Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3233322e302f32312d3231203d3e2034383337.roa
File:                     3230322e39312e3233322e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier:          JnpaOA7xi+2AAdljJgxT5MIjkAw9H+FTZnv0biVZNyc=
Subject key identifier:   9A:30:B1:49:83:4C:67:A5:39:B3:D2:C3:5C:09:DC:E1:2A:3F:30:BE
Certificate issuer:       /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
Certificate serial:       432D297DF52E64048F2F2D7EE0CFCFD651FBC3E7
Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3233322e302f32312d3231203d3e2034383337.roa
Signing time:             Wed 27 May 2026 09:09:43 +0000
ROA not before:           Wed 27 May 2026 09:04:43 +0000
ROA not after:            Wed 26 May 2027 09:09:43 +0000
asID:                     4837
IP address blocks:        202.91.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2d:29:7d:f5:2e:64:04:8f:2f:2d:7e:e0:cf:cf:d6:51:fb:c3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3
        Validity
            Not Before: May 27 09:04:43 2026 GMT
            Not After : May 26 09:09:43 2027 GMT
        Subject: CN=9A30B149834C67A539B3D2C35C09DCE12A3F30BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:61:6f:5b:fa:f9:a4:66:c3:9c:b6:98:05:
                    b2:f5:d9:9d:aa:7b:64:52:6b:2a:a7:37:61:bf:2e:
                    59:d6:ae:28:6e:71:cd:74:b1:69:0e:5b:62:ed:f4:
                    60:34:2c:b7:e6:48:db:18:41:fd:62:2d:5c:9c:c9:
                    39:c2:ec:26:bb:73:3b:4c:d4:1c:a0:dc:13:47:c8:
                    95:df:eb:16:4f:13:c6:23:7d:23:a0:93:3a:bd:19:
                    91:e0:ac:46:34:8b:e4:c1:da:f4:81:18:a7:aa:3f:
                    41:ad:65:11:20:1e:9a:44:4e:db:8c:76:49:8b:cc:
                    bd:8b:6e:1e:69:01:0f:e4:64:fa:1b:01:0b:7e:02:
                    eb:c0:27:fd:84:88:e7:ae:33:a1:93:74:dc:f1:05:
                    2e:1c:27:32:74:b1:0e:fb:3c:45:83:ec:01:28:d1:
                    9e:c9:7e:1e:c1:0e:67:af:96:8a:e7:5f:7b:3b:49:
                    54:66:1b:11:09:d4:0c:80:c3:5a:d5:b5:91:88:82:
                    9f:38:32:bd:b1:11:41:3d:26:b4:11:b6:19:a1:d6:
                    47:38:29:0e:a6:5c:c3:4d:1a:bb:37:90:43:a0:0e:
                    09:58:5c:33:72:d1:83:a0:43:5b:4a:13:22:59:4a:
                    05:4b:8d:c9:c7:0a:3a:91:86:6c:12:19:e7:57:7b:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:30:B1:49:83:4C:67:A5:39:B3:D2:C3:5C:09:DC:E1:2A:3F:30:BE
            X509v3 Authority Key Identifier:
                keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3233322e302f32312d3231203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:f2:cd:08:9d:60:07:f0:e5:70:3e:47:e6:25:c8:dc:d6:90:
         42:bf:c8:75:f8:ee:9f:53:25:c0:7b:4a:e8:73:1c:80:9d:39:
         e5:71:20:f2:b6:b2:92:2d:16:3d:eb:ac:85:8f:57:c4:8f:0a:
         f8:25:24:05:ee:58:15:72:ab:25:dd:87:7b:1c:54:27:29:da:
         8d:02:6b:16:25:ca:5b:39:c5:c1:76:6c:30:11:6c:ff:e4:41:
         1b:da:f6:b6:83:04:b0:3b:c4:a5:67:5a:fb:31:e3:d8:ac:1b:
         56:05:7a:e5:63:ba:ef:d6:6b:98:2e:b1:a9:54:c4:de:da:71:
         87:ee:d5:16:e9:f2:74:36:02:4c:64:1e:82:a6:14:63:5e:f0:
         21:c1:04:27:66:b7:33:e2:f3:ba:d5:fd:33:6a:a2:84:d2:92:
         c4:a0:52:ff:51:c7:6a:3d:7f:f3:ab:a6:e0:a4:7a:62:b6:20:
         2f:e6:6d:17:56:c9:d9:c3:38:38:27:da:38:43:9b:dd:06:c3:
         90:da:01:12:a4:f5:63:b3:08:f1:20:5d:ae:3f:ea:04:93:23:
         f8:93:d3:f6:7e:4f:3c:3d:56:3f:ef:4f:0b:e9:eb:0a:37:da:
         d5:09:aa:5b:52:4e:fd:74:d7:2a:ca:cb:29:ff:9c:f0:b0:56:
         06:69:90:7b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUQy0pffUuZASPLy1+4M/P1lH7w+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhF
RTU4QkJEMzAeFw0yNjA1MjcwOTA0NDNaFw0yNzA1MjYwOTA5NDNaMDMxMTAvBgNV
BAMTKDlBMzBCMTQ5ODM0QzY3QTUzOUIzRDJDMzVDMDlEQ0UxMkEzRjMwQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5h2FvW/r5pGbDnLaYBbL12Z2q
e2RSayqnN2G/LlnWrihucc10sWkOW2Lt9GA0LLfmSNsYQf1iLVycyTnC7Ca7cztM
1Byg3BNHyJXf6xZPE8YjfSOgkzq9GZHgrEY0i+TB2vSBGKeqP0GtZREgHppETtuM
dkmLzL2Lbh5pAQ/kZPobAQt+AuvAJ/2EiOeuM6GTdNzxBS4cJzJ0sQ77PEWD7AEo
0Z7Jfh7BDmevlornX3s7SVRmGxEJ1AyAw1rVtZGIgp84Mr2xEUE9JrQRthmh1kc4
KQ6mXMNNGrs3kEOgDglYXDNy0YOgQ1tKEyJZSgVLjcnHCjqRhmwSGedXez9nAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUmjCxSYNMZ6U5s9LDXAnc4So/ML4wHwYDVR0j
BBgwFoAU7G+xQlsuzYlqgdek4cq72O5Yu9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYyNjkzNDcyNjUyNDkzMC8wL0VDNkZCMTQyNUIyRUNEODk2QTgxRDdBNEUxQ0FC
QkQ4RUU1OEJCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhFRTU4QkJEMy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NjI2OTM0NzI2NTI0OTMwLzAvMzIzMDMyMmUzOTMx
MmUzMjMzMzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8pb6DANBgkqhkiG9w0BAQsFAAOCAQEAh/LNCJ1gB/DlcD5H5iXI3NaQQr/I
dfjun1MlwHtK6HMcgJ055XEg8rayki0WPeushY9XxI8K+CUkBe5YFXKrJd2HexxU
JynajQJrFiXKWznFwXZsMBFs/+RBG9r2toMEsDvEpWda+zHj2KwbVgV65WO679Zr
mC6xqVTE3tpxh+7VFunydDYCTGQegqYUY17wIcEEJ2a3M+LzutX9M2qihNKSxKBS
/1HHaj1/86um4KR6YrYgL+ZtF1bJ2cM4OCfaOEOb3QbDkNoBEqT1Y7MI8SBdrj/q
BJMj+JPT9n5PPD1WP+9PC+nrCjfa1QmqW1JO/XTXKsrLKf+c8LBWBmmQew==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:03 2026 by rpki-client