Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094533607986298883/0/3230322e33382e382e302f32312d3231203d3e2034383038.roa
File:                     3230322e33382e382e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier:          0rGJHRr/y3+8kcWE1AQNhiqwnmr11g0sMb5CItFnh/E=
Subject key identifier:   F7:16:F1:FE:A4:E7:4A:B7:7B:E5:98:2F:54:1B:D6:42:5C:1F:43:51
Certificate issuer:       /CN=83E69C7B79263FFF603292BA2BBC4995A77B7C5D
Certificate serial:       779FAEBCF9F4C36486B0EBD02B821BE94260707F
Authority key identifier: 83:E6:9C:7B:79:26:3F:FF:60:32:92:BA:2B:BC:49:95:A7:7B:7C:5D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/3230322e33382e382e302f32312d3231203d3e2034383038.roa
Signing time:             Thu 09 Apr 2026 08:07:09 +0000
ROA not before:           Thu 09 Apr 2026 08:02:09 +0000
ROA not after:            Thu 08 Apr 2027 08:07:09 +0000
asID:                     4808
IP address blocks:        202.38.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 05:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9f:ae:bc:f9:f4:c3:64:86:b0:eb:d0:2b:82:1b:e9:42:60:70:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83E69C7B79263FFF603292BA2BBC4995A77B7C5D
        Validity
            Not Before: Apr  9 08:02:09 2026 GMT
            Not After : Apr  8 08:07:09 2027 GMT
        Subject: CN=F716F1FEA4E74AB77BE5982F541BD6425C1F4351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:7f:8a:cf:3d:27:e5:a6:ce:11:4d:17:75:
                    54:d3:ec:d5:a0:99:6e:05:5b:e5:fb:50:a8:c1:5c:
                    6a:fc:8d:a7:ce:55:37:5e:cb:6f:dd:db:38:a9:ea:
                    76:64:0d:7b:0f:05:92:b8:59:01:6c:e4:f3:42:e2:
                    f0:7d:06:5d:26:bf:a5:37:7d:10:06:9e:a8:31:92:
                    6f:fe:64:5b:28:4f:35:e3:e4:c4:47:53:a3:af:60:
                    2e:26:44:1f:eb:af:67:f1:23:fc:23:09:4b:aa:70:
                    6c:d3:12:fc:22:fc:f6:b0:87:13:6a:12:27:4c:7c:
                    2c:ab:ee:f3:48:39:cd:2b:e0:be:91:46:a1:34:a4:
                    29:52:cd:43:be:be:00:1a:54:80:ab:ba:f9:f0:e4:
                    8b:b8:9f:a3:dd:22:9d:3a:09:0e:ad:69:db:67:16:
                    d6:ae:86:2e:79:d6:95:05:ed:26:07:13:de:f9:83:
                    57:7b:a3:6e:97:fe:50:d2:5f:8c:12:8e:f5:db:88:
                    bc:7e:55:41:5f:59:76:3b:c4:95:8f:5f:2f:69:a2:
                    b2:4e:a1:11:51:3a:f5:2c:8a:5b:81:0c:97:1b:f5:
                    fd:47:ef:98:18:1b:62:7e:1b:64:c2:af:bc:bb:77:
                    af:33:b0:3f:d2:47:cd:d8:f6:6d:72:a4:b7:8d:9c:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:16:F1:FE:A4:E7:4A:B7:7B:E5:98:2F:54:1B:D6:42:5C:1F:43:51
            X509v3 Authority Key Identifier:
                keyid:83:E6:9C:7B:79:26:3F:FF:60:32:92:BA:2B:BC:49:95:A7:7B:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/83E69C7B79263FFF603292BA2BBC4995A77B7C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094533607986298883/0/3230322e33382e382e302f32312d3231203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.38.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c2:6c:49:75:8a:37:77:88:a2:08:ec:91:7c:de:05:e7:45:b2:
         5d:9d:52:f8:8f:5a:9c:98:21:26:42:fd:2c:23:3f:09:54:c2:
         52:34:8f:02:05:8a:62:53:f6:3c:41:81:a0:5c:7b:07:cd:e5:
         ce:0c:3a:c0:ae:20:2d:aa:cd:ba:03:9d:b3:c7:71:38:91:91:
         3b:d7:6a:15:59:6d:ea:a2:9d:a8:77:ee:07:5e:0f:b4:5d:5b:
         b9:99:7b:61:55:03:1f:8b:74:84:4d:d5:56:cf:7c:2b:5a:78:
         2e:bf:b7:0b:f2:45:6d:5f:b0:04:04:6c:12:b3:ef:fd:6a:0e:
         3e:ab:58:04:6e:4f:38:c1:52:8c:a5:a1:4a:d5:6a:d6:d8:8f:
         48:dd:9a:d7:2f:ff:d1:2d:9d:1b:68:90:2d:72:92:df:11:8b:
         98:13:f2:76:21:7c:26:55:aa:96:0a:c2:17:f7:06:b9:87:31:
         29:0e:17:e8:87:13:a1:61:1f:97:68:8a:c9:15:78:a3:09:17:
         13:53:9e:4f:4b:be:83:d3:51:97:0d:e6:42:c6:e5:61:db:a7:
         cd:c2:3c:68:a5:7a:ee:f2:04:4d:aa:0e:7a:cf:4a:51:42:66:
         cb:cf:a9:11:d4:19:ee:1a:a0:a6:bf:90:67:6a:6f:93:e1:b5:
         77:cb:44:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:21 2026 by rpki-client