Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e392e302f32342d3234203d3e2034363131.roa
File:                     3230332e3139322e392e302f32342d3234203d3e2034363131.roa (raw, json)
Hash identifier:          Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=
Subject key identifier:   6C:87:00:8C:AA:C7:FD:6A:E0:2B:29:9C:39:CF:97:04:AD:F9:8D:AB
Certificate issuer:       /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
Certificate serial:       1F33D107D8FBF93539B7E62DD077469EB0700E7C
Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e392e302f32342d3234203d3e2034363131.roa
Signing time:             Tue 12 May 2026 01:56:22 +0000
ROA not before:           Tue 12 May 2026 01:51:22 +0000
ROA not after:            Tue 11 May 2027 01:56:22 +0000
asID:                     4611
IP address blocks:        203.192.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:33:d1:07:d8:fb:f9:35:39:b7:e6:2d:d0:77:46:9e:b0:70:0e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB
        Validity
            Not Before: May 12 01:51:22 2026 GMT
            Not After : May 11 01:56:22 2027 GMT
        Subject: CN=6C87008CAAC7FD6AE02B299C39CF9704ADF98DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:6e:c9:9e:c7:eb:3c:3f:ba:75:aa:79:04:
                    0a:56:5b:c2:f5:e1:1d:cd:cf:8b:89:56:dd:27:c9:
                    0f:b6:50:ee:d6:61:3d:3b:bc:5a:6a:17:4d:33:60:
                    42:48:cd:c9:37:0e:c4:2e:9c:8a:39:15:46:c5:c1:
                    23:09:2a:48:b6:74:5c:6e:63:10:1d:62:ff:83:9d:
                    a6:fc:2e:7e:57:cb:bc:78:00:8b:16:7d:3d:94:79:
                    02:0b:0c:21:b2:7e:ab:8e:ab:c5:ae:e1:85:66:32:
                    48:e6:09:34:6b:5b:01:c9:fe:0b:bd:f6:44:ee:dc:
                    4b:a1:eb:a2:15:7e:f1:e4:e2:c0:a2:88:d8:56:9f:
                    da:9e:12:34:77:41:21:52:7c:54:80:9c:e0:f7:87:
                    a6:82:f8:75:3f:c2:ab:a9:a4:f2:1e:b4:31:b7:58:
                    77:28:5c:74:f2:93:ac:98:5b:17:87:cc:a1:70:95:
                    af:3f:56:fe:7b:c5:c5:ae:f8:b0:fb:7a:d5:18:0c:
                    fd:21:05:33:07:83:9f:e9:8c:b4:0e:8b:c6:33:bc:
                    b2:b0:fe:3f:ed:71:3f:8d:c5:3d:0f:ac:91:33:ef:
                    8c:ff:15:5b:81:4b:6d:fe:3c:c4:04:80:ee:2a:5f:
                    de:ec:10:fe:ca:73:6f:27:40:2e:cb:27:ca:7f:eb:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:87:00:8C:AA:C7:FD:6A:E0:2B:29:9C:39:CF:97:04:AD:F9:8D:AB
            X509v3 Authority Key Identifier:
                keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e392e302f32342d3234203d3e2034363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.192.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:d3:9f:8f:67:e3:fa:e3:f2:ae:75:af:c8:6b:4d:92:1a:e4:
         0a:2f:2b:ac:70:ef:68:34:e3:c4:2e:e9:49:c5:d0:ae:f2:59:
         7b:7c:7e:2a:ee:b8:0c:05:c0:ec:f5:5e:f2:14:fd:ef:30:f4:
         13:b2:e9:2f:2a:b2:2c:af:8b:a4:a9:8a:38:86:ca:f2:f3:9c:
         a7:2f:17:b5:32:97:55:06:75:dd:6f:7e:09:aa:c4:ff:e5:ce:
         53:c9:6a:3e:57:03:8b:a8:59:a9:99:34:4f:dc:54:ea:05:cf:
         78:a6:40:b8:1c:65:77:32:23:04:76:c6:56:18:83:f6:d4:73:
         0f:37:a3:e0:ef:2f:82:77:9a:82:7f:01:cb:0a:16:e4:09:a5:
         1a:5a:ff:22:c9:2d:b1:20:d3:3f:c1:22:15:74:2a:b4:39:ef:
         87:4c:e8:82:89:5d:42:03:56:1c:61:50:2b:cb:5e:6b:5e:71:
         0e:39:ff:35:a8:5a:9b:b0:23:98:c6:47:b6:65:2c:95:1c:40:
         f4:68:11:da:e4:58:2a:00:0a:99:06:c1:8d:37:b2:2c:67:ae:
         55:a6:13:97:f3:68:f8:89:29:c5:c2:d7:27:e9:aa:5c:aa:c4:
         52:57:cd:21:47:66:c1:21:b5:ff:09:11:ca:cf:7b:64:2e:fe:
         cf:54:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:37 2026 by rpki-client