Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS967.roa
File:                     AS967.roa (raw, json)
Hash identifier:          JVboMwrCRKAezTo9QepT0BoJv+pLm67QIaO3q/zAkoo=
Subject key identifier:   D0:46:1D:0B:05:D4:B7:8D:7E:8C:9B:78:32:EC:2A:6E:64:81:22:83
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       6796B92919AFA3D241828A8285475F0A50BFBD54
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS967.roa
Signing time:             Tue 19 May 2026 02:36:41 +0000
ROA not before:           Tue 19 May 2026 02:31:41 +0000
ROA not after:            Tue 18 May 2027 02:36:41 +0000
asID:                     967
IP address blocks:        103.132.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 10:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:96:b9:29:19:af:a3:d2:41:82:8a:82:85:47:5f:0a:50:bf:bd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: May 19 02:31:41 2026 GMT
            Not After : May 18 02:36:41 2027 GMT
        Subject: CN=D0461D0B05D4B78D7E8C9B7832EC2A6E64812283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:43:ed:6a:37:36:33:95:3b:7a:27:78:a9:28:
                    c9:d4:9c:4c:df:2e:d0:70:54:fd:3f:2a:6f:5d:5c:
                    8e:b3:0b:b7:9b:b2:3e:b3:13:0c:a3:4f:7e:cd:c6:
                    8e:3a:91:7a:a9:b8:a8:e5:a0:98:43:50:ef:54:d7:
                    ad:70:05:9c:92:b5:db:4b:74:cd:c0:04:90:93:e8:
                    7c:5f:57:40:8c:1a:17:c4:ca:a5:bb:14:12:5c:09:
                    2e:e0:aa:8f:9a:77:dd:0b:26:ae:a2:1b:ce:71:55:
                    87:56:5d:a8:e8:c0:fe:77:b5:ab:a1:e1:5a:2e:38:
                    fc:ba:81:c5:81:13:83:99:dc:26:7f:03:08:a0:3c:
                    b3:31:36:97:95:2f:03:bb:8e:33:c2:89:72:ed:7f:
                    1e:df:37:62:8b:c3:aa:0b:b1:c6:9b:d7:58:7c:60:
                    8e:72:67:ad:c5:85:08:0e:91:00:82:5f:d6:5b:9f:
                    69:3e:d3:83:1f:31:e6:f4:8e:35:93:bb:f5:36:a6:
                    52:a1:7f:34:12:6f:58:f7:80:bf:46:25:d9:97:c0:
                    e2:6e:cf:bc:48:fe:dd:6d:6c:64:34:f2:28:10:c3:
                    e5:55:fa:cf:39:d2:0a:95:ca:f4:09:23:a3:89:b9:
                    fe:8b:69:38:e3:58:c2:89:f4:ce:d5:35:cb:95:f7:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:46:1D:0B:05:D4:B7:8D:7E:8C:9B:78:32:EC:2A:6E:64:81:22:83
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS967.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:a8:0c:8a:44:cd:02:92:fb:d6:f4:80:66:2c:84:bb:31:34:
         1c:80:20:9b:f1:ae:96:18:6d:46:da:32:c8:5c:a1:04:c6:ed:
         51:dc:d5:b4:a3:c2:4c:13:d6:a2:d5:02:fc:74:9b:e1:38:80:
         8e:b3:2d:2b:c4:93:2b:e4:d1:6e:61:d5:b0:3f:c5:98:aa:9e:
         ba:c1:c8:2f:23:51:6e:a9:4e:f5:07:bc:cb:12:67:9c:8d:bc:
         eb:39:52:8b:37:3d:51:af:a0:41:14:fd:e3:06:7e:bc:9f:86:
         ce:15:b9:a9:e5:ab:2d:f9:9a:37:b7:7e:c6:d7:3d:07:3c:21:
         78:05:d0:0f:24:60:cb:f8:a4:c1:07:88:8b:9d:58:c0:e6:5f:
         6d:e2:5b:2e:c2:ec:44:1c:21:8f:19:f1:cf:98:e9:da:29:b9:
         55:18:f9:eb:46:de:01:3b:64:2c:63:b8:84:a8:54:57:ec:09:
         69:4c:7f:41:69:87:6a:e8:5d:ef:a4:94:0d:5b:05:af:7a:d7:
         e1:aa:47:49:5e:7c:51:71:32:e1:7a:dd:4f:d6:b2:63:86:83:
         d3:54:50:29:5a:5d:20:d3:e7:d4:0e:d3:88:6c:e6:23:0c:7b:
         cf:f3:c5:9b:65:ab:a0:9d:1b:df:65:b7:56:87:9e:33:61:19:
         c9:31:2f:78
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUZ5a5KRmvo9JBgoqChUdfClC/vVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIw
MUY5RDk3NjAeFw0yNjA1MTkwMjMxNDFaFw0yNzA1MTgwMjM2NDFaMDMxMTAvBgNV
BAMTKEQwNDYxRDBCMDVENEI3OEQ3RThDOUI3ODMyRUMyQTZFNjQ4MTIyODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQ+1qNzYzlTt6J3ipKMnUnEzf
LtBwVP0/Km9dXI6zC7ebsj6zEwyjT37Nxo46kXqpuKjloJhDUO9U161wBZyStdtL
dM3ABJCT6HxfV0CMGhfEyqW7FBJcCS7gqo+ad90LJq6iG85xVYdWXajowP53tauh
4VouOPy6gcWBE4OZ3CZ/AwigPLMxNpeVLwO7jjPCiXLtfx7fN2KLw6oLscab11h8
YI5yZ63FhQgOkQCCX9Zbn2k+04MfMeb0jjWTu/U2plKhfzQSb1j3gL9GJdmXwOJu
z7xI/t1tbGQ08igQw+VV+s850gqVyvQJI6OJuf6LaTjjWMKJ9M7VNcuV94r5AgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQU0EYdCwXUt41+jJt4MuwqbmSBIoMwHwYDVR0j
BBgwFoAUGHYyRwRtVqr7PWdz0ElFmwH52XYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODYxNTY4Mi8wLzE4NzYzMjQ3MDQ2RDU2QUFGQjNENjc3M0QwNDk0
NTlCMDFGOUQ5NzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTg3NjMyNDcwNDZENTZBQUZCM0Q2NzczRDA0OTQ1OUIwMUY5RDk3Ni5jZXIw
WwYIKwYBBQUHAQsETzBNMEsGCCsGAQUFBzALhj9yc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMC9BUzk2Ny5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmeEpDANBgkqhkiG9w0BAQsFAAOCAQEAw6gMikTNApL71vSAZiyEuzE0HIAg
m/GulhhtRtoyyFyhBMbtUdzVtKPCTBPWotUC/HSb4TiAjrMtK8STK+TRbmHVsD/F
mKqeusHILyNRbqlO9Qe8yxJnnI286zlSizc9Ua+gQRT94wZ+vJ+GzhW5qeWrLfma
N7d+xtc9BzwheAXQDyRgy/ikwQeIi51YwOZfbeJbLsLsRBwhjxnxz5jp2im5VRj5
60beATtkLGO4hKhUV+wJaUx/QWmHauhd76SUDVsFr3rX4apHSV58UXEy4XrdT9ay
Y4aD01RQKVpdINPn1A7TiGzmIwx7z/PFm2WroJ0b32W3VoeeM2EZyTEveA==
-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:39 2026 by rpki-client