3:04:83:1f:46:0e:32:0d:
                    d4:95:43:02:6c:c0:58:c0:73:2a:9e:f8:6c:15:1f:
                    85:2e:d4:df:f6:0c:d7:4f:10:8c:8e:f7:13:e7:7f:
                    fb:77:5b:9e:ad:62:31:ca:51:3c:48:1a:71:cb:cf:
                    91:ef:eb:f3:fc:19:81:05:b1:0e:b3:3b:71:d3:3d:
                    59:40:f0:5a:81:b4:8a:3a:c8:6d:3c:6d:b0:e7:0b:
                    5e:b7:37:eb:66:0a:8d:06:91:5f:28:fd:0c:4c:2e:
                    4f:e4:ba:2b:03:87:af:09:ef:d8:91:45:b3:ad:b4:
                    a3:83:4b:f9:f2:ea:f2:9c:75:0a:e8:57:2b:7f:08:
                    ef:75:fe:40:ec:f3:f9:6b:ce:ba:c1:5e:ec:74:c6:
                    50:b5:69:ea:34:7f:58:a5:d8:a0:2c:00:3c:30:a6:
                    6a:a0:40:fa:84:69:4a:5d:30:4f:00:26:81:71:5f:
                    6e:7b:28:a0:0c:03:3a:eb:09:ee:6e:38:df:a0:3a:
                    ba:48:46:61:d1:cb:3d:06:c6:45:8c:4a:a2:d0:f6:
                    01:bd:8e:c2:d1:14:4e:53:7c:e3:dc:cb:ab:46:6e:
                    93:bd:4c:fa:64:7b:2e:af:7f:71:02:96:5e:60:91:
                    d9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:72:BB:7D:7F:D7:4C:C2:70:E0:E2:B1:07:4D:66:B1:57:46:D5:88
            X509v3 Authority Key Identifier:
                keyid:81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/3230322e36332e3136302e302f32302d3230203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.63.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:ee:30:fb:c6:23:fb:6d:cf:db:94:57:53:f3:50:9b:98:44:
         b2:c1:cd:41:0c:61:f1:e5:5a:eb:12:54:d2:4a:39:24:54:d2:
         07:f6:15:2a:86:96:4e:dd:34:1b:94:3b:54:29:a3:45:f5:51:
         d7:f6:d1:7a:7c:c2:5f:1c:09:43:99:7a:75:88:b1:0c:2d:bd:
         7b:f1:c4:1e:1f:33:aa:1e:51:04:b4:f6:da:c7:8b:31:47:5b:
         8e:7f:97:33:9e:7e:0a:67:77:af:c9:8f:de:70:e1:fc:e9:55:
         34:5b:da:38:7d:61:23:e5:5b:ec:a1:15:a2:7b:3b:1c:75:ec:
         d9:62:34:f4:97:3b:38:6e:f9:ba:7f:07:cc:a0:16:9c:f1:94:
         8a:be:da:30:a0:5a:53:06:32:94:c8:ea:77:85:db:e3:d6:6e:
         8b:82:e7:fe:d9:ac:11:58:ee:5e:5b:bb:5e:3c:e2:1c:6e:1a:
         66:e3:bb:5a:26:53:72:2a:54:da:97:b9:c9:13:d4:bb:27:a2:
         45:68:5a:26:54:1a:02:49:15:19:93:10:86:01:d7:78:80:38:
         68:c0:26:07:e7:cd:84:f6:b9:f3:e6:4d:13:d5:4a:68:80:a7:
         38:80:a4:bf:34:f0:8b:d5:c4:61:45:75:9b:a6:21:05:3e:a0:
         fc:fe:97:6a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUOBzFd4s40Lo4p4PHeuZNW77lAB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFDNjExOUU2QTRERjdCNzVFMTU3RTQ4QTEzNjM1QjFF
MDVFN0JCNjAeFw0yNjA1MDgwMjIyMjVaFw0yNzA1MDcwMjI3MjVaMDMxMTAvBgNV
BAMTKDZCNzJCQjdEN0ZENzRDQzI3MEUwRTJCMTA3NEQ2NkIxNTc0NkQ1ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7XQqXropb0og0vpwSm55O27pJ
oaDzBIMfRg4yDdSVQwJswFjAcyqe+GwVH4Uu1N/2DNdPEIyO9xPnf/t3W56tYjHK
UTxIGnHLz5Hv6/P8GYEFsQ6zO3HTPVlA8FqBtIo6yG08bbDnC163N+tmCo0GkV8o
/QxMLk/kuisDh68J79iRRbOttKODS/ny6vKcdQroVyt/CO91/kDs8/lrzrrBXux0
xlC1aeo0f1il2KAsADwwpmqgQPqEaUpdME8AJoFxX257KKAMAzrrCe5uON+gOrpI
RmHRyz0GxkWMSqLQ9gG9jsLRFE5TfOPcy6tGbpO9TPpkey6vf3ECll5gkdm/AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUa3K7fX/XTMJw4OKxB01msVdG1YgwHwYDVR0j
BBgwFoAUgcYRnmpN97deFX5IoTY1seBee7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDk1Njc1MzQ5OTM4OTk1Ny8wLzgxQzYxMTlFNkE0REY3Qjc1RTE1N0U0OEExMzYz
NUIxRTA1RTdCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODFDNjExOUU2QTRERjdCNzVFMTU3RTQ4QTEzNjM1QjFFMDVFN0JCNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA0OTU2NzUzNDk5Mzg5OTU3LzAvMzIzMDMyMmUzNjMz
MmUzMTM2MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMo/oDANBgkqhkiG9w0BAQsFAAOCAQEAH+4w+8Yj+23P25RXU/NQm5hEssHN
QQxh8eVa6xJU0ko5JFTSB/YVKoaWTt00G5Q7VCmjRfVR1/bRenzCXxwJQ5l6dYix
DC29e/HEHh8zqh5RBLT22seLMUdbjn+XM55+Cmd3r8mP3nDh/OlVNFvaOH1hI+Vb
7KEVons7HHXs2WI09Jc7OG75un8HzKAWnPGUir7aMKBaUwYylMjqd4Xb49Zui4Ln
/tmsEVjuXlu7XjziHG4aZuO7WiZTcipU2pe5yRPUuyeiRWhaJlQaAkkVGZMQhgHX
eIA4aMAmB+fNhPa58+ZNE9VKaICnOICkvzTwi9XEYUV1m6YhBT6g/P6Xag==
-----END CERTIFICATE-----
Generated at Wed May 13 11:03:53 2026 by rpki-client