Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3133312e302f32342d3234203d3e2034383437.roa
File:                     3232332e3230322e3133312e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          KoEHi+MrLAX5hbwwU8zIElJpOi9jKOZYRGiYMOob9Go=
Subject key identifier:   DD:F9:BF:90:C7:21:B7:23:DF:A3:E7:1C:31:D0:CB:26:31:A3:D6:0E
Certificate issuer:       /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial:       18B67B2C36968871D25F326EA627CBC9FEA16C76
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3133312e302f32342d3234203d3e2034383437.roa
Signing time:             Tue 19 May 2026 05:36:38 +0000
ROA not before:           Tue 19 May 2026 05:31:38 +0000
ROA not after:            Tue 18 May 2027 05:36:38 +0000
asID:                     4847
IP address blocks:        223.202.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b6:7b:2c:36:96:88:71:d2:5f:32:6e:a6:27:cb:c9:fe:a1:6c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
        Validity
            Not Before: May 19 05:31:38 2026 GMT
            Not After : May 18 05:36:38 2027 GMT
        Subject: CN=DDF9BF90C721B723DFA3E71C31D0CB2631A3D60E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:94:db:47:7e:c7:8a:01:33:93:93:40:4c:
                    de:ca:87:9a:da:25:d6:ba:b3:08:28:92:27:20:11:
                    c8:67:f9:0b:5e:fe:42:02:a3:40:86:00:d6:fd:3e:
                    5c:c7:fa:31:fb:63:16:bb:69:8f:24:4c:a9:9a:d2:
                    3a:f7:24:d0:aa:cc:01:97:49:f8:1e:be:ef:e4:5e:
                    e0:00:19:c3:0e:68:8f:55:03:c6:1c:5d:38:11:6f:
                    65:9b:fa:41:2e:2d:c0:c1:51:ad:e5:7f:4f:61:12:
                    bd:2b:84:f4:4d:5a:f8:24:d8:87:ae:cc:0a:25:bd:
                    63:6d:f7:84:5b:16:a1:80:cb:b7:83:3d:fb:5c:06:
                    91:54:db:40:27:16:09:42:2d:21:93:2e:ec:60:35:
                    cf:2e:59:a4:53:a1:0c:d0:9d:35:19:bc:07:ef:0d:
                    e7:8a:c4:67:8e:28:96:3b:f0:7a:91:76:b7:9b:9c:
                    66:81:04:9d:39:7c:87:5f:aa:04:09:93:40:5b:74:
                    58:83:1a:b3:c4:1f:12:c7:88:7c:51:07:7f:b7:25:
                    5c:27:ba:79:c4:41:b2:ce:69:b3:2f:a7:a6:9f:7a:
                    4e:28:91:fb:87:0f:69:fc:5e:6c:27:a4:29:33:6b:
                    23:9b:9f:da:50:9c:51:67:72:7f:e9:64:85:e8:16:
                    1f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F9:BF:90:C7:21:B7:23:DF:A3:E7:1C:31:D0:CB:26:31:A3:D6:0E
            X509v3 Authority Key Identifier:
                keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3133312e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.202.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:4b:5c:95:b4:4e:f3:d3:e9:71:a9:88:ae:24:66:28:5b:40:
         10:56:51:a9:19:92:b4:26:36:f5:20:c0:2c:23:15:0b:c5:01:
         b4:ac:a8:98:50:02:b8:e2:2c:83:a1:21:f1:0d:88:19:a3:15:
         2c:a9:50:cc:9b:24:6d:3c:3f:85:7b:de:f7:02:e7:68:aa:f3:
         39:3f:fe:5e:1f:6b:ee:1b:c4:6b:07:a6:06:6c:91:f9:9a:d8:
         fa:09:b0:4c:c8:94:60:66:b1:45:1b:ac:9e:3d:1a:25:ce:21:
         c4:9a:68:f8:c1:1f:31:56:56:88:fd:80:dd:2e:7d:70:23:f4:
         b3:c9:02:0d:a4:af:c9:2b:70:6f:4f:32:c2:b7:61:38:95:b2:
         36:ea:aa:12:03:14:4c:14:80:85:d8:4f:8d:1b:0e:54:bd:48:
         5d:38:16:cc:4f:5f:14:66:e5:42:bf:07:f8:7d:88:0f:c4:c2:
         c7:2d:1f:77:55:ac:07:10:40:53:a9:38:de:06:1c:af:64:c3:
         43:bd:4c:a9:b3:f7:e1:a2:39:e0:f6:9e:8a:8f:77:f8:d3:f9:
         54:5c:52:64:e9:df:1b:87:01:cd:43:1d:dc:4d:1e:78:f2:b9:
         e7:84:49:88:e2:b3:86:8b:0f:21:60:36:6e:69:b9:fc:fe:87:
         be:ea:25:f2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:25 2026 by rpki-client