Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32362e302f32342d3234203d3e203338333435.roa
File:                     3230332e39392e32362e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier:          darGVeMpBz2QGQGzf50oa8DDpMKxHE8L7rGDEzEJeOI=
Subject key identifier:   98:74:7A:64:6C:56:EC:D8:49:67:2F:3B:5B:70:5F:70:B1:98:DC:C2
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       4BECC89AD89623EE21DC86D6C791D0E9B2A4FE18
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32362e302f32342d3234203d3e203338333435.roa
Signing time:             Fri 10 Apr 2026 08:05:14 +0000
ROA not before:           Fri 10 Apr 2026 08:00:14 +0000
ROA not after:            Fri 09 Apr 2027 08:05:14 +0000
asID:                     38345
IP address blocks:        203.99.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ec:c8:9a:d8:96:23:ee:21:dc:86:d6:c7:91:d0:e9:b2:a4:fe:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:00:14 2026 GMT
            Not After : Apr  9 08:05:14 2027 GMT
        Subject: CN=98747A646C56ECD849672F3B5B705F70B198DCC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:a0:d9:14:41:78:ec:80:24:1e:d0:74:0a:
                    1a:32:9e:1b:21:9e:a0:e9:74:20:aa:65:9a:18:b5:
                    c6:da:98:06:f1:3d:0c:5b:ef:c5:6f:7c:85:f7:59:
                    49:50:c0:5c:cc:3b:3f:21:49:ec:00:92:4a:21:b0:
                    ad:8a:24:a0:dc:0e:e0:fd:34:e8:84:aa:2e:b1:6e:
                    e7:76:04:39:b0:64:fe:4e:ff:a3:82:f0:8d:92:21:
                    23:b4:53:e4:34:c8:cf:ad:da:3c:57:e7:d7:e0:0c:
                    a9:5f:96:4d:dc:fb:49:53:a5:bb:46:c7:4c:d4:e2:
                    24:7f:cc:87:d1:8c:e2:11:4a:a2:d2:89:24:7a:6a:
                    c0:7f:05:1a:e3:e0:40:a4:4c:a8:6a:51:f5:f6:5a:
                    ea:c1:4f:f7:0b:23:15:5e:12:af:69:20:f8:dc:cb:
                    be:4e:4e:8e:b0:b4:d4:be:9d:20:76:ae:17:6e:20:
                    cd:5c:64:91:cc:92:db:c4:ec:91:a4:22:37:21:6b:
                    2e:67:21:a2:34:f6:11:de:ec:7e:b8:9b:0b:93:77:
                    92:9f:cc:4e:19:bb:60:23:c3:8d:db:92:a4:22:be:
                    67:a4:d2:69:e6:b2:bf:b9:f2:8d:d8:99:15:1c:bd:
                    5c:92:54:9b:97:ec:e5:a5:5b:86:43:d0:f2:48:66:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:74:7A:64:6C:56:EC:D8:49:67:2F:3B:5B:70:5F:70:B1:98:DC:C2
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32362e302f32342d3234203d3e203338333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:d8:2e:b7:73:bd:49:08:de:03:9a:4f:d4:86:27:f0:38:6c:
         8d:b0:ea:08:a8:59:68:fe:0e:07:b7:4c:ed:d1:75:34:a5:f9:
         18:a2:2f:3b:93:a3:53:5f:5e:e7:ff:b8:29:c4:d3:04:f0:25:
         67:a4:49:28:90:24:ab:b6:ed:ee:b9:ac:f3:ed:c4:48:4f:65:
         77:8e:fd:cc:cc:cf:1c:5f:eb:90:80:17:7a:25:99:ca:5b:63:
         dc:ad:b4:d9:8c:9f:c6:d0:2c:e3:be:4d:b6:52:f7:d1:35:79:
         22:6e:09:80:11:5d:1e:4a:29:ba:d6:c7:e2:5b:31:bc:bd:29:
         f0:ad:6b:3a:b0:25:66:fe:91:24:ae:08:46:37:19:7a:0c:90:
         8a:39:93:04:c0:85:1e:3b:a1:24:f4:d1:b3:12:e1:9b:fa:76:
         c6:ef:1b:7a:20:35:38:3d:db:5f:84:e2:f7:29:04:46:a7:87:
         6f:c7:a1:2c:d6:fb:d2:b4:e2:b5:b7:de:c3:a5:26:f1:4e:50:
         2f:87:bf:d0:4d:63:fe:ab:fc:3b:f0:45:e3:36:fb:40:a3:b2:
         cf:53:05:ed:e2:4f:d8:9f:2e:ee:30:0f:a2:15:7a:f8:ec:22:
         e1:a6:1e:9d:8e:42:c7:6a:33:df:98:23:b2:32:9f:df:9f:a6:
         7b:57:56:25
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUS+zImtiWI+4h3IbWx5HQ6bKk/hgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0
MzYwQUU4NjAeFw0yNjA0MTAwODAwMTRaFw0yNzA0MDkwODA1MTRaMDMxMTAvBgNV
BAMTKDk4NzQ3QTY0NkM1NkVDRDg0OTY3MkYzQjVCNzA1RjcwQjE5OERDQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CaDZFEF47IAkHtB0Choynhsh
nqDpdCCqZZoYtcbamAbxPQxb78VvfIX3WUlQwFzMOz8hSewAkkohsK2KJKDcDuD9
NOiEqi6xbud2BDmwZP5O/6OC8I2SISO0U+Q0yM+t2jxX59fgDKlflk3c+0lTpbtG
x0zU4iR/zIfRjOIRSqLSiSR6asB/BRrj4ECkTKhqUfX2WurBT/cLIxVeEq9pIPjc
y75OTo6wtNS+nSB2rhduIM1cZJHMktvE7JGkIjchay5nIaI09hHe7H64mwuTd5Kf
zE4Zu2Ajw43bkqQivmek0mnmsr+58o3YmRUcvVySVJuX7OWlW4ZD0PJIZjvnAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUmHR6ZGxW7NhJZy87W3BfcLGY3MIwHwYDVR0j
BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx
QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzMDMzMmUzOTM5
MmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODMzMzQzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMtjGjANBgkqhkiG9w0BAQsFAAOCAQEAPNgut3O9SQjeA5pP1IYn8DhsjbDq
CKhZaP4OB7dM7dF1NKX5GKIvO5OjU19e5/+4KcTTBPAlZ6RJKJAkq7bt7rms8+3E
SE9ld479zMzPHF/rkIAXeiWZyltj3K202YyfxtAs475NtlL30TV5Im4JgBFdHkop
utbH4lsxvL0p8K1rOrAlZv6RJK4IRjcZegyQijmTBMCFHjuhJPTRsxLhm/p2xu8b
eiA1OD3bX4Ti9ykERqeHb8ehLNb70rTitbfew6Um8U5QL4e/0E1j/qv8O/BF4zb7
QKOyz1MF7eJP2J8u7jAPohV6+Owi4aYenY5Cx2oz35gjsjKf35+me1dWJQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:10 2026 by rpki-client