Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e302e302f31392d3139203d3e2039393339.roa
File:                     3230332e3134382e302e302f31392d3139203d3e2039393339.roa (raw, json)
Hash identifier:          m+B7KbUv15oqmrPM/7Hn8fXNpheglxGVjvTi/GjgkNQ=
Subject key identifier:   6E:9B:F8:34:D4:EE:ED:90:D2:42:17:8D:19:12:31:11:C2:2D:55:D2
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       4C44EAA25D41DACE0351082BF2D5BE909F5B528B
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e302e302f31392d3139203d3e2039393339.roa
Signing time:             Fri 10 Apr 2026 07:48:44 +0000
ROA not before:           Fri 10 Apr 2026 07:43:44 +0000
ROA not after:            Fri 09 Apr 2027 07:48:44 +0000
asID:                     9939
IP address blocks:        203.148.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 05:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:44:ea:a2:5d:41:da:ce:03:51:08:2b:f2:d5:be:90:9f:5b:52:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Apr 10 07:43:44 2026 GMT
            Not After : Apr  9 07:48:44 2027 GMT
        Subject: CN=6E9BF834D4EEED90D242178D19123111C22D55D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:4b:1a:0c:46:8b:48:b6:a3:46:6e:1c:02:
                    77:ec:11:30:94:af:d0:49:6e:30:9b:73:06:61:bb:
                    36:8c:77:b8:74:c9:89:1b:61:2f:63:8e:0b:cd:a3:
                    f3:23:e2:98:16:86:35:02:53:b9:c0:88:b5:1f:f9:
                    13:2c:32:c2:8e:eb:e9:38:ce:e1:2a:75:4b:10:e8:
                    c4:ac:42:07:41:0a:4d:39:d4:b7:09:1e:35:28:34:
                    d3:f2:a2:52:ae:ea:b0:11:04:82:53:3a:66:bc:58:
                    9b:fc:f1:1b:57:06:71:70:f2:2f:61:64:ce:a7:52:
                    18:58:d6:08:80:42:ce:e0:1d:fd:36:73:ce:a4:be:
                    02:8e:3a:65:2a:4f:37:79:c5:d0:ab:cf:13:af:14:
                    e7:26:35:e2:e9:1a:35:1a:f4:2f:ba:ec:63:11:8f:
                    8f:c9:0b:dc:a6:50:95:a2:20:20:28:e4:bc:d9:6a:
                    69:d2:c0:9e:90:23:59:97:22:98:c2:bc:26:91:d0:
                    43:fd:17:52:4e:80:df:6b:f3:33:90:53:89:62:e9:
                    09:13:5e:12:e6:97:06:31:58:4f:ef:68:0c:09:d5:
                    f8:3f:b1:0c:a1:c2:2c:0d:0e:fc:2f:54:07:64:73:
                    89:70:ec:a2:98:4e:65:f9:ab:a1:d6:4e:64:f9:eb:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9B:F8:34:D4:EE:ED:90:D2:42:17:8D:19:12:31:11:C2:2D:55:D2
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e302e302f31392d3139203d3e2039393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.148.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:77:8e:da:38:85:09:24:f7:de:24:36:b7:e9:07:e4:1a:
         84:f9:46:d0:f1:9c:db:bb:0b:22:af:df:d0:33:74:2e:c1:ce:
         e2:a2:6c:b0:d1:47:0b:de:88:a7:4a:dc:a9:b7:2b:93:75:67:
         0d:86:a6:ab:a9:9b:4c:00:71:5d:a4:c1:26:87:a9:79:69:3c:
         88:61:25:d0:92:08:06:08:7a:f1:c6:f4:f6:00:97:a1:4f:43:
         ac:d4:d3:5b:b8:86:c4:f3:c2:4c:2b:e8:72:b5:6b:10:00:41:
         1a:80:f2:6d:e1:1f:ca:98:d6:ab:61:0f:f7:12:47:6e:60:b4:
         cb:a6:9a:26:28:22:88:bd:35:21:30:3b:74:b0:78:99:00:08:
         a4:ad:9a:63:56:dd:f1:f1:cd:60:40:da:bc:20:3e:0c:e8:1c:
         bd:01:8c:0c:58:ce:34:f9:77:c9:88:6e:43:c5:94:c2:25:df:
         1f:a3:05:90:fd:a4:2f:77:52:8f:47:5a:85:6b:be:9e:b4:a5:
         a7:db:25:94:43:01:45:8d:53:dd:00:51:c8:c5:42:e5:0e:1e:
         d0:6e:7b:84:fa:dd:6e:08:4e:58:29:ce:0c:21:e8:70:0f:91:
         3f:1f:b1:a8:76:e2:2b:4f:eb:9d:78:f7:3d:ef:65:d2:f4:b8:
         42:eb:24:ba
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUTETqol1B2s4DUQgr8tW+kJ9bUoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VFMEZCMEE1RTREQTlBQzdENzhDNUZDOEYwM0Q5QUIy
M0JGQzNGNTAeFw0yNjA0MTAwNzQzNDRaFw0yNzA0MDkwNzQ4NDRaMDMxMTAvBgNV
BAMTKDZFOUJGODM0RDRFRUVEOTBEMjQyMTc4RDE5MTIzMTExQzIyRDU1RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrEsaDEaLSLajRm4cAnfsETCU
r9BJbjCbcwZhuzaMd7h0yYkbYS9jjgvNo/Mj4pgWhjUCU7nAiLUf+RMsMsKO6+k4
zuEqdUsQ6MSsQgdBCk051LcJHjUoNNPyolKu6rARBIJTOma8WJv88RtXBnFw8i9h
ZM6nUhhY1giAQs7gHf02c86kvgKOOmUqTzd5xdCrzxOvFOcmNeLpGjUa9C+67GMR
j4/JC9ymUJWiICAo5LzZamnSwJ6QI1mXIpjCvCaR0EP9F1JOgN9r8zOQU4li6QkT
XhLmlwYxWE/vaAwJ1fg/sQyhwiwNDvwvVAdkc4lw7KKYTmX5q6HWTmT56zctAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUbpv4NNTu7ZDSQheNGRIxEcItVdIwHwYDVR0j
BBgwFoAUzuD7Cl5Nqax9eMX8jwPZqyO/w/UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0NzkyMzcxNS8xL0NFRTBGQjBBNUU0REE5QUM3RDc4QzVGQzhGMDNE
OUFCMjNCRkMzRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0VFMEZCMEE1RTREQTlBQzdENzhDNUZDOEYwM0Q5QUIyM0JGQzNGNS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3OTIzNzE1LzEvMzIzMDMzMmUzMTM0
MzgyZTMwMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzkzOTMzMzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXLlAAwDQYJKoZIhvcNAQELBQADggEBADLCd47aOIUJJPfeJDa36QfkGoT5RtDx
nNu7CyKv39AzdC7BzuKibLDRRwveiKdK3Km3K5N1Zw2Gpqupm0wAcV2kwSaHqXlp
PIhhJdCSCAYIevHG9PYAl6FPQ6zU01u4hsTzwkwr6HK1axAAQRqA8m3hH8qY1qth
D/cSR25gtMummiYoIoi9NSEwO3SweJkACKStmmNW3fHxzWBA2rwgPgzoHL0BjAxY
zjT5d8mIbkPFlMIl3x+jBZD9pC93Uo9HWoVrvp60pafbJZRDAUWNU90AUcjFQuUO
HtBue4T63W4ITlgpzgwh6HAPkT8fsah24itP65149z3vZdL0uELrJLo=
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:16 2026 by rpki-client