Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32322e302f32342d3234203d3e203338333435.roa
File:                     3230332e39392e32322e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier:          oayfCXrSVkMAFFSNM8yMp1+9Pa29XVnPEAyB2+PY/OA=
Subject key identifier:   F6:E6:03:D7:29:71:5A:D5:47:5F:D6:9A:43:44:D0:FE:A0:DC:9E:51
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       7BC8185F677779628E35F3211677886169671B52
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32322e302f32342d3234203d3e203338333435.roa
Signing time:             Fri 10 Apr 2026 08:13:07 +0000
ROA not before:           Fri 10 Apr 2026 08:08:07 +0000
ROA not after:            Fri 09 Apr 2027 08:13:07 +0000
asID:                     38345
IP address blocks:        203.99.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c8:18:5f:67:77:79:62:8e:35:f3:21:16:77:88:61:69:67:1b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:08:07 2026 GMT
            Not After : Apr  9 08:13:07 2027 GMT
        Subject: CN=F6E603D729715AD5475FD69A4344D0FEA0DC9E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:05:34:0b:02:e5:e1:31:bf:79:e5:a0:e1:
                    65:df:30:6b:06:84:1a:52:59:44:b4:39:bc:b4:1d:
                    f9:1d:1d:de:69:a3:aa:39:17:54:e1:8d:20:5a:43:
                    bb:64:4b:36:55:7b:22:34:c4:10:ad:c1:a0:8f:c7:
                    a5:7d:92:01:e0:3c:eb:4e:36:0e:fb:0f:a7:ec:cf:
                    1a:d6:32:2a:31:87:6e:d3:b9:e8:b7:69:db:88:19:
                    4a:b7:38:02:ac:61:e4:5a:a2:99:a8:10:7d:38:8f:
                    98:7d:0d:4c:b6:1b:94:17:28:e0:7e:83:cc:1a:94:
                    9d:a6:a4:77:4b:61:8b:05:1e:5f:97:de:5b:8f:84:
                    0f:1a:4b:06:7b:5f:00:37:59:3e:70:0f:82:2a:e5:
                    51:12:1c:ef:bb:39:c5:a7:2c:6e:b5:75:2b:77:51:
                    7e:d6:b3:86:8f:ce:89:f7:f8:b4:0a:cf:16:b4:a4:
                    49:20:e8:05:0b:bf:de:2d:52:18:ec:74:17:c0:46:
                    d0:65:7d:22:d7:20:54:96:10:c5:ce:3c:7b:72:5f:
                    48:a1:e0:57:55:5a:0e:d7:7f:98:34:64:a3:a1:5c:
                    fd:24:67:01:b6:ab:c0:19:f7:60:1e:b6:56:90:5d:
                    17:22:34:8d:b5:39:9d:fe:98:c3:b2:c5:60:bf:41:
                    37:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:03:D7:29:71:5A:D5:47:5F:D6:9A:43:44:D0:FE:A0:DC:9E:51
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32322e302f32342d3234203d3e203338333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:6d:e5:d5:35:78:6a:6e:6e:2e:7d:d0:94:42:a9:e5:dc:e8:
         07:46:4a:04:eb:61:1a:d8:68:7d:44:85:97:4f:75:c7:9e:98:
         53:ee:5f:99:9f:6e:ee:c1:55:21:ff:93:27:ac:83:84:dc:b5:
         08:a6:a9:eb:90:b3:54:aa:fb:ab:3d:5c:17:5e:f5:44:35:25:
         57:fe:57:39:c4:70:3a:16:b7:a2:ac:f9:15:10:5d:78:7b:86:
         96:01:79:59:85:01:76:03:02:a6:a2:b1:ae:5e:9b:45:2a:e3:
         27:82:24:7a:7d:b1:b1:ba:93:4c:7f:0e:31:5c:e8:ea:dd:91:
         1a:2d:97:58:ee:8f:3c:e9:02:a1:c5:a6:3f:ad:87:60:d3:99:
         9e:ab:3f:b6:ca:8d:45:a1:da:9b:2e:85:ea:dd:91:a1:02:81:
         91:b4:b2:4f:fe:60:23:ff:65:f1:36:e5:8f:10:08:bc:66:da:
         ed:28:b3:c4:d1:01:84:30:38:38:ef:48:7c:ad:4a:2f:f5:d8:
         20:fd:b7:3e:40:e2:e4:29:80:c2:fc:f4:f0:2a:60:13:94:32:
         03:f1:78:38:7c:d1:64:3b:b7:00:f9:e4:9c:2f:2b:ca:68:c1:
         5e:0b:a1:9d:5c:6d:dd:2b:c9:68:62:71:13:19:6d:ea:7c:d2:
         91:44:4c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:10 2026 by rpki-client