Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38332e302f32342d3234203d3e203338333435.roa
File:                     3230332e3131392e38332e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier:          znKTdWWi4E6nOX2tGV+NOpDlPU4KvRF4EsRhHq0XTC8=
Subject key identifier:   66:E8:2A:B5:A1:7B:8A:B0:8E:B8:D6:30:60:BE:0F:B5:39:2D:10:45
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       1F2665B5D471318AC2AB93744E5340FA4445ED45
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38332e302f32342d3234203d3e203338333435.roa
Signing time:             Fri 10 Apr 2026 08:13:07 +0000
ROA not before:           Fri 10 Apr 2026 08:08:07 +0000
ROA not after:            Fri 09 Apr 2027 08:13:07 +0000
asID:                     38345
IP address blocks:        203.119.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:26:65:b5:d4:71:31:8a:c2:ab:93:74:4e:53:40:fa:44:45:ed:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:08:07 2026 GMT
            Not After : Apr  9 08:13:07 2027 GMT
        Subject: CN=66E82AB5A17B8AB08EB8D63060BE0FB5392D1045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:91:ad:40:a1:cd:0f:31:f0:79:c5:6f:3b:f1:
                    dd:21:d4:eb:20:5f:ac:77:3f:cb:25:b4:61:9c:3e:
                    23:cc:74:a2:85:f0:7b:b5:56:d1:4b:b3:7a:2a:3f:
                    c6:19:57:34:b2:ec:b8:f8:83:6b:d5:e4:8e:3f:8e:
                    88:27:bc:f8:ad:9d:39:d6:fc:23:d5:38:5d:71:38:
                    4a:04:16:7c:16:85:56:c4:d9:b9:85:ba:a5:48:9d:
                    0e:9e:16:f5:cc:f0:13:c5:2f:61:44:f7:1a:f3:3f:
                    b3:62:1d:87:26:d7:11:c6:f6:68:dd:3b:77:7c:ff:
                    e4:36:7a:ce:6d:f1:84:57:22:5f:a9:5b:c5:f0:90:
                    1d:48:7d:f0:4c:c2:3b:8e:c1:07:ee:e8:52:6a:60:
                    5b:71:c0:6c:60:f9:da:93:82:df:08:e3:ce:c2:b8:
                    a2:84:c4:07:12:6a:47:89:be:69:a8:04:66:10:1b:
                    38:e1:21:28:64:2b:0e:fe:21:43:3c:4c:c7:7c:72:
                    7c:a5:62:af:e8:f3:4a:29:45:21:eb:68:c9:85:ec:
                    a9:28:0d:36:5f:9a:6a:de:cf:3a:e8:e2:29:b8:03:
                    60:cd:b2:01:71:5c:02:c7:ed:c6:eb:46:e5:46:c4:
                    2a:bf:37:a0:04:c8:36:5c:73:ed:20:58:21:12:f1:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:2A:B5:A1:7B:8A:B0:8E:B8:D6:30:60:BE:0F:B5:39:2D:10:45
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e3131392e38332e302f32342d3234203d3e203338333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:62:f9:c5:bd:15:26:2b:3e:a7:eb:1b:2d:cc:6a:bd:02:61:
         55:9a:14:d7:26:fd:b3:97:86:ce:22:cd:d3:7c:6e:34:8b:3e:
         02:a0:d1:b7:98:a5:53:c2:72:5a:7c:cf:02:bf:9d:a7:e8:3a:
         ad:2c:2b:1c:26:84:65:82:9a:3a:35:c9:b2:eb:6a:df:c6:3f:
         f9:64:4b:2c:b9:28:79:7b:8f:18:50:bb:e3:b5:cb:69:31:1f:
         cd:e9:c3:6c:f9:e2:47:c4:00:de:02:e4:60:34:f0:d4:b6:7d:
         fb:b7:09:52:ef:b8:96:38:96:ec:b4:fb:6e:43:8c:b6:80:67:
         54:28:a1:19:0e:74:32:38:12:91:02:81:01:7c:09:88:fc:4c:
         32:5d:b3:89:98:26:c0:17:41:91:f6:28:8a:86:ab:5e:a7:8e:
         57:c0:28:87:81:7a:c4:ba:d1:d3:45:d6:7c:d8:65:12:e5:f3:
         56:fb:34:d4:bf:f7:9d:fc:56:d5:0f:69:60:27:09:81:9d:3b:
         02:74:10:97:3c:a1:c7:65:3c:92:ba:b5:2d:1a:0f:de:f0:15:
         a3:fd:c1:eb:3f:91:32:7b:ad:36:67:6e:ed:32:8c:07:42:db:
         b3:d1:b2:d1:79:3a:d8:00:73:a3:74:36:7d:02:f1:18:05:0b:
         0c:a2:79:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:09 2026 by rpki-client