Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32372e302f32342d3234203d3e203338333435.roa
File:                     3230332e39392e32372e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier:          mLIxneG3cSqtFCX5yWsvT8O1jRlhVD9RSfjC9xcsn8w=
Subject key identifier:   45:CB:F5:83:CF:63:97:BF:75:CB:2B:00:80:F2:7E:B5:77:3E:42:FC
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       33419750B6A880731A6F41160F60FBF046ECF93E
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32372e302f32342d3234203d3e203338333435.roa
Signing time:             Fri 10 Apr 2026 08:05:14 +0000
ROA not before:           Fri 10 Apr 2026 08:00:14 +0000
ROA not after:            Fri 09 Apr 2027 08:05:14 +0000
asID:                     38345
IP address blocks:        203.99.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:41:97:50:b6:a8:80:73:1a:6f:41:16:0f:60:fb:f0:46:ec:f9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:00:14 2026 GMT
            Not After : Apr  9 08:05:14 2027 GMT
        Subject: CN=45CBF583CF6397BF75CB2B0080F27EB5773E42FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c7:48:b4:aa:c5:70:b1:ab:1f:30:55:37:b8:
                    54:6d:c4:d3:65:1b:03:b8:a7:81:96:97:75:b6:25:
                    d1:63:19:bc:ab:80:06:92:c5:6e:a7:ef:45:da:a0:
                    22:36:cb:0f:09:95:75:c2:fe:73:54:46:12:23:34:
                    28:0f:65:47:ae:23:2d:3d:3e:21:7a:8e:0c:30:44:
                    9f:db:af:e4:d6:5f:af:f0:c2:78:e2:1a:a4:ef:31:
                    87:a5:21:ff:61:97:7e:49:4e:bc:17:98:c4:ac:78:
                    b0:19:d7:71:1e:1a:bd:8c:87:92:76:4e:c2:05:ea:
                    c5:bf:97:3b:71:58:0a:21:cb:73:73:aa:4e:d7:46:
                    27:42:56:ac:dc:6a:7e:82:92:de:26:77:18:81:2e:
                    cb:5c:e4:e7:db:92:23:1c:61:c2:27:8e:e4:b6:13:
                    d1:7e:a1:26:e8:90:63:f3:50:f3:09:47:df:ca:e2:
                    0b:8e:c3:e0:0e:00:7d:03:f6:68:51:29:6b:4c:13:
                    19:99:74:dd:a2:77:a3:da:a4:56:bc:3a:9a:04:a9:
                    fd:b6:c7:ea:21:8c:f5:4e:94:82:0d:ea:76:fd:fc:
                    be:b7:b1:fa:4f:13:a5:7d:68:af:51:bc:6b:43:8d:
                    ce:6a:79:fc:4f:f7:f6:a7:a9:24:d5:b1:d9:f8:9b:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CB:F5:83:CF:63:97:BF:75:CB:2B:00:80:F2:7E:B5:77:3E:42:FC
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e32372e302f32342d3234203d3e203338333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:39:88:f9:f0:45:e4:72:7e:5f:88:d7:f1:d9:40:a9:7b:fb:
         3d:eb:6c:e3:a5:f4:cd:a0:90:d7:12:a2:68:e7:ce:91:12:59:
         8c:4c:00:0f:d6:26:53:56:3b:08:71:6d:31:32:e7:c2:80:d8:
         75:f5:2e:5b:78:30:a8:5e:0f:65:2c:72:37:14:11:03:61:3e:
         36:46:6e:bc:a6:1c:67:b5:21:4a:ab:3a:71:7b:1c:9f:b7:69:
         08:b2:ab:0c:2c:b7:bc:99:16:a9:c5:5a:5b:99:46:7e:3b:a0:
         b6:0f:4b:34:3a:63:f0:27:44:37:ad:36:c5:29:55:54:c6:7d:
         88:6c:99:5a:8f:e9:e0:d8:5d:bc:c8:01:07:46:44:23:fa:76:
         bd:6d:eb:db:ae:53:69:11:5c:98:6f:29:53:05:41:e8:3e:97:
         f2:24:a9:34:d3:72:1d:22:68:13:b1:3e:2e:87:e4:4e:a2:30:
         aa:00:6a:ca:4a:48:c8:d0:6c:7a:57:d9:f0:fe:d5:3d:39:a8:
         ba:41:a4:50:a4:48:d9:f3:28:ec:2a:0e:ca:65:14:bc:75:8f:
         06:db:d5:e9:88:f2:d4:29:53:61:24:43:21:bb:26:f7:3f:9c:
         a5:9e:2e:a2:5f:78:2a:95:75:33:7f:42:bd:1c:1b:5e:c4:fb:
         93:4b:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:11 2026 by rpki-client