Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106817934849736725/0/3230332e38332e31322e302f32322d3232203d3e20313337373833.roa
File:                     3230332e38332e31322e302f32322d3232203d3e20313337373833.roa (raw, json)
Hash identifier:          4Ymf0uJqi79jGTJOciGeDanIyeCYrf4mBs24pztKWOA=
Subject key identifier:   EF:B2:7E:7E:57:C9:3F:0A:4F:8C:55:35:07:8C:C7:E3:5D:2D:89:89
Certificate issuer:       /CN=6D1CE626B3B34809CAB0B0C8393AFA854F663330
Certificate serial:       4BE0E7C9107915D03A02A6BE24C58B0AB34CC9F8
Authority key identifier: 6D:1C:E6:26:B3:B3:48:09:CA:B0:B0:C8:39:3A:FA:85:4F:66:33:30
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1CE626B3B34809CAB0B0C8393AFA854F663330.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/3230332e38332e31322e302f32322d3232203d3e20313337373833.roa
Signing time:             Wed 13 May 2026 05:48:45 +0000
ROA not before:           Wed 13 May 2026 05:43:45 +0000
ROA not after:            Wed 12 May 2027 05:48:45 +0000
asID:                     137783
IP address blocks:        203.83.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/6D1CE626B3B34809CAB0B0C8393AFA854F663330.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/6D1CE626B3B34809CAB0B0C8393AFA854F663330.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1CE626B3B34809CAB0B0C8393AFA854F663330.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e0:e7:c9:10:79:15:d0:3a:02:a6:be:24:c5:8b:0a:b3:4c:c9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1CE626B3B34809CAB0B0C8393AFA854F663330
        Validity
            Not Before: May 13 05:43:45 2026 GMT
            Not After : May 12 05:48:45 2027 GMT
        Subject: CN=EFB27E7E57C93F0A4F8C5535078CC7E35D2D8989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:e2:6f:68:30:e7:c5:4b:aa:1e:78:21:cb:
                    f3:f2:b7:ca:76:01:99:7b:07:1e:ed:9d:c4:f8:bf:
                    14:f5:0b:51:30:41:0f:9d:a7:e7:ea:3c:60:66:cc:
                    91:71:e2:be:0e:db:1f:80:95:09:de:3e:f5:4d:b8:
                    02:61:b6:8a:46:51:d7:91:5a:0f:8d:94:06:9d:a3:
                    e3:f7:34:76:76:8a:5d:ad:e1:41:d8:4e:99:72:55:
                    dc:5d:d5:7a:43:10:0b:c5:23:4d:ac:f2:32:fa:7c:
                    0b:f1:d9:8e:bf:ce:00:42:8b:50:8c:b5:a4:64:20:
                    74:56:9f:83:1d:1d:75:2f:50:85:73:de:64:a6:3e:
                    09:69:25:a1:59:51:d3:54:1a:a7:9a:3b:b3:b4:d9:
                    83:67:70:e0:88:cd:51:82:a3:38:d1:7b:60:7d:2e:
                    8e:db:fa:16:58:92:a1:3f:be:21:74:5a:38:e6:21:
                    84:71:bc:47:79:e4:e5:71:82:1d:80:c5:e7:6f:cf:
                    60:0c:b9:85:bd:34:15:39:dc:d9:f5:9d:f0:e2:1b:
                    89:bb:f7:f3:3d:67:06:4b:cf:9f:d1:45:98:7a:c2:
                    b0:70:e4:88:eb:b9:70:ad:ed:32:6e:14:91:56:95:
                    70:be:0a:36:7f:ad:41:ee:0c:ea:9d:21:e9:7e:1b:
                    b5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B2:7E:7E:57:C9:3F:0A:4F:8C:55:35:07:8C:C7:E3:5D:2D:89:89
            X509v3 Authority Key Identifier:
