Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa
File:                     3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa (raw, json)
Hash identifier:          Bf5H3+BoQ3Up0+N7c/J4JJIFM6SXHsnjkDOqGOo57YI=
Subject key identifier:   52:F0:99:8F:9D:B3:C6:1B:8D:11:32:0F:9B:E0:B6:A7:14:4D:4C:66
Certificate issuer:       /CN=B8D245B2C5B99498F3D8E0632643FF2259597775
Certificate serial:       6BDD2DE77B1F9292C00958698891AF2195B4B4EC
Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa
Signing time:             Fri 10 Apr 2026 02:47:10 +0000
ROA not before:           Fri 10 Apr 2026 02:42:10 +0000
ROA not after:            Fri 09 Apr 2027 02:47:10 +0000
asID:                     137697
IP address blocks:        103.40.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:dd:2d:e7:7b:1f:92:92:c0:09:58:69:88:91:af:21:95:b4:b4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775
        Validity
            Not Before: Apr 10 02:42:10 2026 GMT
            Not After : Apr  9 02:47:10 2027 GMT
        Subject: CN=52F0998F9DB3C61B8D11320F9BE0B6A7144D4C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:1a:b9:63:6a:2e:d5:f5:32:04:c7:ae:ee:
                    25:42:bd:e7:74:8e:bc:75:71:6c:c3:b1:a5:1e:e9:
                    4b:ce:29:56:35:b3:f0:8f:92:28:d1:f4:b2:1f:eb:
                    9d:be:cd:19:17:a2:0e:dc:55:8c:7e:00:6d:dd:ef:
                    c0:73:7d:eb:90:23:f8:b2:f3:1a:14:37:5b:91:ea:
                    d6:a0:f7:5c:13:df:8d:8d:d0:6c:d9:72:66:ed:db:
                    b2:2d:fd:df:17:d3:6b:e3:88:ad:5b:a8:01:f9:44:
                    1c:e1:76:d6:9e:e3:ad:e9:3a:20:1a:dd:e5:4c:b2:
                    c6:2f:d2:42:a6:16:19:db:aa:aa:73:49:a1:40:08:
                    f9:a6:32:10:ec:4b:f3:3c:38:6f:4f:6f:d9:64:85:
                    2c:7c:93:a4:84:08:00:bb:21:4e:6e:78:58:4e:a5:
                    20:1f:2c:db:dc:89:e0:04:cc:28:72:35:de:42:38:
                    1b:f5:3d:44:5a:b6:c0:a6:a3:41:f0:40:a5:f4:f0:
                    fe:9b:18:25:b7:e4:49:d4:76:11:dc:c7:25:2a:13:
                    89:59:07:9f:20:c4:91:b1:86:fb:18:45:b1:4e:f7:
                    ad:67:30:af:92:bf:bf:f9:c5:48:66:49:30:36:e1:
                    c6:f2:53:25:10:51:a5:1f:02:9d:0d:4f:92:6c:79:
                    6c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F0:99:8F:9D:B3:C6:1B:8D:11:32:0F:9B:E0:B6:A7:14:4D:4C:66
            X509v3 Authority Key Identifier:
                keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139342e302f32332d3233203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:9b:5a:b5:7f:2a:bf:92:ea:43:6e:61:b0:78:ca:97:83:59:
         25:4c:3d:29:35:a2:d7:ba:8f:30:22:e7:eb:48:fa:fc:1c:8f:
         b8:08:6e:a3:ae:6e:48:7c:e0:2c:c3:54:cb:ab:84:44:96:2e:
         0a:9c:d4:7f:09:91:22:aa:fb:19:bf:82:40:93:1a:d6:54:08:
         80:af:89:3e:18:f3:b5:a1:ab:d1:e1:3c:a4:89:ae:21:92:cb:
         ee:53:59:4b:72:c8:c4:a9:1f:bd:e1:1c:4d:4f:be:f2:13:b1:
         03:7c:cd:cc:81:5e:e9:5e:55:ba:ad:d3:54:a0:be:4d:d1:6c:
         0d:26:61:ed:bf:5d:6c:e5:27:3c:54:7c:ee:3d:49:fa:b3:33:
         39:f6:c9:1d:a5:93:63:b7:56:60:a5:05:99:d2:0f:ac:18:66:
         06:f1:3d:51:29:3b:61:3f:72:b1:98:88:97:f3:19:b4:11:46:
         a2:b2:fc:b7:a7:fb:85:74:67:8c:b1:94:9f:c0:b3:89:d6:cb:
         77:bb:4f:8c:62:7e:39:19:a8:7b:65:21:78:fa:0a:18:16:12:
         0f:79:70:af:75:42:0b:47:e4:69:35:1e:05:c6:5e:e5:3d:4e:
         ab:19:7c:11:ee:3b:1c:83:cd:d8:20:23:b5:12:6c:36:29:bc:
         9f:48:78:33
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUa90t53sfkpLACVhpiJGvIZW0tOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1
OTU5Nzc3NTAeFw0yNjA0MTAwMjQyMTBaFw0yNzA0MDkwMjQ3MTBaMDMxMTAvBgNV
BAMTKDUyRjA5OThGOURCM0M2MUI4RDExMzIwRjlCRTBCNkE3MTQ0RDRDNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7Bq5Y2ou1fUyBMeu7iVCved0
jrx1cWzDsaUe6UvOKVY1s/CPkijR9LIf652+zRkXog7cVYx+AG3d78BzfeuQI/iy
8xoUN1uR6tag91wT342N0GzZcmbt27It/d8X02vjiK1bqAH5RBzhdtae463pOiAa
3eVMssYv0kKmFhnbqqpzSaFACPmmMhDsS/M8OG9Pb9lkhSx8k6SECAC7IU5ueFhO
pSAfLNvcieAEzChyNd5COBv1PURatsCmo0HwQKX08P6bGCW35EnUdhHcxyUqE4lZ
B58gxJGxhvsYRbFO961nMK+Sv7/5xUhmSTA24cbyUyUQUaUfAp0NT5JseWwjAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUUvCZj52zxhuNETIPm+C2pxRNTGYwHwYDVR0j
BBgwFoAUuNJFssW5lJjz2OBjJkP/IllZd3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxMTQwOTUzNzA0MDM4Ni8wL0I4RDI0NUIyQzVCOTk0OThGM0Q4RTA2MzI2NDNG
RjIyNTk1OTc3NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjhEMjQ1QjJDNUI5OTQ5OEYzRDhFMDYzMjY0M0ZGMjI1OTU5Nzc3NS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTQ4MTE0MDk1MzcwNDAzODYvMC8zMTMwMzMyZTM0
MzAyZTMxMzkzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNzM2MzkzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWcowjANBgkqhkiG9w0BAQsFAAOCAQEApZtatX8qv5LqQ25hsHjK
l4NZJUw9KTWi17qPMCLn60j6/ByPuAhuo65uSHzgLMNUy6uERJYuCpzUfwmRIqr7
Gb+CQJMa1lQIgK+JPhjztaGr0eE8pImuIZLL7lNZS3LIxKkfveEcTU++8hOxA3zN
zIFe6V5Vuq3TVKC+TdFsDSZh7b9dbOUnPFR87j1J+rMzOfbJHaWTY7dWYKUFmdIP
rBhmBvE9USk7YT9ysZiIl/MZtBFGorL8t6f7hXRnjLGUn8CzidbLd7tPjGJ+ORmo
e2UhePoKGBYSD3lwr3VCC0fkaTUeBcZe5T1Oqxl8Ee47HIPN2CAjtRJsNim8n0h4
Mw==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:38 2026 by rpki-client