Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e372e302f32342d3234203d3e2034363131.roa
File:                     3230332e3139322e372e302f32342d3234203d3e2034363131.roa (raw, json)
Hash identifier:          SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=
Subject key identifier:   C9:0F:3B:86:D7:CB:B8:4B:A3:79:6E:66:37:B8:48:4C:B7:15:D6:1C
Certificate issuer:       /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial:       6D11B7ED5356C75A9FA1FE1CB0635237261F59DC
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e372e302f32342d3234203d3e2034363131.roa
Signing time:             Tue 12 May 2026 01:56:23 +0000
ROA not before:           Tue 12 May 2026 01:51:23 +0000
ROA not after:            Tue 11 May 2027 01:56:23 +0000
asID:                     4611
IP address blocks:        203.192.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:b7:ed:53:56:c7:5a:9f:a1:fe:1c:b0:63:52:37:26:1f:59:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
        Validity
            Not Before: May 12 01:51:23 2026 GMT
            Not After : May 11 01:56:23 2027 GMT
        Subject: CN=C90F3B86D7CBB84BA3796E6637B8484CB715D61C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:37:ba:c8:cb:78:ff:27:57:60:f0:62:02:
                    1a:78:cb:30:1b:3c:47:83:25:47:11:38:f9:95:af:
                    e7:16:b3:4d:12:19:06:d1:09:30:e5:f5:68:e5:9a:
                    1c:6a:a2:22:1d:86:72:1a:25:f2:a2:f0:f5:39:fe:
                    ad:99:cd:1f:e6:1d:98:83:1c:6a:22:90:cb:25:2c:
                    9d:c5:2d:18:11:eb:f7:b4:8d:de:13:09:23:eb:6d:
                    b5:5d:6d:8c:1b:4a:79:97:d5:ea:e6:81:d7:ca:36:
                    aa:8e:92:6e:2a:fb:02:6e:b4:fa:40:d6:1b:1d:6b:
                    5d:e9:e0:5e:01:05:cd:f3:87:20:91:9d:26:4c:2a:
                    70:da:d8:d5:0a:ae:76:cc:72:d1:6b:29:15:ad:59:
                    1d:8a:43:a3:97:bb:61:41:ae:ea:88:08:7c:0a:0d:
                    26:a4:f4:46:5e:44:08:90:91:0c:50:65:2f:d3:70:
                    96:b4:e0:c6:88:09:ae:8a:c3:67:ad:ab:7c:60:f7:
                    b7:f9:3a:98:47:d2:b0:87:e5:8e:0e:2d:7a:b4:ae:
                    ed:63:13:c8:f6:54:de:c9:50:06:0d:ec:20:76:56:
                    de:77:1c:32:9a:49:94:e1:de:e8:94:5c:91:9d:b1:
                    9f:63:df:65:af:af:b1:f0:3a:14:33:83:5f:01:b0:
                    a6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0F:3B:86:D7:CB:B8:4B:A3:79:6E:66:37:B8:48:4C:B7:15:D6:1C
            X509v3 Authority Key Identifier:
                keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e372e302f32342d3234203d3e2034363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.192.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:33:0d:91:81:38:46:4d:a7:bf:4b:01:3f:75:32:89:7d:3c:
         3c:24:46:b8:2e:29:17:2d:5c:08:85:07:d0:45:37:6f:dd:f2:
         2c:3d:6c:a9:54:23:fd:3f:e3:c7:5a:1b:72:ec:31:74:93:33:
         7c:7f:df:f0:1c:e4:98:fd:d7:c8:b1:e8:74:15:b4:b4:27:2b:
         ac:fb:2b:e5:2d:0a:7b:46:61:2a:09:7f:b0:c3:31:43:9c:27:
         80:2c:73:85:00:d9:ea:ba:ba:86:0f:ae:7c:02:ae:6f:b0:3f:
         5c:61:a7:27:aa:1e:3d:f1:6c:fd:0d:c4:18:47:35:32:21:6c:
         2e:f8:8a:d2:05:b5:60:6d:cd:eb:32:2f:4b:0a:51:d8:31:b0:
         99:cb:d8:29:ab:ba:8c:9a:bf:16:45:71:99:84:2e:f9:a9:89:
         1e:9c:0c:47:ee:71:a8:63:dd:93:c6:36:45:24:9e:dd:4d:59:
         a1:5b:2c:30:81:d3:0b:3d:1a:13:ad:46:6e:0a:45:e4:25:2f:
         4c:55:49:2b:41:8d:02:57:db:7b:db:38:e8:b9:7b:64:2e:56:
         0b:dc:7e:e9:b4:0a:54:3a:6d:ca:3d:0e:62:94:ab:4d:04:44:
         9d:e7:90:b9:70:07:06:c0:3f:c8:a4:8e:46:01:dc:9f:3e:0a:
         4d:0c:12:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:25 2026 by rpki-client