Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e31322e302f32322d3232203d3e2030.roa
File:                     3232302e3131322e31322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          FgukCynbazvIhGYdIub9B7WH384hIXe9dJKPS+MBkXY=
Subject key identifier:   E2:44:32:E8:49:97:0B:92:CF:2C:C5:5E:D3:D0:87:45:72:1D:7A:43
Certificate issuer:       /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial:       32910770E4E3CE5227F805204B706175B93084E5
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e31322e302f32322d3232203d3e2030.roa
Signing time:             Fri 10 Apr 2026 03:40:28 +0000
ROA not before:           Fri 10 Apr 2026 03:35:28 +0000
ROA not after:            Fri 09 Apr 2027 03:40:28 +0000
asID:                     0
IP address blocks:        220.112.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:91:07:70:e4:e3:ce:52:27:f8:05:20:4b:70:61:75:b9:30:84:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
        Validity
            Not Before: Apr 10 03:35:28 2026 GMT
            Not After : Apr  9 03:40:28 2027 GMT
        Subject: CN=E24432E849970B92CF2CC55ED3D08745721D7A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:7a:9b:75:ec:99:d1:75:fa:3f:b1:cd:73:
                    d9:1c:0b:f1:fe:03:e9:ef:0e:82:bf:24:47:9f:40:
                    a7:60:23:55:1a:a4:78:92:87:d9:c2:74:ad:d7:86:
                    bc:ea:35:14:94:b2:b5:6c:b5:77:61:d5:e8:8c:c6:
                    51:04:87:76:44:1d:91:24:90:2a:08:16:02:d5:f2:
                    5c:f4:bd:35:12:81:05:ee:41:ff:c2:63:a4:7c:e0:
                    e3:37:b4:f1:b0:37:a7:86:eb:3a:75:1f:ba:6f:3e:
                    40:c9:aa:1b:a5:de:c7:88:95:68:5c:0f:a6:99:4b:
                    ff:f0:d2:5e:24:d7:70:68:ac:a3:7c:be:8b:bc:d6:
                    99:46:d2:87:c4:1e:3e:e8:34:59:c8:89:61:32:a6:
                    d1:94:27:4d:b0:bf:82:7d:d1:2d:21:4a:bf:68:dd:
                    79:c0:5c:5c:ed:dc:c4:c9:f7:9c:d8:85:e7:e3:64:
                    26:21:b8:95:ca:5d:22:dd:b5:c1:2d:8e:ab:1f:5a:
                    61:7d:6a:b7:4f:e5:9b:49:f3:b4:12:b9:8c:92:42:
                    64:d3:c3:3d:a7:5e:09:81:a6:7e:37:92:31:67:a3:
                    81:8a:a8:54:9f:6a:50:23:72:21:b0:9a:fb:19:b5:
                    85:77:b2:89:86:95:c8:aa:37:70:5c:24:ec:6d:40:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:44:32:E8:49:97:0B:92:CF:2C:C5:5E:D3:D0:87:45:72:1D:7A:43
            X509v3 Authority Key Identifier:
                keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e31322e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.112.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:28:fd:77:12:d1:1d:ef:25:cf:10:10:f9:c3:bc:4a:0f:3c:
         b5:27:60:7f:83:a8:08:35:67:6b:15:57:fb:11:ba:7b:79:e9:
         9b:e7:6a:d2:b7:08:e6:ed:31:b2:83:21:5c:35:cf:dd:b4:25:
         11:ef:38:f3:1b:92:f3:6f:83:ba:c4:d6:d6:67:51:21:70:27:
         f2:89:53:36:ec:6d:f4:77:87:09:3f:4b:3c:b8:a8:bf:e7:59:
         0d:5b:c3:33:7d:16:61:64:9f:f6:3f:6f:25:69:3f:ea:76:20:
         78:f2:85:31:19:a4:e6:67:1f:0a:e9:15:fc:76:57:03:95:b5:
         f0:b4:6b:3a:29:f3:84:c3:8f:cc:5e:5a:58:d1:d9:dd:7d:76:
         4f:a6:83:e7:79:40:43:f2:2d:c3:76:92:1b:13:fe:3e:5b:ae:
         49:c8:ef:a3:3d:52:f7:fe:bd:94:e0:61:e1:73:70:e0:91:51:
         b3:d2:d8:79:ed:9c:0d:41:38:c8:58:0c:a6:2e:79:66:21:23:
         39:a5:5c:8f:7c:e4:cd:28:1c:b7:6b:2f:8b:7f:ce:c5:36:a7:
         08:2c:53:9e:77:c8:0d:06:60:4a:22:73:5b:5d:56:2a:3a:ec:
         c2:fe:51:6b:43:71:19:2e:7e:04:4e:96:d2:4c:df:f5:85:4b:
         a1:1d:81:ae
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUMpEHcOTjzlIn+AUgS3BhdbkwhOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC
MUE5QTlENTAeFw0yNjA0MTAwMzM1MjhaFw0yNzA0MDkwMzQwMjhaMDMxMTAvBgNV
BAMTKEUyNDQzMkU4NDk5NzBCOTJDRjJDQzU1RUQzRDA4NzQ1NzIxRDdBNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixHqbdeyZ0XX6P7HNc9kcC/H+
A+nvDoK/JEefQKdgI1UapHiSh9nCdK3XhrzqNRSUsrVstXdh1eiMxlEEh3ZEHZEk
kCoIFgLV8lz0vTUSgQXuQf/CY6R84OM3tPGwN6eG6zp1H7pvPkDJqhul3seIlWhc
D6aZS//w0l4k13BorKN8vou81plG0ofEHj7oNFnIiWEyptGUJ02wv4J90S0hSr9o
3XnAXFzt3MTJ95zYhefjZCYhuJXKXSLdtcEtjqsfWmF9ardP5ZtJ87QSuYySQmTT
wz2nXgmBpn43kjFno4GKqFSfalAjciGwmvsZtYV3somGlciqN3BcJOxtQD/9AgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU4kQy6EmXC5LPLMVe09CHRXIdekMwHwYDVR0j
BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2
RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx
MzIyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtxw
DDANBgkqhkiG9w0BAQsFAAOCAQEApCj9dxLRHe8lzxAQ+cO8Sg88tSdgf4OoCDVn
axVX+xG6e3npm+dq0rcI5u0xsoMhXDXP3bQlEe848xuS82+DusTW1mdRIXAn8olT
Nuxt9HeHCT9LPLiov+dZDVvDM30WYWSf9j9vJWk/6nYgePKFMRmk5mcfCukV/HZX
A5W18LRrOinzhMOPzF5aWNHZ3X12T6aD53lAQ/Itw3aSGxP+PluuScjvoz1S9/69
lOBh4XNw4JFRs9LYee2cDUE4yFgMpi55ZiEjOaVcj3zkzSgct2svi3/OxTanCCxT
nnfIDQZgSiJzW11WKjrswv5Ra0NxGS5+BE6W0kzf9YVLoR2Brg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:26 2026 by rpki-client