Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e31322e302f32322d3232203d3e2039393339.roa
File:                     3230332e3134382e31322e302f32322d3232203d3e2039393339.roa (raw, json)
Hash identifier:          9UAex7M8k/LCSl+W4FCwhSEXW4AjjxNySCYkIWy78OA=
Subject key identifier:   06:D0:D4:F6:E9:14:2A:3F:47:EA:0D:24:62:87:7F:B1:2D:67:D2:70
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       5DE2A2D76A56E47B0FA1CA243DF81E3F15DF4411
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e31322e302f32322d3232203d3e2039393339.roa
Signing time:             Fri 10 Apr 2026 07:48:43 +0000
ROA not before:           Fri 10 Apr 2026 07:43:43 +0000
ROA not after:            Fri 09 Apr 2027 07:48:43 +0000
asID:                     9939
IP address blocks:        203.148.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 05:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e2:a2:d7:6a:56:e4:7b:0f:a1:ca:24:3d:f8:1e:3f:15:df:44:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Apr 10 07:43:43 2026 GMT
            Not After : Apr  9 07:48:43 2027 GMT
        Subject: CN=06D0D4F6E9142A3F47EA0D2462877FB12D67D270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:e0:8f:20:04:1e:56:be:02:ff:df:e0:15:
                    fe:a3:ea:c5:db:09:e1:58:e9:8d:9c:e2:26:9e:91:
                    d4:56:ef:f3:7c:b7:c4:b1:fd:b9:a2:3b:69:cc:01:
                    09:08:74:78:17:5f:81:28:c1:5c:57:9a:b4:b9:da:
                    18:b5:fb:3b:90:dd:dc:da:9e:b9:49:7d:c4:9a:a4:
                    e0:c7:82:55:c5:bd:ef:27:46:20:50:96:81:73:fb:
                    84:f3:12:b2:29:06:e8:c6:a2:0b:92:54:58:9b:73:
                    20:05:9e:0e:0a:7e:1b:67:e7:53:20:a5:38:fe:27:
                    12:dd:44:f8:5a:05:8b:48:ed:f2:84:6b:11:14:d8:
                    91:e2:5e:83:44:3a:ed:53:1b:85:9c:43:c1:54:cd:
                    78:a8:9c:2c:da:c7:83:a6:33:32:e8:31:7c:1f:8c:
                    af:99:e4:43:77:33:30:82:58:b4:49:4e:4f:df:33:
                    6c:db:63:1e:71:96:cb:e9:31:f8:06:6a:80:38:09:
                    b7:32:31:d6:7a:4a:5d:6e:20:50:40:c7:14:0b:9c:
                    8c:d7:d7:b4:df:5b:13:94:27:39:75:e0:03:71:60:
                    2f:3a:82:18:e2:cc:a0:5d:24:3c:f9:4b:0d:61:aa:
                    c9:73:b9:75:5a:9d:e2:69:4b:87:f6:66:72:f3:4a:
                    7f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D0:D4:F6:E9:14:2A:3F:47:EA:0D:24:62:87:7F:B1:2D:67:D2:70
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e31322e302f32322d3232203d3e2039393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.148.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:30:53:f0:39:6c:d8:f8:16:bd:c6:3a:c9:64:92:b6:92:78:
         79:04:61:43:e3:d7:1d:1b:18:f7:02:90:a7:df:c0:01:3c:7c:
         43:02:56:f4:c8:5d:60:a8:be:0a:d2:9e:9e:fe:20:2c:65:5e:
         bd:db:3d:76:1f:55:bb:2d:4d:f5:d2:b8:21:2b:d1:b1:e4:60:
         be:3c:f7:ab:cd:d0:63:a6:c5:92:3b:fa:b7:b4:a9:95:36:5b:
         b8:ed:e3:d2:7b:7c:c5:77:d7:47:ad:d1:3a:dc:5c:4b:9e:62:
         f8:c1:ab:c9:fe:a8:4b:fd:36:ef:6f:57:a6:e2:dc:1a:cc:71:
         4b:aa:8e:ec:ba:0f:4a:e3:0f:45:3d:f4:65:52:3b:23:9f:16:
         70:aa:b8:8b:9d:02:58:07:72:07:13:4f:59:72:1f:43:cc:dc:
         47:bb:f0:e4:d2:cb:f7:e2:20:94:d6:cc:e9:b1:77:0e:1d:c1:
         70:3e:5b:ac:be:a5:a5:ac:f5:5a:8d:c5:55:c1:75:bf:6a:51:
         b2:07:c0:ee:a3:c3:d1:3d:d7:b7:0f:1f:84:91:39:fa:8c:86:
         a7:6f:2c:68:99:e0:61:1b:80:07:e0:89:79:ea:da:24:ad:c7:
         80:65:26:80:f4:68:0a:d1:29:e4:8a:75:78:e9:d9:e7:af:33:
         f8:47:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:26 2026 by rpki-client