Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3231322e302f32342d3234203d3e2034383038.roa
File:                     3232332e3230322e3231322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          g4Ya9vnZyToZ89In86AOqvvqCEH9XLt5XAhJcWjXuss=
Subject key identifier:   33:73:BC:D3:C8:73:85:27:E9:BB:34:BC:23:07:57:AB:89:59:5C:A5
Certificate issuer:       /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial:       3E4B3161EFE2FB16056FCF451F90AD3B14CE64AD
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3231322e302f32342d3234203d3e2034383038.roa
Signing time:             Tue 19 May 2026 02:29:57 +0000
ROA not before:           Tue 19 May 2026 02:24:57 +0000
ROA not after:            Tue 18 May 2027 02:29:57 +0000
asID:                     4808
IP address blocks:        223.202.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4b:31:61:ef:e2:fb:16:05:6f:cf:45:1f:90:ad:3b:14:ce:64:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
        Validity
            Not Before: May 19 02:24:57 2026 GMT
            Not After : May 18 02:29:57 2027 GMT
        Subject: CN=3373BCD3C8738527E9BB34BC230757AB89595CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f9:a1:fa:54:68:67:ca:2a:b2:d5:24:cc:06:
                    1a:c3:f4:4f:92:56:c7:74:c3:de:b7:38:