                keyid:6D:1C:E6:26:B3:B3:48:09:CA:B0:B0:C8:39:3A:FA:85:4F:66:33:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/6D1CE626B3B34809CAB0B0C8393AFA854F663330.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1CE626B3B34809CAB0B0C8393AFA854F663330.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106817934849736725/0/3230332e38332e31322e302f32322d3232203d3e20313337373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.83.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:91:ad:84:b4:f1:4c:77:f1:9c:d7:9b:15:fa:50:f8:d9:bd:
         9b:18:9b:b9:34:68:fb:92:27:d9:73:28:17:69:9e:bc:eb:96:
         cf:e5:5c:48:77:19:0c:5d:e9:40:ea:ed:56:44:7f:55:8d:a5:
         30:58:34:9b:75:27:bb:4e:b4:9b:61:0b:4a:7d:4c:73:46:ab:
         69:1c:a7:59:fb:0a:d5:bd:78:f9:11:22:00:ad:17:33:84:36:
         f7:60:6e:2b:c0:11:eb:23:a8:45:2e:4a:7d:8f:9e:2e:d2:ba:
         8a:69:40:7d:66:3e:3e:73:34:1d:47:80:a4:e7:1b:13:1b:70:
         69:46:d3:80:f6:0d:dd:7a:1b:06:4b:c0:8a:ba:05:99:b5:4b:
         67:9a:04:15:94:6e:e2:a3:a2:af:2a:5e:d3:21:eb:ab:85:5e:
         9c:e6:64:fe:43:1c:57:9e:f3:93:6f:2c:94:00:34:22:11:b4:
         57:d7:0a:fa:ac:04:e0:00:9b:da:96:d2:e1:05:3b:ec:4e:dd:
         85:4a:49:6d:03:05:fa:b7:ee:19:1a:6e:ef:a3:a8:a7:36:5a:
         83:79:65:d1:97:a6:fb:5b:e1:c2:11:e3:34:2c:c2:e0:07:a3:
         78:a0:62:08:3d:3f:0c:80:11:3b:27:f0:8e:2e:c4:24:62:1c:
         a7:83:de:46
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUS+DnyRB5FdA6Aqa+JMWLCrNMyfgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQxQ0U2MjZCM0IzNDgwOUNBQjBCMEM4MzkzQUZBODU0
RjY2MzMzMDAeFw0yNjA1MTMwNTQzNDVaFw0yNzA1MTIwNTQ4NDVaMDMxMTAvBgNV
BAMTKEVGQjI3RTdFNTdDOTNGMEE0RjhDNTUzNTA3OENDN0UzNUQyRDg5ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQOJvaDDnxUuqHnghy/Pyt8p2
AZl7Bx7tncT4vxT1C1EwQQ+dp+fqPGBmzJFx4r4O2x+AlQnePvVNuAJhtopGUdeR
Wg+NlAado+P3NHZ2il2t4UHYTplyVdxd1XpDEAvFI02s8jL6fAvx2Y6/zgBCi1CM
taRkIHRWn4MdHXUvUIVz3mSmPglpJaFZUdNUGqeaO7O02YNncOCIzVGCozjRe2B9
Lo7b+hZYkqE/viF0WjjmIYRxvEd55OVxgh2Axedvz2AMuYW9NBU53Nn1nfDiG4m7
9/M9ZwZLz5/RRZh6wrBw5IjruXCt7TJuFJFWlXC+CjZ/rUHuDOqdIel+G7VHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU77J+flfJPwpPjFU1B4zH410tiYkwHwYDVR0j
BBgwFoAUbRzmJrOzSAnKsLDIOTr6hU9mMzAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjgxNzkzNDg0OTczNjcyNS8wLzZEMUNFNjI2QjNCMzQ4MDlDQUIwQjBDODM5M0FG
QTg1NEY2NjMzMzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkQxQ0U2MjZCM0IzNDgwOUNBQjBCMEM4MzkzQUZBODU0RjY2MzMzMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjgxNzkzNDg0OTczNjcyNS8wLzMyMzAzMzJlMzgz
MzJlMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNzM3MzgzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAstTDDANBgkqhkiG9w0BAQsFAAOCAQEAPpGthLTxTHfxnNebFfpQ+Nm9
mxibuTRo+5In2XMoF2mevOuWz+VcSHcZDF3pQOrtVkR/VY2lMFg0m3Unu060m2EL
Sn1Mc0araRynWfsK1b14+REiAK0XM4Q292BuK8AR6yOoRS5KfY+eLtK6imlAfWY+
PnM0HUeApOcbExtwaUbTgPYN3XobBkvAiroFmbVLZ5oEFZRu4qOirype0yHrq4Ve
nOZk/kMcV57zk28slAA0IhG0V9cK+qwE4ACb2pbS4QU77E7dhUpJbQMF+rfuGRpu
76OopzZag3ll0Zem+1vhwhHjNCzC4AejeKBiCD0/DIAROyfwji7EJGIcp4PeRg==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:23 2026 by rpki-client