Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e35322e302f32322d3232203d3e2039393339.roa
File:                     3230332e3134382e35322e302f32322d3232203d3e2039393339.roa (raw, json)
Hash identifier:          qZKa/jOVYlo9uS2Vt0Or+U6S/Vnqbjf2yeKPK/nwqwc=
Subject key identifier:   55:BA:3B:F3:7A:9C:10:9D:BF:3F:CF:6F:9A:06:C3:AF:EB:32:4E:D6
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       208B1DA1189F10A04E6B73D8131EC235131A5B67
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e35322e302f32322d3232203d3e2039393339.roa
Signing time:             Fri 10 Apr 2026 07:48:43 +0000
ROA not before:           Fri 10 Apr 2026 07:43:43 +0000
ROA not after:            Fri 09 Apr 2027 07:48:43 +0000
asID:                     9939
IP address blocks:        203.148.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 05:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8b:1d:a1:18:9f:10:a0:4e:6b:73:d8:13:1e:c2:35:13:1a:5b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Apr 10 07:43:43 2026 GMT
            Not After : Apr  9 07:48:43 2027 GMT
        Subject: CN=55BA3BF37A9C109DBF3FCF6F9A06C3AFEB324ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:4f:49:3e:6b:af:4f:90:db:04:6d:e0:9d:
                    ce:af:e8:dc:ec:b8:85:ae:df:3d:ac:c4:e3:a0:2f:
                    11:17:cc:20:0e:b0:c3:6d:46:e1:94:7c:31:f7:eb:
                    e8:3a:52:b7:76:c3:1a:ff:4d:63:ed:c4:e3:d7:fb:
                    4c:be:8f:cf:a0:41:c5:fe:a0:2d:a8:fb:ee:9c:e6:
                    01:73:fa:2f:e9:2a:33:13:20:f2:21:97:4f:00:2e:
                    85:e3:63:b6:bb:0b:b8:c5:86:18:b0:65:e3:a8:2d:
                    b6:42:1f:d4:f9:db:ec:e8:ff:31:10:cf:8d:22:6b:
                    3c:31:92:5c:d3:fe:71:fc:66:3b:dd:82:06:8c:13:
                    f9:a1:61:87:6e:1e:40:9c:8b:78:22:8c:44:ed:9d:
                    5e:57:da:23:d5:e4:5b:95:9b:4e:b2:97:24:b7:01:
                    d1:6a:c3:f9:3e:ef:d8:bb:71:6e:11:e1:b9:b7:df:
                    f0:cf:50:8c:2a:9c:ef:ca:d0:17:87:ae:53:ee:5f:
                    3b:74:d5:78:58:fe:ea:97:ba:e4:a1:b6:2a:28:f3:
                    cc:0b:0a:dc:97:5c:17:45:59:ae:02:61:ba:1b:cf:
                    98:35:29:97:66:30:27:cd:c3:f1:58:99:85:07:05:
                    d6:c1:4b:13:1b:95:59:3b:4f:6e:74:e3:ce:77:a5:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BA:3B:F3:7A:9C:10:9D:BF:3F:CF:6F:9A:06:C3:AF:EB:32:4E:D6
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3230332e3134382e35322e302f32322d3232203d3e2039393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.148.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:fe:0a:3e:e1:65:a0:54:35:1f:bb:15:0d:96:e9:dd:8a:fc:
         f6:5b:e1:01:6c:13:e8:6b:e7:c2:c1:93:86:2c:aa:d6:13:7d:
         50:2d:81:92:1d:5c:7f:1f:26:52:a9:4b:3f:04:63:78:cb:21:
         19:85:7b:5d:49:2c:f2:24:3e:a6:fe:d3:95:0e:23:69:6c:8e:
         dd:fe:ca:01:b3:34:f3:f9:ab:56:f0:20:29:a9:37:3c:27:41:
         21:03:93:ee:c4:e0:06:c1:3e:3d:86:8e:9c:41:2f:6a:31:7f:
         77:a2:b9:27:10:9c:ad:39:3e:5f:87:7f:61:80:17:3f:06:0f:
         df:38:3a:5b:6b:f3:80:5a:06:07:25:76:45:fb:ce:10:41:ea:
         27:92:74:9d:f3:4c:bd:7f:fe:da:7c:42:14:28:31:22:36:30:
         ad:ed:92:42:b1:65:29:4b:01:a0:da:6b:ec:49:9c:55:5c:29:
         cf:04:c3:85:6c:21:fd:ae:0b:06:40:14:db:fd:46:b3:ab:16:
         43:73:fc:47:27:54:79:6d:7e:14:ab:1e:5d:90:67:40:55:3e:
         2d:ec:4c:c5:34:7f:9b:3f:4e:6b:23:cf:c1:a0:bc:dc:1f:39:
         17:d8:7b:6e:79:f2:75:9a:f3:55:9b:36:e1:9b:61:5f:19:e9:
         75:a4:ad:81
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUIIsdoRifEKBOa3PYEx7CNRMaW2cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VFMEZCMEE1RTREQTlBQzdENzhDNUZDOEYwM0Q5QUIy
M0JGQzNGNTAeFw0yNjA0MTAwNzQzNDNaFw0yNzA0MDkwNzQ4NDNaMDMxMTAvBgNV
BAMTKDU1QkEzQkYzN0E5QzEwOURCRjNGQ0Y2RjlBMDZDM0FGRUIzMjRFRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZk9JPmuvT5DbBG3gnc6v6Nzs
uIWu3z2sxOOgLxEXzCAOsMNtRuGUfDH36+g6Urd2wxr/TWPtxOPX+0y+j8+gQcX+
oC2o++6c5gFz+i/pKjMTIPIhl08ALoXjY7a7C7jFhhiwZeOoLbZCH9T52+zo/zEQ
z40iazwxklzT/nH8ZjvdggaME/mhYYduHkCci3gijETtnV5X2iPV5FuVm06ylyS3
AdFqw/k+79i7cW4R4bm33/DPUIwqnO/K0BeHrlPuXzt01XhY/uqXuuShtioo88wL
CtyXXBdFWa4CYbobz5g1KZdmMCfNw/FYmYUHBdbBSxMblVk7T2504853pXTJAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUVbo783qcEJ2/P89vmgbDr+syTtYwHwYDVR0j
BBgwFoAUzuD7Cl5Nqax9eMX8jwPZqyO/w/UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0NzkyMzcxNS8xL0NFRTBGQjBBNUU0REE5QUM3RDc4QzVGQzhGMDNE
OUFCMjNCRkMzRjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0VFMEZCMEE1RTREQTlBQzdENzhDNUZDOEYwM0Q5QUIyM0JGQzNGNS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3OTIzNzE1LzEvMzIzMDMzMmUzMTM0
MzgyZTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzOTM5MzMzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsuUNDANBgkqhkiG9w0BAQsFAAOCAQEAv/4KPuFloFQ1H7sVDZbp3Yr89lvh
AWwT6GvnwsGThiyq1hN9UC2Bkh1cfx8mUqlLPwRjeMshGYV7XUks8iQ+pv7TlQ4j
aWyO3f7KAbM08/mrVvAgKak3PCdBIQOT7sTgBsE+PYaOnEEvajF/d6K5JxCcrTk+
X4d/YYAXPwYP3zg6W2vzgFoGByV2RfvOEEHqJ5J0nfNMvX/+2nxCFCgxIjYwre2S
QrFlKUsBoNpr7EmcVVwpzwTDhWwh/a4LBkAU2/1Gs6sWQ3P8RydUeW1+FKseXZBn
QFU+LexMxTR/mz9OayPPwaC83B85F9h7bnnydZrzVZs24ZthXxnpdaStgQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:23 2026 by rpki-client