Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231322e302f32322d3232203d3e20313337373539.roa
File:                     3130332e3133322e3231322e302f32322d3232203d3e20313337373539.roa (raw, json)
Hash identifier:          0A06erw3OLdWIsY3e9VDc4+8JkwmhWD+EJBbNx8D0fI=
Subject key identifier:   92:4C:51:37:81:7B:2F:59:F4:8D:8E:8B:61:5A:2C:19:DA:06:C4:68
Certificate issuer:       /CN=5F00140F672D031D0607493A021A46F1A9475AE8
Certificate serial:       5E1B6D239B2A2ED764D726C03D620EF0FD90C7EC
Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231322e302f32322d3232203d3e20313337373539.roa
Signing time:             Mon 13 Apr 2026 01:21:56 +0000
ROA not before:           Mon 13 Apr 2026 01:16:56 +0000
ROA not after:            Mon 12 Apr 2027 01:21:56 +0000
asID:                     137759
IP address blocks:        103.132.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1b:6d:23:9b:2a:2e:d7:64:d7:26:c0:3d:62:0e:f0:fd:90:c7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8
        Validity
            Not Before: Apr 13 01:16:56 2026 GMT
            Not After : Apr 12 01:21:56 2027 GMT
        Subject: CN=924C5137817B2F59F48D8E8B615A2C19DA06C468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:b2:8b:63:77:11:b2:02:6a:ce:4b:10:ca:
                    9e:db:ea:ff:8b:05:0a:3a:14:7e:c5:bb:5f:47:92:
                    86:ad:7b:ce:16:c2:9b:54:e3:c8:94:3a:aa:1a:10:
                    31:61:77:a8:2a:d0:47:20:12:0f:71:fd:ba:8f:cc:
                    c1:ee:3d:2d:46:51:d4:84:06:82:24:79:25:33:67:
                    f6:63:5d:47:ea:c4:93:0c:b7:04:59:81:11:fb:0b:
                    3d:b7:a7:4a:1f:6d:61:e9:73:ff:f5:ab:b0:63:2f:
                    62:67:33:4a:5c:a4:00:02:0d:68:63:26:24:4e:0c:
                    4c:1c:5b:ca:7c:19:c0:3e:ad:88:a1:29:40:1c:3a:
                    4d:c9:15:06:a1:cf:13:dd:4e:3e:ce:f7:1f:3f:0c:
                    2d:7b:c7:be:69:f1:11:4c:8a:e2:a7:2a:b5:5a:41:
                    f5:c0:0f:31:13:c4:40:ce:46:8f:66:0a:cd:85:dd:
                    17:57:90:ff:78:79:d4:87:1b:29:67:97:52:a3:3f:
                    57:ee:ff:c1:ff:04:c9:88:37:25:38:d6:52:b3:47:
                    4b:cd:65:61:af:8b:ad:b8:fa:fa:8f:51:80:73:a0:
                    87:2d:4c:0d:48:73:97:8a:4f:15:3b:25:58:2a:0c:
                    8b:ac:8e:e7:dc:72:08:37:d3:21:31:b8:c9:2f:a8:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4C:51:37:81:7B:2F:59:F4:8D:8E:8B:61:5A:2C:19:DA:06:C4:68
            X509v3 Authority Key Identifier:
                keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231322e302f32322d3232203d3e20313337373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:09:25:97:54:47:33:09:45:74:92:07:50:7a:3c:c4:9d:86:
