Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233312e302f32342d3234203d3e203633363431.roa
File:                     3132332e34392e3233312e302f32342d3234203d3e203633363431.roa (raw, json)
Hash identifier:          R/B9h9aDzb4QG8w229AO47UsOafUEDPxQD3yu78YfZI=
Subject key identifier:   E9:18:8E:46:AB:CA:10:1C:31:7F:4F:91:AA:4B:CA:4D:05:0C:90:1D
Certificate issuer:       /CN=909D556251A0BE5F9234514028EBD37CE8E1280A
Certificate serial:       1BBD6CE1B96486E01936316F40D87748807D211D
Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233312e302f32342d3234203d3e203633363431.roa
Signing time:             Wed 22 Apr 2026 14:08:40 +0000
ROA not before:           Wed 22 Apr 2026 14:03:40 +0000
ROA not after:            Wed 21 Apr 2027 14:08:40 +0000
asID:                     63641
IP address blocks:        123.49.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:43:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bd:6c:e1:b9:64:86:e0:19:36:31:6f:40:d8:77:48:80:7d:21:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A
        Validity
            Not Before: Apr 22 14:03:40 2026 GMT
            Not After : Apr 21 14:08:40 2027 GMT
        Subject: CN=E9188E46ABCA101C317F4F91AA4BCA4D050C901D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:f9:9e:d0:23:29:29:29:f1:e3:09:95:c2:
                    2b:d5:87:8e:97:b6:5e:93:f4:fb:4a:09:b9:f8:8a:
                    c0:e1:7f:10:09:e5:67:d2:f7:29:ca:d9:69:01:91:
                    c9:ed:dc:21:5a:99:ef:14:d8:d4:2e:9b:c9:7a:67:
                    0e:a2:91:e6:f7:49:7e:a6:28:02:96:e7:12:ff:f1:
                    f0:d7:4e:2c:ce:a4:4c:55:a2:37:04:74:88:3a:a0:
                    ee:31:1c:de:ef:5a:09:71:d1:5e:b9:43:f9:55:a8:
                    dc:33:1a:1e:1a:39:0d:85:ed:2c:2f:1e:46:36:07:
                    79:7b:9b:a9:41:85:36:a6:5f:ec:3f:39:2b:12:4c:
                    79:ba:50:47:2f:b8:c8:fe:4b:c7:d6:54:ac:96:64:
                    cd:c1:26:f8:d8:fc:c0:b2:b8:0e:db:94:8b:85:3e:
                    51:83:85:c9:6a:73:08:06:02:bc:95:7a:3c:7a:a8:
                    11:5f:9f:10:28:4a:d2:19:6b:c8:f9:41:d4:84:74:
                    ef:4f:d1:8e:b9:e4:d7:fe:7b:a3:32:d5:cf:c4:a6:
                    12:45:e0:69:b0:d2:b4:2b:08:4f:53:49:1b:e9:00:
                    1c:66:89:8b:9b:f2:a4:ce:d0:eb:12:1f:03:1f:f2:
                    bc:44:8a:77:60:62:93:ec:5f:9e:fe:a6:ea:92:2f:
                    0e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:18:8E:46:AB:CA:10:1C:31:7F:4F:91:AA:4B:CA:4D:05:0C:90:1D
            X509v3 Authority Key Identifier:
                keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3233312e302f32342d3234203d3e203633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.49.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b4:67:ee:13:71:cc:01:9b:4d:0a:0c:49:23:7d:e1:85:8d:
         36:76:2a:ce:28:13:17:22:32:af:9e:17:82:ea:62:71:18:01:
         3e:31:89:1e:a4:a0:35:c3:7b:ac:01:7a:20:5f:de:47:76:3c:
         5e:d2:f7:ea:a8:46:66:a7:29:64:49:7c:df:ad:2e:c0:e9:ac:
         cb:be:ad:9e:73:d0:b6:3b:f3:0a:63:12:73:f7:60:a4:b1:7d:
         4b:e5:96:ec:e2:6a:c6:cf:ff:c8:a0:e7:1b:67:de:2d:fc:df:
         aa:4a:ed:32:63:79:c4:c7:b2:7b:4f:0c:e5:1d:10:cf:2d:44:
         dd:8a:e3:a4:d0:4f:bc:32:4d:00:21:2c:68:20:49:f8:43:0e:
         bf:1c:82:f8:39:0e:d3:47:1e:fb:ba:9e:ca:65:e3:58:be:c3:
         13:10:b1:a4:bd:d4:59:73:cc:61:fa:a8:4f:eb:2c:40:60:ac:
         af:9f:c1:1c:20:b9:f4:41:93:4e:70:22:56:65:4a:e3:cf:47:
         88:bb:f0:5d:93:87:27:15:ae:3e:f0:fc:9f:57:42:af:69:a1:
         c9:3a:16:1c:69:52:2a:5b:20:d5:02:dc:ed:38:aa:84:fb:af:
         50:7f:b0:f6:27:16:63:c4:db:e7:cc:6c:55:cd:0f:4a:0e:e9:
         44:2b:90:05
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUG71s4blkhuAZNjFvQNh3SIB9IR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF
OEUxMjgwQTAeFw0yNjA0MjIxNDAzNDBaFw0yNzA0MjExNDA4NDBaMDMxMTAvBgNV
BAMTKEU5MTg4RTQ2QUJDQTEwMUMzMTdGNEY5MUFBNEJDQTREMDUwQzkwMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2fme0CMpKSnx4wmVwivVh46X
tl6T9PtKCbn4isDhfxAJ5WfS9ynK2WkBkcnt3CFame8U2NQum8l6Zw6ikeb3SX6m
KAKW5xL/8fDXTizOpExVojcEdIg6oO4xHN7vWglx0V65Q/lVqNwzGh4aOQ2F7Swv
HkY2B3l7m6lBhTamX+w/OSsSTHm6UEcvuMj+S8fWVKyWZM3BJvjY/MCyuA7blIuF
PlGDhclqcwgGAryVejx6qBFfnxAoStIZa8j5QdSEdO9P0Y655Nf+e6My1c/EphJF
4Gmw0rQrCE9TSRvpABxmiYub8qTO0OsSHwMf8rxEindgYpPsX57+puqSLw61AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU6RiORqvKEBwxf0+RqkvKTQUMkB0wHwYDVR0j
BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE
MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz
OTJlMzIzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHsx5zANBgkqhkiG9w0BAQsFAAOCAQEARbRn7hNxzAGbTQoMSSN94YWN
NnYqzigTFyIyr54XgupicRgBPjGJHqSgNcN7rAF6IF/eR3Y8XtL36qhGZqcpZEl8
360uwOmsy76tnnPQtjvzCmMSc/dgpLF9S+WW7OJqxs//yKDnG2feLfzfqkrtMmN5
xMeye08M5R0Qzy1E3YrjpNBPvDJNACEsaCBJ+EMOvxyC+DkO00ce+7qeymXjWL7D
ExCxpL3UWXPMYfqoT+ssQGCsr5/BHCC59EGTTnAiVmVK489HiLvwXZOHJxWuPvD8
n1dCr2mhyToWHGlSKlsg1QLc7TiqhPuvUH+w9icWY8Tb58xsVc0PSg7pRCuQBQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:07 2026 by rpki-client