Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/AS132203.roa
File:                     AS132203.roa (raw, json)
Hash identifier:          uDr9EF9bgtutRTK7sdYoR3ly8M2t00BtWV10BLaGkZw=
Subject key identifier:   95:31:BC:CD:D7:AA:83:49:1C:9B:93:0D:DE:4A:66:92:3D:11:28:7A
Certificate issuer:       /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64
Certificate serial:       7AB4D4C14C088837126FCAD843835211B72EF73F
Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/AS132203.roa
Signing time:             Fri 05 Jun 2026 08:12:25 +0000
ROA not before:           Fri 05 Jun 2026 08:07:25 +0000
ROA not after:            Fri 04 Jun 2027 08:12:25 +0000
asID:                     132203
IP address blocks:        203.205.136.0/24 maxlen: 24
                          203.205.137.0/24 maxlen: 24
                          203.205.155.0/24 maxlen: 24
                          203.205.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 05:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b4:d4:c1:4c:08:88:37:12:6f:ca:d8:43:83:52:11:b7:2e:f7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64
        Validity
            Not Before: Jun  5 08:07:25 2026 GMT
            Not After : Jun  4 08:12:25 2027 GMT
        Subject: CN=9531BCCDD7AA83491C9B930DDE4A66923D11287A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4c:3e:26:4a:92:dd:30:3f:05:5a:44:db:b9:
                    34:c1:01:bd:bf:bd:3b:ea:e2:b5:2a:d5:cc:1d:66:
                    1e:fc:2e:6c:9d:f7:7e:ac:d2:1a:34:ce:8b:04:82:
                    9c:53:14:86:16:f6:c2:70:8e:0c:82:60:49:2c:b1:
                    42:69:20:2d:b9:af:87:a4:a3:45:78:2d:be:08:9d:
                    40:78:aa:0f:a2:0b:d8:01:d7:aa:b6:5e:98:1e:6f:
                    6e:c6:7c:78:e4:b1:06:69:d1:20:f1:33:e0:e5:e3:
                    06:e9:d5:9e:ba:09:1c:53:c8:b1:02:29:85:a2:cb:
                    b1:08:18:00:9a:4b:90:4f:7a:52:63:b9:a6:7e:84:
                    cf:c3:2e:1e:94:13:2a:31:54:c2:7d:29:50:95:03:
                    3d:d9:c2:7c:68:0e:85:04:a5:bd:d9:ca:87:ec:e0:
                    85:aa:5b:b2:2f:d7:e9:ce:1b:22:3f:13:36:75:73:
                    41:4c:06:3f:7d:7f:28:e5:cd:4f:01:48:33:5e:77:
                    75:ee:e5:f9:2c:6d:9c:56:c0:7d:20:17:8b:00:94:
                    15:90:92:43:de:80:8d:c9:c7:48:5a:d5:56:5b:f1:
                    ed:a6:16:4f:95:af:87:d5:ee:99:65:9a:13:ce:e6:
                    5c:b6:36:44:b8:80:dd:5f:9c:02:b7:45:ee:78:0c:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:31:BC:CD:D7:AA:83:49:1C:9B:93:0D:DE:4A:66:92:3D:11:28:7A
            X509v3 Authority Key Identifier:
                keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/AS132203.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.205.136.0/23
