Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3230332e3130302e3139322e302f32302d3230203d3e203233373234.roa
File:                     3230332e3130302e3139322e302f32302d3230203d3e203233373234.roa (raw, json)
Hash identifier:          yhcpFafa82ZZ8Sh+p1t4DMLfsG6wt8pshLb8NPzO9wA=
Subject key identifier:   86:C4:A3:C5:DA:57:C8:07:88:08:99:B9:DE:6E:AF:C3:D7:76:1E:81
Certificate issuer:       /CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
Certificate serial:       3F966AB465185BE99178972E2752F62F716D60E4
Authority key identifier: BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3230332e3130302e3139322e302f32302d3230203d3e203233373234.roa
Signing time:             Tue 12 May 2026 08:34:55 +0000
ROA not before:           Tue 12 May 2026 08:29:55 +0000
ROA not after:            Tue 11 May 2027 08:34:55 +0000
asID:                     23724
IP address blocks:        203.100.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:96:6a:b4:65:18:5b:e9:91:78:97:2e:27:52:f6:2f:71:6d:60:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD26FB8F2F9D7A4F51682070766EBD8D2306733B
        Validity
            Not Before: May 12 08:29:55 2026 GMT
            Not After : May 11 08:34:55 2027 GMT
        Subject: CN=86C4A3C5DA57C807880899B9DE6EAFC3D7761E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:01:8f:20:28:a9:d1:d3:14:d0:70:48:e8:
                    3b:9f:a7:27:2d:b5:0e:6a:4c:cd:56:19:06:d7:ec:
                    af:31:d4:7a:92:2b:51:fc:d1:96:23:b4:7c:22:36:
                    da:ac:13:d0:3c:b1:ac:02:e3:37:a9:9b:49:0f:89:
                    d3:e7:f6:22:e6:42:ff:eb:7b:af:fd:e3:86:10:92:
                    ce:8e:b6:c5:85:40:1c:8f:c7:3b:9b:9c:25:c1:49:
                    0c:54:34:88:7c:4a:da:5a:e2:58:4e:31:e5:ae:5f:
                    16:f3:05:e1:19:ab:08:bc:a8:2e:e5:ef:73:47:5b:
                    43:78:29:5a:99:65:07:e9:7b:61:92:eb:77:5d:0b:
                    59:57:57:db:0c:e9:53:29:0e:c4:95:6c:63:2f:ed:
                    13:5d:0b:a8:f1:68:c2:b6:4e:8e:80:ee:f9:d4:65:
                    f5:ff:35:8f:9f:7e:46:1b:d9:a2:9e:74:0a:b0:3e:
                    33:ff:b3:fd:37:09:a3:2b:e9:d5:28:ae:ff:67:e3:
                    b1:20:5c:7f:02:af:91:3a:cf:f1:8c:4e:d7:26:74:
                    ce:0f:6f:71:4d:e3:b6:8e:77:07:f6:50:97:c5:2d:
                    1f:8b:09:65:8f:40:5c:54:77:79:c2:be:26:04:57:
                    bd:ad:5f:37:db:ea:58:d1:ef:e6:61:0f:cf:b1:df:
                    e4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C4:A3:C5:DA:57:C8:07:88:08:99:B9:DE:6E:AF:C3:D7:76:1E:81
            X509v3 Authority Key Identifier:
                keyid:BD:26:FB:8F:2F:9D:7A:4F:51:68:20:70:76:6E:BD:8D:23:06:73:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BD26FB8F2F9D7A4F51682070766EBD8D2306733B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106489019321024529/0/3230332e3130302e3139322e302f32302d3230203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.100.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:86:7e:74:ac:84:b1:24:58:f0:a8:d3:7e:79:50:be:9f:35:
         f8:b5:b6:fd:10:bd:98:c2:b4:9e:81:31:03:02:cf:a0:bc:7b:
         da:3d:41:29:e0:16:54:61:10:97:e7:e9:4e:2b:23:ae:ae:be:
         90:a1:a4:7f:49:4b:d1:69:d3:b1:df:be:e7:72:9b:05:c6:d6:
         71:36:76:57:34:b5:5a:bb:ea:85:65:66:af:80:35:f6:df:c4:
         ad:76:af:fd:b2:b8:35:d4:2f:d6:1b:5a:9f:2c:8e:09:3d:11:
         da:53:31:b3:32:bb:3f:75:03:6a:e6:82:4c:13:b7:16:a7:06:
         b7:c9:57:63:c1:2d:a0:06:74:17:3c:96:7d:4f:fe:3e:3b:67:
         50:c1:fb:93:a6:f3:4d:7c:b1:c3:4a:6c:56:10:eb:f3:ca:b2:
         13:9b:08:7e:7e:61:35:ce:8b:5a:87:a6:5a:94:ee:aa:d9:fa:
         59:9e:42:91:2d:e5:41:cb:5a:61:fa:54:a6:45:3f:98:dd:b5:
         98:b6:70:a2:72:82:b2:d3:31:f4:15:d0:7f:c6:5d:68:2e:7b:
         66:e6:45:1b:38:76:59:0f:0a:21:f4:4d:77:13:27:f6:89:8e:
         35:77:3b:e0:ab:25:80:ba:f4:91:bf:05:c6:b7:db:f9:2c:d6:
         a3:b9:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:28 2026 by rpki-client