Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31312e302f32342d3234203d3e203338333435.roa
File:                     3230322e3137332e31312e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier:          EBPwjWcW4Su/G/wY68zROVF3r7sMZD4yWJo9o+bQHgw=
Subject key identifier:   4B:55:6A:32:1D:0F:A4:D9:0D:FC:91:8A:71:30:3B:65:C1:61:CE:66
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       0B2837DC6F18E864DA0DEDFC6025DB800A425FD6
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31312e302f32342d3234203d3e203338333435.roa
Signing time:             Fri 10 Apr 2026 08:05:14 +0000
ROA not before:           Fri 10 Apr 2026 08:00:14 +0000
ROA not after:            Fri 09 Apr 2027 08:05:14 +0000
asID:                     38345
IP address blocks:        202.173.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:28:37:dc:6f:18:e8:64:da:0d:ed:fc:60:25:db:80:0a:42:5f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:00:14 2026 GMT
            Not After : Apr  9 08:05:14 2027 GMT
        Subject: CN=4B556A321D0FA4D90DFC918A71303B65C161CE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:46:56:23:36:ba:55:b0:81:99:32:2b:06:99:
                    29:cf:1f:e8:2c:37:c8:12:07:be:5e:4a:94:68:26:
                    fb:37:a2:97:e4:44:55:f5:c8:ab:98:c2:bd:8e:90:
                    ab:da:41:47:0a:53:ba:7d:f4:ad:fe:8c:01:f8:c5:
                    21:e6:95:d4:56:66:85:96:35:0a:52:13:82:9f:3a:
                    9a:71:43:91:aa:fc:8c:21:4d:70:5e:8e:29:96:ea:
                    80:25:9a:ab:8e:e8:a9:4d:ac:f1:92:d1:4e:ba:41:
                    ab:e5:a7:8c:e3:62:67:04:23:dc:79:0e:9e:b9:c5:
                    a0:cb:7e:85:93:65:95:7a:a1:77:4f:e4:0c:7a:47:
                    d8:b6:d8:00:f7:d5:ef:b9:c7:73:9f:80:d6:30:79:
                    ca:1c:6f:2e:21:c5:c7:40:0e:53:84:43:3a:b8:12:
                    72:cf:f2:2f:b3:83:1a:8f:7a:22:17:cf:35:63:b2:
                    03:21:65:f8:0f:e5:42:6e:4e:9e:8e:d2:ea:cb:79:
                    b4:d3:33:b1:e9:53:45:48:dd:2c:d2:1f:4d:02:9c:
                    e9:88:31:54:1f:04:a5:cc:6d:2f:cc:be:0f:8d:bd:
                    e6:fb:79:a8:29:5a:08:2b:be:ef:43:73:6c:67:26:
                    c2:83:a2:64:bd:6b:42:c6:3d:9e:23:cc:b9:43:8d:
                    ed:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:55:6A:32:1D:0F:A4:D9:0D:FC:91:8A:71:30:3B:65:C1:61:CE:66
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31312e302f32342d3234203d3e203338333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:ca:cd:95:be:f0:a6:3d:31:cb:b3:a4:4e:46:bb:5e:c5:
         8a:dc:3b:e3:1d:6b:59:e7:fa:65:e3:fa:11:77:45:9f:fb:0d:
         6a:5d:b6:e5:80:81:15:cf:fd:d6:87:99:19:c0:8d:b6:df:10:
         4f:8f:f2:51:a0:cd:e8:13:e2:bb:c7:70:f5:5a:4c:01:f9:a6:
         4b:f5:d1:b4:19:38:85:63:86:65:6e:fd:95:9e:a0:06:ed:71:
         30:a1:38:fb:ce:d8:65:89:6a:d6:61:6a:09:78:ee:18:d6:70:
         21:ec:bc:df:6b:6f:c2:0e:3b:e8:db:b2:a9:60:e6:68:da:f1:
         41:43:32:48:c2:ac:11:ea:41:49:b8:e6:44:1d:4a:08:ba:ee:
         cb:d9:c1:47:e2:1c:95:22:61:23:1b:ae:65:72:2b:2d:ac:29:
         6b:43:29:28:ed:60:7f:60:9b:ba:19:8f:a5:53:3c:67:90:4c:
         f4:06:72:12:bb:a9:4f:b2:25:eb:83:e3:b3:95:e8:ff:b9:ce:
         d5:5f:f8:aa:f9:f0:c6:b2:f0:9c:a0:a4:ee:5a:34:37:74:2c:
         f1:89:98:7a:e8:a4:d1:69:aa:0c:5a:e1:56:5c:6d:f7:db:5d:
         25:45:9e:2c:f0:ff:74:53:3e:29:63:d0:e9:da:85:20:c2:2c:
         75:d7:b8:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:25 2026 by rpki-client