Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e302e302f32342d3234203d3e2034383038.roa
File:                     3232332e3230322e302e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          fs7E1Vk4in7BVgWIliDTzGBhp2nD78umdjJh2UoywKI=
Subject key identifier:   70:5B:A8:42:42:D0:90:A6:B7:89:A3:84:11:64:30:A8:22:06:C0:CB
Certificate issuer:       /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial:       1D11B887E1FF98C08CBA707D241914C28FDC222E
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e302e302f32342d3234203d3e2034383038.roa
Signing time:             Tue 19 May 2026 02:29:57 +0000
ROA not before:           Tue 19 May 2026 02:24:57 +0000
ROA not after:            Tue 18 May 2027 02:29:57 +0000
asID:                     4808
IP address blocks:        223.202.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:11:b8:87:e1:ff:98:c0:8c:ba:70:7d:24:19:14:c2:8f:dc:22:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
        Validity
            Not Before: May 19 02:24:57 2026 GMT
            Not After : May 18 02:29:57 2027 GMT
        Subject: CN=705BA84242D090A6B789A384116430A82206C0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:94:e2:07:a7:47:dc:86:2a:d2:f1:de:89:b6:
                    92:2e:46:73:e0:56:f2:00:eb:d5:4d:e1:c6:b2:2b:
                    05:33:e6:3b:7d:43:34:94:32:87:a6:91:d1:c0:74:
                    1d:15:ba:8f:1f:b4:81:60:4e:0e:d2:c3:11:24:a7:
                    0c:99:e9:3b:e6:48:d7:5e:b7:ac:c0:af:0e:0c:7d:
                    c9:a4:57:71:7f:cb:10:db:ec:8d:75:01:54:af:7a:
                    6c:ef:6a:27:1c:d1:f3:d8:c0:7f:d9:62:1e:57:da:
                    e2:30:4e:97:29:8c:88:cf:7a:2c:b3:17:f0:ff:5e:
                    c2:be:3d:20:b8:7c:8b:f3:31:4b:e7:41:1d:ae:cf:
                    4d:98:35:38:44:c3:48:d4:bc:4d:c5:f6:24:fd:67:
                    23:42:52:16:50:c0:9e:c2:81:ed:2e:25:e6:8f:73:
                    6f:1e:43:a4:6d:96:b7:b9:35:2b:25:30:57:da:1b:
                    29:0d:7b:da:ee:0b:b6:38:20:61:50:46:57:f9:10:
                    89:54:66:19:00:cd:7e:1d:d4:31:43:c6:3d:77:8f:
                    72:34:c9:36:a2:36:11:e8:13:3f:fd:48:58:24:9c:
                    21:f0:8f:9a:8a:68:b7:d2:79:b5:e2:5a:be:aa:01:
                    63:e4:92:ec:e5:d0:05:6a:39:e8:dd:e9:fc:7c:f0:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5B:A8:42:42:D0:90:A6:B7:89:A3:84:11:64:30:A8:22:06:C0:CB
            X509v3 Authority Key Identifier:
                keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e302e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.202.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:89:3d:27:4d:94:69:00:fb:23:7d:67:25:b4:05:69:03:50:
         79:be:cf:48:0d:40:b6:0a:b4:c6:7b:13:2b:a3:16:6d:4c:54:
         88:6a:f8:76:92:0f:30:39:cf:02:a6:ee:f6:a7:2d:52:dc:6b:
         16:d6:66:34:e5:28:8d:75:ae:3c:a1:a5:09:1f:98:96:47:39:
         50:ea:82:6b:63:68:d9:f9:b4:44:ba:49:0b:68:b6:61:30:82:
         0d:14:d7:54:f3:28:03:55:2d:4e:87:d0:05:ea:48:ae:1b:0e:
         c9:a5:a4:5c:b4:d2:bc:7d:06:8f:bb:b9:8b:63:8b:6a:ef:5b:
         35:7c:8b:33:8d:98:c1:22:a5:d4:0d:57:ad:b5:e4:2e:4c:c0:
         5c:24:51:11:35:a4:1a:c9:a9:f4:8d:b5:b0:05:53:46:b5:53:
         1c:3b:b7:e9:28:04:7d:ef:ee:07:46:10:c9:a0:dd:2e:b2:0d:
         65:e6:5d:1c:5a:46:92:42:e7:74:b2:47:c8:59:29:a1:0e:ea:
         b9:fb:d3:01:d5:f7:8f:f6:11:41:7a:cc:0b:23:bd:fe:a6:6f:
         16:2a:72:47:a0:7f:37:3c:ba:98:5d:46:55:de:af:8a:d7:28:
         ab:20:d8:f2:50:b1:31:6d:fc:10:55:9a:84:30:20:b5:0b:82:
         b0:9f:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:03 2026 by rpki-client