Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3131322e302f32302d3230203d3e2034383038.roa
File:                     3230332e3230372e3131322e302f32302d3230203d3e2034383038.roa (raw, json)
Hash identifier:          BFNqzEum0y9NqeABWWCCF6r2RDHWTzNyTuMcMH5iw7I=
Subject key identifier:   A2:51:3C:83:CE:F2:58:D8:9F:03:3C:0F:B6:87:3D:B8:06:6E:E3:1F
Certificate issuer:       /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial:       7B1A9847F9F20047DC5C7AFB5781414EC31E2869
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3131322e302f32302d3230203d3e2034383038.roa
Signing time:             Tue 19 May 2026 03:01:17 +0000
ROA not before:           Tue 19 May 2026 02:56:17 +0000
ROA not after:            Tue 18 May 2027 03:01:17 +0000
asID:                     4808
IP address blocks:        203.207.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1a:98:47:f9:f2:00:47:dc:5c:7a:fb:57:81:41:4e:c3:1e:28:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
        Validity
            Not Before: May 19 02:56:17 2026 GMT
            Not After : May 18 03:01:17 2027 GMT
        Subject: CN=A2513C83CEF258D89F033C0FB6873DB8066EE31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:aa:a4:04:a6:12:db:20:80:01:f3:c9:a2:
                    18:75:36:7f:0d:f0:13:9f:43:a6:c4:d4:b4:6c:71:
                    5a:87:e4:b7:d5:34:a9:d3:92:f0:69:f6:40:35:7b:
                    ad:6c:b1:73:58:59:67:09:a8:5d:0c:69:44:53:bd:
                    ab:88:5f:e5:2a:a8:35:c0:16:e9:a5:51:58:c8:ba:
                    91:14:a7:ac:31:f1:d6:e4:72:5e:20:95:2d:c3:b3:
                    d2:18:87:61:85:94:1d:e9:b1:7b:6f:3e:e4:34:2f:
                    80:54:67:79:48:59:a8:ef:0e:d0:a6:f7:cd:2b:68:
                    f2:81:46:02:55:57:3b:b0:0f:39:74:7c:fa:e1:1a:
                    6a:fb:d0:27:5f:47:ec:20:a0:3b:fa:de:cd:1a:71:
                    ff:c3:dd:85:82:f0:37:8a:8f:72:ec:4b:4f:44:dc:
                    ef:ba:5c:d7:ce:b7:e8:82:eb:45:d1:3b:e0:10:33:
                    b9:ae:95:b9:62:2e:d2:23:8f:b3:8f:ff:86:af:49:
                    7d:14:94:52:00:b1:d9:51:5f:bf:ac:3f:b0:dc:45:
                    9e:85:d0:62:9d:c6:de:07:4e:c1:23:39:61:d2:0a:
                    cd:1e:6b:b9:a5:5a:f4:12:58:ea:c1:7a:87:01:ae:
                    e5:dd:39:cb:52:17:f7:10:f3:38:1a:e9:29:72:11:
                    ee:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:51:3C:83:CE:F2:58:D8:9F:03:3C:0F:B6:87:3D:B8:06:6E:E3:1F
            X509v3 Authority Key Identifier:
                keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3131322e302f32302d3230203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.207.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:87:02:8b:88:52:86:9a:19:22:8f:56:c2:91:38:58:56:3b:
         eb:7d:0a:f7:2c:b3:04:88:91:52:aa:bb:29:f8:a8:50:a4:0e:
         9e:01:b3:d1:76:85:ac:83:ea:eb:b0:f7:f8:32:0f:9a:65:8d:
         c9:0e:3e:d0:0d:01:54:60:03:22:79:c0:4a:27:86:8e:01:73:
         85:90:ec:0f:95:f0:b8:35:ec:84:32:7c:32:5c:65:32:b1:2b:
         32:16:cd:78:f0:34:13:c8:27:dd:23:a6:7d:4c:11:8f:e6:55:
         99:fd:a8:3b:78:78:3b:f8:a9:36:5d:fb:2f:77:3b:81:20:6c:
         12:94:4e:12:ed:e0:06:e4:c7:c3:eb:d7:28:fb:f1:58:0d:9a:
         94:33:db:f5:f6:4b:9b:85:83:f1:47:24:fb:5a:dc:d5:4c:65:
         53:2e:ae:39:a8:00:5d:67:95:e1:4b:1c:9c:c1:cd:50:6f:7c:
         da:dc:59:f1:9c:74:3b:1f:a2:23:35:89:09:58:ef:51:c2:11:
         32:bb:5e:0d:2d:e8:e6:2d:30:1d:2d:fe:1d:aa:88:af:09:fe:
         b3:21:4b:14:84:a7:fe:af:b6:00:c4:e0:bd:f0:3c:7e:be:cc:
         40:14:83:73:0a:0e:53:31:75:34:da:ff:ea:9e:ad:60:48:ab:
         2f:f3:ad:2e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUexqYR/nyAEfcXHr7V4FBTsMeKGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA1MTkwMjU2MTdaFw0yNzA1MTgwMzAxMTdaMDMxMTAvBgNV
BAMTKEEyNTEzQzgzQ0VGMjU4RDg5RjAzM0MwRkI2ODczREI4MDY2RUUzMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgOaqkBKYS2yCAAfPJohh1Nn8N
8BOfQ6bE1LRscVqH5LfVNKnTkvBp9kA1e61ssXNYWWcJqF0MaURTvauIX+UqqDXA
FumlUVjIupEUp6wx8dbkcl4glS3Ds9IYh2GFlB3psXtvPuQ0L4BUZ3lIWajvDtCm
980raPKBRgJVVzuwDzl0fPrhGmr70CdfR+wgoDv63s0acf/D3YWC8DeKj3LsS09E
3O+6XNfOt+iC60XRO+AQM7mulbliLtIjj7OP/4avSX0UlFIAsdlRX7+sP7DcRZ6F
0GKdxt4HTsEjOWHSCs0ea7mlWvQSWOrBeocBruXdOctSF/cQ8zga6SlyEe6FAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUolE8g87yWNifAzwPtoc9uAZu4x8wHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0Nzk0MzkzOS8wLzMyMzAzMzJlMzIz
MDM3MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBMvPcDANBgkqhkiG9w0BAQsFAAOCAQEAlYcCi4hShpoZIo9WwpE4WFY7
630K9yyzBIiRUqq7KfioUKQOngGz0XaFrIPq67D3+DIPmmWNyQ4+0A0BVGADInnA
SieGjgFzhZDsD5XwuDXshDJ8MlxlMrErMhbNePA0E8gn3SOmfUwRj+ZVmf2oO3h4
O/ipNl37L3c7gSBsEpROEu3gBuTHw+vXKPvxWA2alDPb9fZLm4WD8Uck+1rc1Uxl
Uy6uOagAXWeV4UscnMHNUG982txZ8Zx0Ox+iIzWJCVjvUcIRMrteDS3o5i0wHS3+
HaqIrwn+syFLFISn/q+2AMTgvfA8fr7MQBSDcwoOUzF1NNr/6p6tYEirL/OtLg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:49 2026 by rpki-client