Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e34382e302f32332d3233203d3e2030.roa
File:                     3232302e3131322e34382e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier:          SGvEe5GK6XIe8JlHMRLT/dlZ5wb6a/xKR16HwjjAmAg=
Subject key identifier:   05:41:0B:BE:55:DB:6A:87:1A:B8:0A:C1:66:1F:41:72:9F:C7:E9:5F
Certificate issuer:       /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial:       71A0446344764E76F716F0AAD09D5BF29DDFF28E
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e34382e302f32332d3233203d3e2030.roa
Signing time:             Fri 10 Apr 2026 03:40:29 +0000
ROA not before:           Fri 10 Apr 2026 03:35:29 +0000
ROA not after:            Fri 09 Apr 2027 03:40:29 +0000
asID:                     0
IP address blocks:        220.112.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a0:44:63:44:76:4e:76:f7:16:f0:aa:d0:9d:5b:f2:9d:df:f2:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
        Validity
            Not Before: Apr 10 03:35:29 2026 GMT
            Not After : Apr  9 03:40:29 2027 GMT
        Subject: CN=05410BBE55DB6A871AB80AC1661F41729FC7E95F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:e1:df:7d:1c:da:22:26:21:fa:73:e1:32:
                    64:20:ff:bf:6e:15:80:77:06:02:f6:e3:81:80:34:
                    fb:8d:e8:e1:a5:04:a5:e3:57:76:99:06:46:e2:f4:
                    d9:3f:0d:61:8a:bd:ed:71:c4:f2:e3:21:df:f5:00:
                    81:52:08:33:18:18:60:f4:7f:c2:61:d2:9d:ea:da:
                    8c:e0:5c:0f:11:62:76:3a:67:0a:7a:12:95:d5:2a:
                    c3:be:7c:7b:f5:33:ad:bc:9d:df:e0:d5:05:73:2f:
                    a6:a7:c4:ce:21:30:2b:83:b7:a3:2a:93:92:5d:54:
                    e0:52:f4:13:34:49:23:35:bc:f2:d6:91:39:38:fa:
                    e2:ee:94:ad:3e:61:c3:9e:7f:ec:ea:25:b3:58:97:
                    d7:33:7f:85:73:35:9b:e2:37:70:c1:b4:f7:a8:dd:
                    8b:c5:f4:5f:c4:2a:2d:21:8b:c7:a4:d2:51:f6:bb:
                    8f:09:13:4e:17:fb:60:7b:8a:91:d4:cf:c2:c3:46:
                    65:6f:b1:f0:c3:01:99:16:ad:5f:47:cb:93:b0:7c:
                    9b:cd:9e:b8:ae:be:13:a8:ed:93:08:dc:6c:ce:ac:
                    35:a9:7b:d3:9d:41:66:48:fc:19:68:7e:1c:f5:2b:
                    71:88:47:15:bc:06:c8:f0:74:54:2e:55:f4:95:ff:
                    b3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:41:0B:BE:55:DB:6A:87:1A:B8:0A:C1:66:1F:41:72:9F:C7:E9:5F
            X509v3 Authority Key Identifier:
                keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e34382e302f32332d3233203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.112.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:5a:66:0c:29:8a:5a:9c:1e:4e:04:b4:f8:c2:78:3a:ee:5b:
         3a:c6:77:fc:63:a6:7c:04:4a:36:fb:8a:6e:79:7f:ac:6b:84:
         2c:ef:a6:a0:c3:74:19:b9:fc:29:07:45:9b:b4:e0:26:d0:f3:
         3c:3a:44:a9:ad:05:76:29:5c:29:9d:d4:2d:b7:f3:0e:29:06:
         6e:63:63:be:d4:d9:28:21:1f:30:0b:14:3c:e4:5b:5e:0e:28:
         23:f5:63:0d:5b:29:a1:c5:3f:29:2e:d6:e0:46:35:35:6e:8f:
         dd:e4:36:3a:23:22:7b:12:48:86:c9:db:b2:10:f2:f0:96:e4:
         62:f6:70:3a:82:00:41:0f:62:22:48:0e:37:fc:f9:24:bd:c6:
         13:9f:87:88:a2:29:89:8d:26:87:f5:ce:ea:b6:6b:88:15:34:
         f4:0b:1f:3d:a7:5a:85:bc:d5:9a:4f:99:c0:a7:69:d9:5a:24:
         9a:d3:b7:3d:2f:4c:78:29:6b:21:fe:66:cd:92:5c:bd:47:cb:
         20:f6:57:95:e3:ab:80:59:af:32:2f:c9:bc:7c:44:e6:a4:13:
         04:18:39:d3:04:fa:fc:b7:bf:13:5d:05:d9:93:70:8e:34:c3:
         9b:bb:d7:48:57:dc:5a:2a:6e:4f:f3:56:64:35:dc:b6:19:43:
         57:2b:07:89
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUcaBEY0R2Tnb3FvCq0J1b8p3f8o4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFC
MUE5QTlENTAeFw0yNjA0MTAwMzM1MjlaFw0yNzA0MDkwMzQwMjlaMDMxMTAvBgNV
BAMTKDA1NDEwQkJFNTVEQjZBODcxQUI4MEFDMTY2MUY0MTcyOUZDN0U5NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgNeHffRzaIiYh+nPhMmQg/79u
FYB3BgL244GANPuN6OGlBKXjV3aZBkbi9Nk/DWGKve1xxPLjId/1AIFSCDMYGGD0
f8Jh0p3q2ozgXA8RYnY6Zwp6EpXVKsO+fHv1M628nd/g1QVzL6anxM4hMCuDt6Mq
k5JdVOBS9BM0SSM1vPLWkTk4+uLulK0+YcOef+zqJbNYl9czf4VzNZviN3DBtPeo
3YvF9F/EKi0hi8ek0lH2u48JE04X+2B7ipHUz8LDRmVvsfDDAZkWrV9Hy5OwfJvN
nriuvhOo7ZMI3GzOrDWpe9OdQWZI/Blofhz1K3GIRxW8BsjwdFQuVfSV/7MLAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUBUELvlXbaocauArBZh9Bcp/H6V8wHwYDVR0j
BBgwFoAUMsa+28ovU01BMiAG45puUbGpqdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxNTk2OTMyNDMwMjMzNy8wLzMyQzZCRURCQ0EyRjUzNEQ0MTMyMjAwNkUzOUE2
RTUxQjFBOUE5RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzJDNkJFREJDQTJGNTM0RDQxMzIyMDA2RTM5QTZFNTFCMUE5QTlENS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODE1OTY5MzI0MzAyMzM3LzAvMzIzMjMwMmUzMTMx
MzIyZTM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdxw
MDANBgkqhkiG9w0BAQsFAAOCAQEAZlpmDCmKWpweTgS0+MJ4Ou5bOsZ3/GOmfARK
NvuKbnl/rGuELO+moMN0Gbn8KQdFm7TgJtDzPDpEqa0FdilcKZ3ULbfzDikGbmNj
vtTZKCEfMAsUPORbXg4oI/VjDVspocU/KS7W4EY1NW6P3eQ2OiMiexJIhsnbshDy
8JbkYvZwOoIAQQ9iIkgON/z5JL3GE5+HiKIpiY0mh/XO6rZriBU09AsfPadahbzV
mk+ZwKdp2VokmtO3PS9MeClrIf5mzZJcvUfLIPZXleOrgFmvMi/JvHxE5qQTBBg5
0wT6/Le/E10F2ZNwjjTDm7vXSFfcWipuT/NWZDXcthlDVysHiQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:29 2026 by rpki-client