Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e342e302f32342d3234203d3e2034363131.roa
File:                     3230332e3139322e342e302f32342d3234203d3e2034363131.roa (raw, json)
Hash identifier:          17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=
Subject key identifier:   E9:16:7E:7B:E8:A7:41:E6:48:5F:4C:34:D7:A5:C5:40:EA:A0:6B:2C
Certificate issuer:       /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial:       39A6574AFDF7574E8A0B02BA64CA52D8E2FB75C6
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e342e302f32342d3234203d3e2034363131.roa
Signing time:             Tue 12 May 2026 01:56:23 +0000
ROA not before:           Tue 12 May 2026 01:51:23 +0000
ROA not after:            Tue 11 May 2027 01:56:23 +0000
asID:                     4611
IP address blocks:        203.192.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a6:57:4a:fd:f7:57:4e:8a:0b:02:ba:64:ca:52:d8:e2:fb:75:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
        Validity
            Not Before: May 12 01:51:23 2026 GMT
            Not After : May 11 01:56:23 2027 GMT
        Subject: CN=E9167E7BE8A741E6485F4C34D7A5C540EAA06B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:58:91:9a:63:ef:ef:4f:a1:0b:a8:7e:7f:
                    7c:01:26:aa:8d:f9:96:64:6e:5e:76:7e:12:fe:6f:
                    b0:b2:2b:db:21:05:67:76:db:44:75:77:8c:a7:8d:
                    c9:b9:40:cc:f3:7c:1f:66:cc:42:d2:15:8c:21:c3:
                    ae:bb:54:bf:63:67:15:7c:be:98:e7:ee:9f:86:b4:
                    0a:a4:99:8e:b7:c4:3c:d9:ee:ec:fc:24:f2:5c:f2:
                    50:b8:2f:66:8d:a8:e6:f5:fe:2e:20:ec:a2:7e:cd:
                    7a:e4:c2:ab:9d:e3:02:95:d4:e2:00:aa:a5:89:a6:
                    a5:4c:da:3c:80:1d:0c:f3:8c:93:9d:7c:c2:8f:b4:
                    ef:32:06:f2:7e:41:ca:fb:72:88:f4:9e:03:b4:1f:
                    1d:3e:8d:ca:f3:e8:e3:9f:ed:8f:91:f3:cc:7a:1c:
                    f5:6a:1b:06:9a:e1:3e:10:81:1b:90:8b:04:fe:84:
                    bf:ad:ed:f0:58:aa:5f:5a:23:8b:0a:b6:35:ae:43:
                    6e:51:6a:0b:a7:e5:6f:98:df:dc:92:cc:da:e7:5e:
                    8d:e6:0b:73:ea:42:a9:8a:0e:6c:3a:7a:79:49:42:
                    cc:b0:56:39:dd:41:52:1d:5e:3a:54:3d:f2:f0:47:
                    e7:85:98:88:63:b9:13:91:4b:af:10:4e:42:65:13:
                    29:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:16:7E:7B:E8:A7:41:E6:48:5F:4C:34:D7:A5:C5:40:EA:A0:6B:2C
            X509v3 Authority Key Identifier:
                keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e342e302f32342d3234203d3e2034363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.192.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:11:1a:0b:c8:4f:1e:1c:02:57:c0:8a:b5:29:96:0f:ca:8d:
         73:c7:0b:15:1c:38:06:ea:17:2b:88:e0:e1:92:9a:7f:07:d2:
         6c:17:fa:8f:26:e8:d7:05:e5:22:92:45:b4:d6:bc:35:3d:1c:
         d4:bb:61:48:eb:d7:ea:74:49:7d:fa:41:db:b6:fd:b2:cd:6f:
         b5:fc:c6:51:54:84:cb:09:40:c1:43:aa:ad:6d:7c:7f:02:40:
         5e:1b:5c:19:8e:d3:3a:80:3f:b1:1c:67:2a:99:22:c0:d1:6d:
         ab:8e:6a:86:a7:65:25:f4:1a:cc:8a:4f:6f:54:60:b2:aa:42:
         9c:7a:57:40:fe:e1:fc:98:2d:6d:31:c3:4c:d1:63:2b:4e:7a:
         9a:51:7c:3d:04:09:de:16:75:ad:e3:1f:6f:6d:04:be:c1:bb:
         ee:fd:f2:9f:e0:70:d9:7d:9c:29:64:17:56:c7:dd:a4:a8:94:
         f9:83:0a:6f:8b:8f:8f:57:e4:05:9b:21:d4:9d:c8:58:fd:3a:
         75:ff:87:37:54:df:3b:6a:ab:72:dc:53:18:2e:33:8f:bc:11:
         8f:4e:4f:5e:be:8f:e1:92:bf:8a:6e:4c:2d:f9:82:c3:12:bc:
         61:a6:aa:b6:2c:fe:74:67:3d:ce:62:15:5b:0d:48:4e:8a:6a:
         72:ca:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:24 2026 by rpki-client