Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e31392e312e302f32342d3234203d3e20313531323531.roa
File:                     3230332e31392e312e302f32342d3234203d3e20313531323531.roa (raw, json)
Hash identifier:          /40aDXtlZCEP2hquD991/eX5+Ztiga8tf5eQrwVIQIQ=
Subject key identifier:   03:C9:CE:61:30:B9:8F:D2:7F:32:D6:B2:E4:E9:31:0D:80:94:13:3C
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       53204476A3AD234BF135606ED7BF3D96E5FFBCB5
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e31392e312e302f32342d3234203d3e20313531323531.roa
Signing time:             Tue 26 May 2026 08:57:13 +0000
ROA not before:           Tue 26 May 2026 08:52:13 +0000
ROA not after:            Tue 25 May 2027 08:57:13 +0000
asID:                     151251
IP address blocks:        203.19.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:20:44:76:a3:ad:23:4b:f1:35:60:6e:d7:bf:3d:96:e5:ff:bc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: May 26 08:52:13 2026 GMT
            Not After : May 25 08:57:13 2027 GMT
        Subject: CN=03C9CE6130B98FD27F32D6B2E4E9310D8094133C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:73:e1:ee:16:7b:ff:3f:25:02:3d:31:de:
                    cf:09:5b:c3:13:64:f5:28:66:33:78:b4:ad:ff:e0:
                    cd:7d:73:4c:7e:23:92:6e:83:42:85:d4:62:ab:61:
                    43:2c:85:0f:3b:00:0d:26:6c:3a:ad:47:de:b6:20:
                    d0:3a:ea:5c:d5:a3:5f:31:7b:8c:04:64:7b:d0:4d:
                    07:55:52:4e:05:b1:08:97:0b:ab:e7:23:3f:8c:a8:
                    8e:df:5d:6d:e4:8c:49:22:f3:c6:8e:56:23:ea:6f:
                    de:77:d0:85:33:17:2a:d5:da:8c:d2:95:8f:e3:c8:
                    4a:33:d6:61:a0:50:93:16:12:b5:f6:6f:45:e6:59:
                    8b:f4:b9:32:d0:a2:ba:47:14:b6:a5:e7:49:01:88:
                    d2:5b:ea:0b:8e:6f:b9:a8:7a:65:ec:e3:91:f1:47:
                    d3:33:08:ac:91:e3:36:09:67:3e:ce:cb:6b:ac:95:
                    e7:23:82:a2:d3:0e:18:4a:aa:cb:85:e5:34:e9:11:
                    a8:fd:bc:12:6e:09:36:b8:a0:ad:68:b0:a5:3e:c2:
                    81:a2:c6:2c:ab:38:9a:4e:ca:1e:1e:76:25:57:1a:
                    d6:16:b1:91:6b:30:79:88:08:48:bc:f8:ba:26:b3:
                    0c:4b:e9:51:b4:f6:51:9a:14:1b:b3:00:bd:71:08:
                    8f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C9:CE:61:30:B9:8F:D2:7F:32:D6:B2:E4:E9:31:0D:80:94:13:3C
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e31392e312e302f32342d3234203d3e20313531323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.19.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:57:70:63:ff:b6:7f:4c:2f:e7:71:02:b8:d1:80:c5:7c:fb:
         5d:32:8c:e5:45:21:d5:e9:12:1c:6c:01:45:b6:90:95:5d:44:
         cf:cc:24:5b:ee:78:f2:b1:32:10:da:8d:8c:f6:7f:fe:88:09:
         c1:99:c4:e6:44:c4:55:eb:89:bd:a7:34:4d:d6:12:f4:40:23:
         04:f3:de:6a:d5:60:a7:29:1c:37:46:27:c7:3b:90:80:ed:5f:
         55:9e:12:fa:44:88:d7:30:67:15:a3:2b:3f:9c:05:14:f8:de:
         ee:1a:a9:67:f7:01:74:1f:72:3e:ad:d7:92:41:58:86:2e:aa:
         a4:5a:6a:ea:f2:69:71:78:cb:45:42:bf:24:b2:10:bf:d5:a4:
         09:f1:96:13:c9:86:c9:29:5b:ec:45:cf:4f:10:e8:a6:5f:3b:
         cb:fc:e1:2e:d8:6b:b7:7b:d7:57:ee:9c:78:f3:c9:67:1e:5b:
         29:82:bd:5e:bc:3d:e3:44:36:cd:e1:76:04:4b:af:17:34:6f:
         00:d0:98:86:3f:53:45:3b:24:e8:7d:ce:74:b1:2f:2b:57:09:
         7d:82:c1:ef:9d:e4:89:9e:2b:83:ff:67:29:75:b0:f0:ee:ff:
         b3:26:be:a6:3f:22:a2:c5:18:3d:4d:ce:71:32:54:9d:6d:18:
         f0:c4:ca:3c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUUyBEdqOtI0vxNWBu1789luX/vLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4
RDM3QzUxRTAeFw0yNjA1MjYwODUyMTNaFw0yNzA1MjUwODU3MTNaMDMxMTAvBgNV
BAMTKDAzQzlDRTYxMzBCOThGRDI3RjMyRDZCMkU0RTkzMTBEODA5NDEzM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/xXPh7hZ7/z8lAj0x3s8JW8MT
ZPUoZjN4tK3/4M19c0x+I5Jug0KF1GKrYUMshQ87AA0mbDqtR962INA66lzVo18x
e4wEZHvQTQdVUk4FsQiXC6vnIz+MqI7fXW3kjEki88aOViPqb9530IUzFyrV2ozS
lY/jyEoz1mGgUJMWErX2b0XmWYv0uTLQorpHFLal50kBiNJb6guOb7moemXs45Hx
R9MzCKyR4zYJZz7Oy2uslecjgqLTDhhKqsuF5TTpEaj9vBJuCTa4oK1osKU+woGi
xiyrOJpOyh4ediVXGtYWsZFrMHmICEi8+LomswxL6VG09lGaFBuzAL1xCI+9AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUA8nOYTC5j9J/Mtay5OkxDYCUEzwwHwYDVR0j
BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5
M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5Mzk0MTc5LzAvMzIzMDMzMmUzMTM5
MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzUzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMsTATANBgkqhkiG9w0BAQsFAAOCAQEAs1dwY/+2f0wv53ECuNGAxXz7XTKM
5UUh1ekSHGwBRbaQlV1Ez8wkW+548rEyENqNjPZ//ogJwZnE5kTEVeuJvac0TdYS
9EAjBPPeatVgpykcN0YnxzuQgO1fVZ4S+kSI1zBnFaMrP5wFFPje7hqpZ/cBdB9y
Pq3XkkFYhi6qpFpq6vJpcXjLRUK/JLIQv9WkCfGWE8mGySlb7EXPTxDopl87y/zh
Lthrt3vXV+6cePPJZx5bKYK9Xrw940Q2zeF2BEuvFzRvANCYhj9TRTsk6H3OdLEv
K1cJfYLB753kiZ4rg/9nKXWw8O7/sya+pj8iosUYPU3OcTJUnW0Y8MTKPA==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:06 2026 by rpki-client