Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132362e302f32342d3234203d3e2034383437.roa
File:                     3138322e35302e3132362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          S6kT9hx0gYXT6fkJOIwoI0pa6W1IUuS+navwww/zIw8=
Subject key identifier:   F2:F9:F3:64:85:D8:7F:55:63:46:F7:3D:1A:25:07:32:72:EA:88:57
Certificate issuer:       /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Certificate serial:       23AADE81A73DDA79E66C86C5A18A11B8ACEAA7CA
Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132362e302f32342d3234203d3e2034383437.roa
Signing time:             Mon 13 Apr 2026 06:59:35 +0000
ROA not before:           Mon 13 Apr 2026 06:54:35 +0000
ROA not after:            Mon 12 Apr 2027 06:59:35 +0000
asID:                     4847
IP address blocks:        182.50.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:aa:de:81:a7:3d:da:79:e6:6c:86:c5:a1:8a:11:b8:ac:ea:a7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
        Validity
            Not Before: Apr 13 06:54:35 2026 GMT
            Not After : Apr 12 06:59:35 2027 GMT
        Subject: CN=F2F9F36485D87F556346F73D1A25073272EA8857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:34:8f:01:54:62:ae:73:49:7e:32:7a:b1:
                    bb:d3:22:24:33:57:4c:62:c5:6a:f5:1e:39:7b:3a:
                    45:4d:b0:aa:93:77:25:17:6f:ae:53:af:d0:e1:03:
                    ea:74:23:c9:d5:98:17:8a:7c:0a:84:10:90:f2:5f:
                    03:82:31:30:fa:57:96:cf:34:1c:12:0e:61:cf:bd:
                    05:aa:1d:a1:45:d0:40:df:9a:4f:95:fd:39:c6:b1:
                    81:00:1e:5a:32:5e:56:60:77:8c:f8:c2:3a:83:ed:
                    4a:f3:69:35:bb:1b:c5:6a:2e:0d:29:5d:f5:f7:6f:
                    65:a9:b0:1f:26:73:0d:b1:52:99:fd:b5:5a:ec:ae:
                    bf:64:a2:f2:4d:6c:5b:f9:e8:46:d1:ac:e1:95:1a:
                    aa:71:03:0e:13:0c:aa:77:ba:44:40:2e:95:67:61:
                    ce:13:97:2b:e5:3d:c7:26:c9:56:7b:75:3b:f1:2f:
                    88:b0:04:5f:cb:5e:f3:4a:c8:af:0d:41:aa:26:6d:
                    49:fb:6c:b2:d4:67:d4:19:ec:63:f1:5f:bf:80:88:
                    ed:58:b4:cc:6b:dd:bf:1e:ee:d9:0e:9a:a2:03:bc:
                    34:ce:8f:43:69:f3:29:98:65:12:61:88:82:fc:57:
                    2d:d0:dd:45:90:d1:1b:f1:8c:c6:1c:ff:13:8d:fb:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F9:F3:64:85:D8:7F:55:63:46:F7:3D:1A:25:07:32:72:EA:88:57
            X509v3 Authority Key Identifier:
                keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3138322e35302e3132362e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:fc:cd:41:3b:f7:5a:b7:9f:ba:d1:63:a1:4a:7d:fa:41:f7:
         ae:13:d2:0c:cc:40:40:db:d6:3a:1d:63:30:e8:1e:e7:bf:88:
         42:64:5c:86:2d:ef:6a:17:3d:19:ff:09:ae:fc:10:f3:3e:66:
         f6:87:67:5b:af:46:10:9e:4f:eb:96:0d:cd:2f:ce:0f:d6:b4:
         4d:34:9b:db:aa:2d:45:31:93:fe:aa:74:b1:47:5a:14:35:57:
         52:02:77:b7:cc:65:0a:eb:4a:74:d4:24:76:24:de:a1:9b:09:
         5a:a4:b3:c8:26:1c:00:d2:ac:98:86:04:53:3b:71:af:ef:9a:
         e9:cb:37:8e:ee:07:d9:28:6b:37:a3:be:cb:ac:51:c4:23:2a:
         b6:91:22:fd:39:bc:68:b5:a6:a3:49:12:a6:f4:b8:96:71:b0:
         05:ed:06:8d:b3:5e:fa:b0:5f:2d:6b:ec:fb:50:c4:88:d9:58:
         6f:64:5b:d4:63:b8:d8:65:24:97:8b:d2:cb:b8:43:cc:90:c5:
         33:a4:9f:37:1e:bb:da:3b:df:7c:50:ab:30:e4:71:96:94:64:
         35:7b:43:39:cf:42:aa:51:ff:3e:1d:ba:19:47:26:8e:e5:30:
         bf:54:3c:0e:81:f8:7e:a0:2d:8c:6c:9d:5d:99:e3:aa:8b:08:
         30:8b:d1:40
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUI6regac92nnmbIbFoYoRuKzqp8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx
RjhFNkNDNjAeFw0yNjA0MTMwNjU0MzVaFw0yNzA0MTIwNjU5MzVaMDMxMTAvBgNV
BAMTKEYyRjlGMzY0ODVEODdGNTU2MzQ2RjczRDFBMjUwNzMyNzJFQTg4NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcDSPAVRirnNJfjJ6sbvTIiQz
V0xixWr1Hjl7OkVNsKqTdyUXb65Tr9DhA+p0I8nVmBeKfAqEEJDyXwOCMTD6V5bP
NBwSDmHPvQWqHaFF0EDfmk+V/TnGsYEAHloyXlZgd4z4wjqD7UrzaTW7G8VqLg0p
XfX3b2WpsB8mcw2xUpn9tVrsrr9kovJNbFv56EbRrOGVGqpxAw4TDKp3ukRALpVn
Yc4TlyvlPccmyVZ7dTvxL4iwBF/LXvNKyK8NQaombUn7bLLUZ9QZ7GPxX7+AiO1Y
tMxr3b8e7tkOmqIDvDTOj0Np8ymYZRJhiIL8Vy3Q3UWQ0RvxjMYc/xON+2stAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU8vnzZIXYf1VjRvc9GiUHMnLqiFcwHwYDVR0j
BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD
MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTYzMjE1Mzc3OTg5NjM1LzAvMzEzODMyMmUzNTMw
MmUzMTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALYyfjANBgkqhkiG9w0BAQsFAAOCAQEAuPzNQTv3WrefutFjoUp9+kH3rhPS
DMxAQNvWOh1jMOge57+IQmRchi3vahc9Gf8JrvwQ8z5m9odnW69GEJ5P65YNzS/O
D9a0TTSb26otRTGT/qp0sUdaFDVXUgJ3t8xlCutKdNQkdiTeoZsJWqSzyCYcANKs
mIYEUztxr++a6cs3ju4H2ShrN6O+y6xRxCMqtpEi/Tm8aLWmo0kSpvS4lnGwBe0G
jbNe+rBfLWvs+1DEiNlYb2Rb1GO42GUkl4vSy7hDzJDFM6SfNx672jvffFCrMORx
lpRkNXtDOc9CqlH/Ph26GUcmjuUwv1Q8DoH4fqAtjGydXZnjqosIMIvRQA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 17:47:50 2026 by rpki-client