                  203.205.155.0/24
                  203.205.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:a1:c9:52:8c:c4:0e:23:af:4d:17:dd:9d:67:c7:91:95:4b:
         d7:22:46:22:bd:d6:47:25:1c:74:78:16:55:7c:11:1c:4f:09:
         fe:5d:de:83:b7:5a:3b:9e:8c:d6:af:77:40:74:c6:72:7a:d9:
         93:75:f0:e5:11:ac:df:09:54:76:fa:12:ec:a8:93:d8:0f:d0:
         33:aa:cb:2e:23:f0:8e:d6:5c:53:6c:be:c1:af:07:f9:c4:40:
         29:8c:02:a6:1b:ce:df:33:0e:2e:3b:94:e0:01:fc:ce:12:af:
         d4:ca:a2:28:5f:5e:64:ce:e3:b4:48:2f:18:e5:fc:14:63:99:
         55:91:ef:37:da:5e:ed:b4:02:68:3d:8c:8b:7a:bc:6e:53:ac:
         86:88:df:cb:8e:f1:9b:88:26:9b:f4:5d:32:e1:f7:8c:4a:85:
         41:61:e5:d4:0a:5e:28:ab:93:78:7a:4d:17:38:e4:46:3e:aa:
         35:b8:80:a4:17:e4:88:a7:9d:8d:84:c2:b4:b6:3a:ee:96:5b:
         12:39:a2:d4:cd:53:5a:f4:9d:19:2e:8c:b2:58:08:c5:a3:4d:
         7e:5a:68:09:12:18:6d:f6:0d:05:cf:9a:88:74:de:67:eb:35:
         40:6d:6d:c8:6a:9b:b3:6a:e0:f4:6c:f9:66:57:cb:dc:ba:62:
         6d:27:57:f9
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUerTUwUwIiDcSb8rYQ4NSEbcu9z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRF
RTQ2QUY2NDAeFw0yNjA2MDUwODA3MjVaFw0yNzA2MDQwODEyMjVaMDMxMTAvBgNV
BAMTKDk1MzFCQ0NERDdBQTgzNDkxQzlCOTMwRERFNEE2NjkyM0QxMTI4N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTD4mSpLdMD8FWkTbuTTBAb2/
vTvq4rUq1cwdZh78Lmyd936s0ho0zosEgpxTFIYW9sJwjgyCYEkssUJpIC25r4ek
o0V4Lb4InUB4qg+iC9gB16q2Xpgeb27GfHjksQZp0SDxM+Dl4wbp1Z66CRxTyLEC
KYWiy7EIGACaS5BPelJjuaZ+hM/DLh6UEyoxVMJ9KVCVAz3ZwnxoDoUEpb3Zyofs
4IWqW7Iv1+nOGyI/EzZ1c0FMBj99fyjlzU8BSDNed3Xu5fksbZxWwH0gF4sAlBWQ
kkPegI3Jx0ha1VZb8e2mFk+Vr4fV7pllmhPO5ly2NkS4gN1fnAK3Re54DGxVAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUlTG8zdeqg0kcm5MN3kpmkj0RKHowHwYDVR0j
BBgwFoAUqSuBmizVyxNZtwd2tY4s/e5Gr2QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjMxMDUzMC8wL0E5MkI4MTlBMkNENUNCMTM1OUI3MDc3NkI1OEUy
Q0ZERUU0NkFGNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5jZXIw
XgYIKwYBBQUHAQsEUjBQME4GCCsGAQUFBzALhkJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIzMTA1MzAvMC9BUzEzMjIwMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQC
AAEwEgMEAcvNiAMEAMvNmwMEAMvNnzANBgkqhkiG9w0BAQsFAAOCAQEAMKHJUozE
DiOvTRfdnWfHkZVL1yJGIr3WRyUcdHgWVXwRHE8J/l3eg7daO56M1q93QHTGcnrZ
k3Xw5RGs3wlUdvoS7KiT2A/QM6rLLiPwjtZcU2y+wa8H+cRAKYwCphvO3zMOLjuU
4AH8zhKv1MqiKF9eZM7jtEgvGOX8FGOZVZHvN9pe7bQCaD2Mi3q8blOshojfy47x
m4gmm/RdMuH3jEqFQWHl1ApeKKuTeHpNFzjkRj6qNbiApBfkiKedjYTCtLY67pZb
Ejmi1M1TWvSdGS6MslgIxaNNflpoCRIYbfYNBc+aiHTeZ+s1QG1tyGqbs2rg9Gz5
ZlfL3LpibSdX+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 6 18:01:29 2026 by rpki-client