Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31342e302f32342d3234203d3e203338333435.roa
File:                     3230322e3137332e31342e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier:          +PtZfJe0RyzYRVTWEZr68fvLw5zMtiPtZGcHlb9mNS0=
Subject key identifier:   86:CC:53:D4:E8:BB:F8:FA:A4:F0:26:CD:CD:D4:2D:9B:C6:56:A9:C7
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       38F5D3CC12EA08869923ECF97428323FD7C065E2
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31342e302f32342d3234203d3e203338333435.roa
Signing time:             Fri 10 Apr 2026 08:05:15 +0000
ROA not before:           Fri 10 Apr 2026 08:00:15 +0000
ROA not after:            Fri 09 Apr 2027 08:05:15 +0000
asID:                     38345
IP address blocks:        202.173.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f5:d3:cc:12:ea:08:86:99:23:ec:f9:74:28:32:3f:d7:c0:65:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:00:15 2026 GMT
            Not After : Apr  9 08:05:15 2027 GMT
        Subject: CN=86CC53D4E8BBF8FAA4F026CDCDD42D9BC656A9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:00:d9:3e:32:81:88:05:ff:a3:e2:ef:68:
                    db:1c:a8:67:98:8b:93:05:51:42:a9:8b:e4:d3:a6:
                    de:20:cc:70:52:1b:c2:1f:bf:c3:6f:b5:15:df:74:
                    d0:1e:36:4e:59:b0:e7:6c:0f:a6:f4:76:c2:1a:cc:
                    f1:43:2a:6c:09:ab:78:7e:8f:41:84:74:f4:4a:0a:
                    bc:81:4b:33:27:a8:51:da:63:c4:d0:8f:9e:0e:f0:
                    77:f2:14:a1:67:27:0e:b5:6c:37:81:18:24:54:4f:
                    43:ea:e4:05:d2:c3:38:88:53:94:5e:9f:8f:a5:15:
                    b8:ce:db:91:57:1f:d2:36:c3:19:a0:a6:52:0a:89:
                    ba:a7:70:93:80:8a:8b:ea:80:38:be:1c:5b:73:a5:
                    56:f3:af:44:77:95:d2:f8:6d:f1:7f:1f:dc:67:b6:
                    68:fa:e2:6b:50:c6:ee:c4:c9:a6:26:8e:ef:3b:b0:
                    ed:b0:f4:c1:7c:d9:df:d3:2c:9c:2a:0e:45:04:27:
                    bd:e6:10:3d:60:4e:38:d3:d0:d4:00:9f:c5:dd:34:
                    6f:39:aa:fc:96:88:1f:50:cf:6d:f9:98:d7:27:b7:
                    d0:cd:74:b2:1b:b7:13:3f:dc:d5:27:66:1c:62:13:
                    cb:89:15:7b:0c:c7:43:82:77:f5:16:ec:85:62:30:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CC:53:D4:E8:BB:F8:FA:A4:F0:26:CD:CD:D4:2D:9B:C6:56:A9:C7
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230322e3137332e31342e302f32342d3234203d3e203338333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:19:51:fa:55:51:81:72:68:68:bb:fc:74:3c:4b:18:96:bd:
         0d:58:f6:83:4b:ea:5c:4a:eb:c3:ef:08:da:d2:57:0a:20:cf:
         c1:d6:ad:9e:5b:36:59:ab:6b:1e:4f:e7:6b:ab:8c:4e:2c:ff:
         a5:18:9f:cd:b1:85:2e:12:f9:82:9a:1e:7b:2f:62:9f:f1:da:
         5e:7a:3c:ae:e0:31:76:0f:0f:08:d4:03:9f:98:7c:ab:63:ee:
         56:f5:97:67:ac:eb:c8:b5:b5:c9:c0:72:32:9d:d6:3f:13:3b:
         0b:19:b8:c8:e3:28:59:c6:32:a1:c5:2f:95:bf:9b:f5:63:4e:
         8f:23:d2:8a:1e:f1:8f:c7:54:35:d4:6b:1a:de:e2:10:0b:db:
         2c:ac:cb:d3:68:6d:0e:d9:ce:3f:64:4a:20:26:ac:6f:3e:06:
         8b:4e:3a:ba:bc:31:03:38:19:27:00:78:91:55:f9:e4:17:2b:
         5d:cf:95:fd:6a:d2:3d:a4:17:2b:c4:c3:91:ca:90:88:17:46:
         75:62:a3:dd:7a:c7:4d:c7:35:fc:c7:1e:aa:d9:8d:74:dc:71:
         06:39:70:1e:45:a9:8e:37:3c:aa:76:4a:5c:33:4e:f1:a2:2b:
         d1:80:ca:f2:82:dc:d8:05:6c:0d:32:51:fa:c1:05:db:dd:a4:
         7e:5b:cd:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:17 2026 by rpki-client