Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e33352e302f32342d3234203d3e2039393339.roa
File:                     3230332e3134382e33352e302f32342d3234203d3e2039393339.roa (raw, json)
Hash identifier:          ZZgewr8RVh/+Twq6QUA6ON8snGHwxRMYNX6zih97I/s=
Subject key identifier:   00:50:54:E3:E0:86:24:DA:A5:20:68:EA:52:00:63:6C:59:16:0B:DF
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       6BF9FFAE1C301B700ED1DA52C7E6A125A6649005
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e33352e302f32342d3234203d3e2039393339.roa
Signing time:             Fri 10 Apr 2026 07:48:43 +0000
ROA not before:           Fri 10 Apr 2026 07:43:43 +0000
ROA not after:            Fri 09 Apr 2027 07:48:43 +0000
asID:                     9939
IP address blocks:        203.148.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 05:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f9:ff:ae:1c:30:1b:70:0e:d1:da:52:c7:e6:a1:25:a6:64:90:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Apr 10 07:43:43 2026 GMT
            Not After : Apr  9 07:48:43 2027 GMT
        Subject: CN=005054E3E08624DAA52068EA5200636C59160BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:00:8a:cb:a0:a2:83:c2:02:44:6f:bf:41:
                    9a:67:5d:7e:52:84:23:23:6d:ab:96:e0:89:2c:97:
                    c9:03:7e:40:31:08:62:99:51:21:8a:55:2c:f8:9d:
                    b0:e1:c3:85:d8:a6:e3:68:df:13:c5:1a:cb:6e:29:
                    19:52:59:f5:bc:2b:db:a4:d1:eb:1b:63:4c:2f:83:
                    d4:76:dc:62:f4:a6:44:e9:7f:56:31:71:48:8b:3f:
                    bd:12:a0:31:b2:90:63:aa:27:74:35:99:0f:0f:15:
                    a4:c1:f6:5b:68:e3:10:d8:08:01:4f:09:27:ec:4e:
                    08:b2:94:40:7c:d9:4c:d1:57:76:dc:51:17:81:e4:
                    cb:ca:52:a1:b4:ed:f0:15:23:af:98:30:c3:e7:32:
                    28:ce:6c:c5:4c:e4:9e:b1:30:02:34:5a:fd:cd:e1:
                    f7:b5:35:2e:18:a1:bc:03:c3:e0:c5:fd:f3:e1:28:
                    8f:60:47:79:d6:01:a3:e5:9b:f8:65:b4:21:9b:c0:
                    00:de:77:e3:af:ba:74:85:68:78:41:f0:89:dd:af:
                    ed:c0:ed:37:40:87:43:87:3b:db:57:c1:26:39:fa:
                    95:f2:e6:ab:68:bf:87:ce:71:4b:69:06:0e:e9:f6:
                    49:2f:08:7a:4b:5e:47:22:93:20:b0:a9:40:51:f6:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:50:54:E3:E0:86:24:DA:A5:20:68:EA:52:00:63:6C:59:16:0B:DF
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e33352e302f32342d3234203d3e2039393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.148.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:33:10:a1:1a:3c:39:0a:cc:69:6c:bc:eb:04:1e:96:08:60:
         c4:b1:c5:20:d6:64:61:26:93:35:1c:5e:bf:f6:98:b4:c4:22:
         9c:34:d9:39:3d:61:dd:8b:f6:02:20:f6:d5:01:7b:87:0a:63:
         65:50:59:03:5e:5b:b4:e2:a5:b5:06:6a:f3:af:06:52:e0:48:
         23:c9:b3:69:96:42:00:8b:b3:97:f4:15:08:ba:6a:be:d7:4d:
         e0:c1:9c:6b:ac:0e:42:d4:3a:ab:09:a7:83:a0:55:6c:39:89:
         c2:eb:d9:52:a8:57:31:22:c6:05:d4:4b:1f:1c:fa:01:18:78:
         d1:1c:9a:83:c3:48:b6:be:44:94:78:74:23:3a:24:51:af:e6:
         97:82:dc:6e:aa:ce:81:25:ce:4c:5f:69:1d:31:70:af:2c:f9:
         d5:e0:e9:13:76:8d:68:bf:6d:c7:f6:95:56:f7:db:1f:42:40:
         ea:dd:00:bb:1b:06:ae:10:d6:6c:09:df:88:7f:48:dc:1f:5b:
         91:39:12:f3:8e:c6:d7:18:c2:ba:07:cf:86:6c:b7:d7:50:d1:
         bb:ca:c6:1d:57:35:df:83:f4:b2:78:cb:45:e6:ac:a5:07:a4:
         0c:5d:5f:03:0c:de:f5:df:f1:f1:15:52:9a:46:03:83:f8:6f:
         5b:20:77:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:11 2026 by rpki-client