Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e33312e302f32342d3234203d3e203338333435.roa
File:                     3230332e39392e33312e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier:          dZ82n5zC3EHVhHjvmOIQ3N2Of5xWtGOVeondqj9B6Tk=
Subject key identifier:   83:25:10:D9:2D:20:3F:65:9D:B0:72:BD:19:88:A1:DB:27:75:24:3F
Certificate issuer:       /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial:       1A4BF39CEEAB739866F21111339736A87EC61127
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e33312e302f32342d3234203d3e203338333435.roa
Signing time:             Fri 10 Apr 2026 08:05:15 +0000
ROA not before:           Fri 10 Apr 2026 08:00:15 +0000
ROA not after:            Fri 09 Apr 2027 08:05:15 +0000
asID:                     38345
IP address blocks:        203.99.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 12:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4b:f3:9c:ee:ab:73:98:66:f2:11:11:33:97:36:a8:7e:c6:11:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
        Validity
            Not Before: Apr 10 08:00:15 2026 GMT
            Not After : Apr  9 08:05:15 2027 GMT
        Subject: CN=832510D92D203F659DB072BD1988A1DB2775243F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:ef:b3:5b:52:67:b3:07:cf:4d:51:9f:78:
                    f3:6c:2a:e2:29:d5:5f:e1:96:4f:7b:9c:c2:19:ce:
                    ec:c8:be:3b:08:76:8b:c9:87:b9:64:01:41:f9:3c:
                    5f:dd:a5:39:8d:6a:6b:7f:d1:66:95:eb:9a:74:99:
                    93:1a:5b:ab:35:5a:13:5b:46:a0:0d:58:08:37:0d:
                    c4:64:cb:79:b4:85:d5:04:b2:d0:81:01:96:67:46:
                    61:76:66:61:3e:7e:5a:56:47:6e:f8:3b:ce:f9:f1:
                    13:2f:0a:bd:c4:f3:70:d3:d1:e0:e1:6e:b1:e6:66:
                    91:5a:d1:85:e0:1c:10:e5:7e:b8:d2:cc:db:20:16:
                    35:5e:de:06:5a:44:97:21:dc:cb:2f:a3:87:7b:1c:
                    33:ac:0a:06:4e:b3:d6:39:c6:23:96:fa:28:7c:9e:
                    1a:20:b8:69:c9:d4:90:a2:71:46:6b:7d:6d:67:6a:
                    83:95:63:f4:56:c8:7a:db:e2:41:c1:92:fc:aa:0d:
                    a0:49:d8:99:38:25:d7:2b:7f:1e:2c:aa:2f:3d:3c:
                    7f:8f:16:78:7a:b5:f8:7e:71:c2:3e:9a:0d:4f:6c:
                    c8:a9:12:d1:86:3a:01:ea:be:8f:b8:10:62:d3:d5:
                    aa:34:0f:84:74:a9:56:82:57:70:e1:5e:df:0b:98:
                    6d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:25:10:D9:2D:20:3F:65:9D:B0:72:BD:19:88:A1:DB:27:75:24:3F
            X509v3 Authority Key Identifier:
                keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3230332e39392e33312e302f32342d3234203d3e203338333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:cc:5f:de:a5:59:c0:2d:44:3a:d3:f8:89:26:e1:f7:e8:2d:
         20:53:5b:8d:1c:0c:f4:66:4a:57:2b:18:36:27:05:55:5c:2d:
         11:89:a8:0c:bd:ae:4d:94:8e:f5:f5:65:5e:5c:f1:ea:5a:bd:
         af:f7:06:4a:82:43:2f:c7:eb:b3:53:fd:88:33:28:94:5a:2f:
         fe:d1:20:5d:cc:e9:bc:e6:56:ef:79:df:ed:b4:60:c3:2c:61:
         6c:75:e9:ba:6b:d0:65:f3:7f:db:7b:71:fe:6d:10:44:6f:7c:
         99:15:aa:b1:65:68:47:e6:2a:7d:20:3a:cc:7d:3a:a0:37:d5:
         5b:49:b4:b5:99:1b:d0:69:1b:9f:1b:d0:7f:92:b6:30:c8:af:
         7a:c9:5b:a9:cb:d0:b3:9f:a0:75:2d:dd:1f:0b:60:47:46:92:
         b8:4d:80:1f:a9:45:03:82:a6:b0:8c:d0:61:2d:88:47:22:22:
         94:b6:af:11:0a:c5:9c:e1:a9:45:26:5f:d3:28:58:29:b8:d6:
         c8:f2:b7:0a:ef:9c:3e:72:6a:4f:10:b6:a5:c6:c9:0b:21:d2:
         6f:19:00:2e:7b:9d:66:da:11:e1:dd:61:02:89:51:37:0c:60:
         b6:47:22:33:fc:95:b6:da:c4:e6:73:22:4a:ae:7c:a5:69:66:
         15:bc:b5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:31 2026 by rpki-client