         0f:2c:cd:70:16:70:86:4f:b0:38:08:db:2a:8e:f5:5b:6b:2c:
         f7:14:b2:dd:1b:ba:54:8b:d8:88:38:b3:6b:14:ef:77:06:5d:
         d1:af:ae:3c:77:37:a9:25:22:b8:a4:20:05:f1:1f:b9:82:02:
         92:4f:8e:19:e1:b6:79:39:86:c2:57:ac:73:97:a2:b1:c9:7b:
         6a:bf:68:38:64:72:8d:bf:86:d9:df:a3:99:6a:93:f4:ba:d7:
         cc:15:99:90:b1:fb:24:d7:19:06:bb:aa:17:ca:32:31:24:69:
         ea:87:b5:d3:d3:9b:fc:dd:ff:57:0f:48:32:d9:84:a3:3a:02:
         48:65:cf:5e:c2:35:7e:c8:05:b4:d7:a5:7b:e4:2a:b3:1c:d2:
         13:f0:6d:58:a3:b4:5e:17:ad:e1:e9:33:c0:ab:08:71:d3:3f:
         83:40:82:b0:cf:72:0b:e5:3e:fa:8d:dc:5d:a1:3e:e8:7b:71:
         21:9e:7c:cd:f2:e3:37:57:19:30:6a:fb:da:b8:bb:15:49:21:
         d2:df:c3:d2:ae:30:d4:de:f2:1b:89:82:d0:fe:51:81:48:29:
         dd:d6:46:5c:45:c8:5d:36:f1:2d:6c:c9:27:93:49:c7:0d:72:
         28:fc:d9:14
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUXhttI5sqLtdk1ybAPWIO8P2Qx+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFB
OTQ3NUFFODAeFw0yNjA0MTMwMTE2NTZaFw0yNzA0MTIwMTIxNTZaMDMxMTAvBgNV
BAMTKDkyNEM1MTM3ODE3QjJGNTlGNDhEOEU4QjYxNUEyQzE5REEwNkM0NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorLKLY3cRsgJqzksQyp7b6v+L
BQo6FH7Fu19Hkoate84WwptU48iUOqoaEDFhd6gq0EcgEg9x/bqPzMHuPS1GUdSE
BoIkeSUzZ/ZjXUfqxJMMtwRZgRH7Cz23p0ofbWHpc//1q7BjL2JnM0pcpAACDWhj
JiRODEwcW8p8GcA+rYihKUAcOk3JFQahzxPdTj7O9x8/DC17x75p8RFMiuKnKrVa
QfXADzETxEDORo9mCs2F3RdXkP94edSHGylnl1KjP1fu/8H/BMmINyU41lKzR0vN
ZWGvi624+vqPUYBzoIctTA1Ic5eKTxU7JVgqDIusjufccgg30yExuMkvqL/bAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUkkxRN4F7L1n0jY6LYVosGdoGxGgwHwYDVR0j
BBgwFoAUXwAUD2ctAx0GB0k6AhpG8alHWugwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg4MTIxNTA2NTQ1NjY0Mi8wLzVGMDAxNDBGNjcyRDAzMUQwNjA3NDkzQTAyMUE0
NkYxQTk0NzVBRTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFBOTQ3NUFFOC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODgxMjE1MDY1NDU2NjQyLzAvMzEzMDMzMmUz
MTMzMzIyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNzM3MzUz
OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmeE1DANBgkqhkiG9w0BAQsFAAOCAQEAlAkll1RHMwlFdJIH
UHo8xJ2GDyzNcBZwhk+wOAjbKo71W2ss9xSy3Ru6VIvYiDizaxTvdwZd0a+uPHc3
qSUiuKQgBfEfuYICkk+OGeG2eTmGwlesc5eiscl7ar9oOGRyjb+G2d+jmWqT9LrX
zBWZkLH7JNcZBruqF8oyMSRp6oe109Ob/N3/Vw9IMtmEozoCSGXPXsI1fsgFtNel
e+QqsxzSE/BtWKO0Xhet4ekzwKsIcdM/g0CCsM9yC+U++o3cXaE+6HtxIZ58zfLj
N1cZMGr72ri7FUkh0t/D0q4w1N7yG4mC0P5RgUgp3dZGXEXIXTbxLWzJJ5NJxw1y
KPzZFA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:41 2026 by rpki-client