Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35322e302f32342d3234203d3e203137363233.roa
File:                     3232302e3131322e35322e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier:          UUkxY0whFj1kpNbjYdtJpYDJoAp4Ve34SOXVOTsiYFw=
Subject key identifier:   DF:61:BD:A9:E9:5C:DB:3A:9F:1D:A5:16:55:AC:84:D2:41:AE:51:2D
Certificate issuer:       /CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
Certificate serial:       4183D886C7B3005BBE4B39584FBF5C819A5F8CDE
Authority key identifier: 32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35322e302f32342d3234203d3e203137363233.roa
Signing time:             Fri 10 Apr 2026 03:00:39 +0000
ROA not before:           Fri 10 Apr 2026 02:55:39 +0000
ROA not after:            Fri 09 Apr 2027 03:00:39 +0000
asID:                     17623
IP address blocks:        220.112.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:83:d8:86:c7:b3:00:5b:be:4b:39:58:4f:bf:5c:81:9a:5f:8c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5
        Validity
            Not Before: Apr 10 02:55:39 2026 GMT
            Not After : Apr  9 03:00:39 2027 GMT
        Subject: CN=DF61BDA9E95CDB3A9F1DA51655AC84D241AE512D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:c2:d8:fe:7b:31:db:4b:5b:22:af:0f:ed:
                    71:6d:85:3d:ca:f6:c8:3d:74:71:ce:d5:0d:82:98:
                    28:e8:ba:81:c8:ac:3e:78:ba:e6:da:5c:8e:66:1d:
                    06:6e:6c:10:89:65:c0:4c:ab:46:63:08:c2:e6:d0:
                    37:7d:c3:0a:5b:0c:38:f9:84:51:32:b4:e7:14:97:
                    1e:aa:e4:22:82:7e:12:7a:0f:18:7b:2b:65:cf:8f:
                    b9:1b:2d:49:25:43:5a:52:8a:51:08:36:8c:11:35:
                    ea:ac:83:42:2c:32:64:ef:e9:30:e2:9d:c3:19:ac:
                    1b:a3:da:8a:07:b1:39:05:1b:0e:85:17:ab:7a:b8:
                    cd:27:5e:52:9a:c5:64:b9:da:69:f7:97:c4:28:95:
                    b9:9d:ed:13:9e:8d:23:f9:46:0a:a8:7c:5c:eb:03:
                    51:46:db:44:fd:37:51:84:9f:d7:10:e4:45:6c:88:
                    91:27:fc:28:38:10:f5:ed:b0:33:52:3a:b1:d1:8f:
                    ba:fa:b0:c8:77:1e:32:52:5b:d3:66:6b:69:6a:3e:
                    3f:75:e2:8c:f7:ec:07:4a:af:46:9e:2d:7b:82:b0:
                    70:96:f7:ec:b7:5d:47:e0:b1:b0:1a:81:bc:82:df:
                    42:d0:93:27:af:6a:4f:4d:2f:10:f5:c3:c8:6c:21:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:BD:A9:E9:5C:DB:3A:9F:1D:A5:16:55:AC:84:D2:41:AE:51:2D
            X509v3 Authority Key Identifier:
                keyid:32:C6:BE:DB:CA:2F:53:4D:41:32:20:06:E3:9A:6E:51:B1:A9:A9:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32C6BEDBCA2F534D41322006E39A6E51B1A9A9D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094815969324302337/0/3232302e3131322e35322e302f32342d3234203d3e203137363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.112.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:9a:35:cb:61:fe:18:3f:1a:15:8c:e1:db:60:60:ae:7a:
         9b:d6:63:52:ca:ae:ea:c3:af:e2:f9:6a:b7:cc:08:5b:13:71:
         2d:00:54:19:b0:9e:7b:a9:0f:a9:8e:86:ea:92:d0:ea:97:18:
         21:ea:d8:28:1f:63:22:82:48:61:3c:35:19:50:6d:32:05:1f:
         94:39:45:b0:7c:20:c0:0f:26:81:5f:e4:d3:de:6f:d9:a1:40:
         8d:19:b3:5f:51:02:4c:c7:97:48:15:54:c2:ad:3b:95:0d:99:
         51:99:de:d6:f9:41:8a:e0:5e:6c:7b:c7:25:6e:9f:df:5b:0f:
         b1:9c:ef:1a:b0:95:13:20:72:05:97:98:47:a3:e5:b5:11:6d:
         6b:06:7c:3f:f2:d7:c2:de:e9:3c:ec:b8:50:78:f3:26:22:b8:
         6d:fe:c8:9f:76:c5:2b:d1:8b:c7:0c:17:e5:c0:71:d0:0f:df:
         67:60:0f:cf:47:1d:23:56:d7:91:3c:a2:59:5e:b7:92:8a:2c:
         7a:30:c5:46:86:60:97:f0:04:85:e5:0e:70:f4:ba:8a:c0:e0:
         62:4d:fe:10:80:09:10:b4:41:9c:0d:87:2f:56:fc:3b:f7:3b:
         63:43:3a:f0:cc:1d:26:24:3c:e7:74:a1:9b:a2:60:7e:e4:11:
         33:19:e5:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:27 2026 by rpki-client