Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38302e302f32342d3234203d3e203338333435.roa
File:                     3230332e3131392e38302e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier:          JLsP1AEWU7Q1uUE1TUelFTYDB2gFwr1Hp4A7myufs7o=
Subject key identifier:   DD:A8:F6:2B:E3:29:BE:1F:01:7A:B3:0F:50:6F:EE:79:80:CA:3A:0F
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       1D9A69D32315C259F6EB23919138807AB7EB0BBC
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38302e302f32342d3234203d3e203338333435.roa
Signing time:             Fri 10 Apr 2026 08:13:07 +0000
ROA not before:           Fri 10 Apr 2026 08:08:07 +0000
ROA not after:            Fri 09 Apr 2027 08:13:07 +0000
asID:                     38345
IP address blocks:        203.119.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9a:69:d3:23:15:c2:59:f6:eb:23:91:91:38:80:7a:b7:eb:0b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:08:07 2026 GMT
            Not After : Apr  9 08:13:07 2027 GMT
        Subject: CN=DDA8F62BE329BE1F017AB30F506FEE7980CA3A0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:df:bc:43:0a:10:6e:69:90:f8:b8:a3:2e:e4:
                    39:17:f4:7e:14:05:49:43:58:d4:34:62:09:d0:25:
                    64:23:31:8e:cd:73:e3:a7:cf:eb:63:19:d8:4b:a2:
                    db:c6:93:d9:e8:b9:fa:e1:0a:3c:1a:4f:68:05:d3:
                    a6:bb:00:32:5f:26:fa:f5:4f:96:14:a3:fc:cf:04:
                    d8:40:c7:9e:ee:3a:03:6a:40:8b:64:a5:b4:cb:df:
                    59:f0:61:50:23:a3:60:85:9e:53:62:54:af:3a:dc:
                    3c:23:32:4f:dd:03:a0:ea:f9:9f:d8:a1:d9:70:77:
                    6e:5b:05:b9:c5:7d:36:01:09:bd:84:71:ab:54:9d:
                    7f:2e:70:e7:80:8c:7d:07:f4:de:12:1d:e2:fc:01:
                    b5:a0:16:ee:6b:99:06:18:36:90:f8:6b:e6:ad:4e:
                    1f:83:85:0a:5d:a5:a8:6d:cf:93:d3:25:b2:8d:74:
                    82:94:06:84:f9:76:97:ab:73:c9:f6:a7:c2:87:5f:
                    57:d9:f8:d5:02:05:4a:e3:4c:75:94:a6:78:33:78:
                    75:6d:8e:9e:40:d9:54:d7:0e:fd:82:2f:bd:49:54:
                    38:95:cb:ec:b6:4b:77:83:c5:16:9c:78:71:6c:82:
                    75:e2:a7:65:89:25:de:38:b6:3b:8b:f6:18:21:6e:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A8:F6:2B:E3:29:BE:1F:01:7A:B3:0F:50:6F:EE:79:80:CA:3A:0F
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38302e302f32342d3234203d3e203338333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:8a:46:e2:fb:46:b6:01:8f:a4:b3:68:aa:2e:94:17:85:2f:
         0d:18:fd:70:53:9c:aa:61:6c:73:6b:ca:0d:fb:7c:e3:ed:e3:
         f2:ba:65:56:a2:52:93:28:a1:cb:32:e9:47:cd:1b:ee:c7:5b:
         08:ba:82:37:70:83:60:56:5d:90:32:08:97:f3:18:3f:a0:52:
         db:81:bd:ff:bc:09:0c:7c:08:01:93:68:f5:e8:fa:58:1c:8c:
         3c:c0:9e:1a:5f:af:64:b8:b4:c8:c6:62:92:23:fb:bd:e0:a1:
         03:03:50:6c:ac:69:aa:58:58:0d:cb:c9:82:90:52:2c:ca:e7:
         92:a9:eb:79:35:3c:a2:f6:7c:d3:d5:d8:80:1c:01:7c:65:02:
         be:de:c3:c6:43:08:72:34:47:e2:58:43:b1:4e:11:10:e1:80:
         5e:d5:38:e3:e3:5e:e2:90:80:a0:2a:3a:fa:67:79:82:af:4f:
         67:e6:24:ec:3b:a7:93:a9:3b:4f:37:41:22:7d:36:4f:20:bd:
         37:6d:8f:4b:ab:bc:2b:24:59:15:52:87:de:85:8d:2d:35:df:
         6c:3d:0f:9d:31:9a:80:88:1e:11:7f:9c:47:9b:4d:a5:2e:02:
         65:72:cf:10:d9:54:df:ca:1e:3f:45:83:b0:2c:e2:2a:48:a9:
         0e:13:74:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:11 2026 by rpki-client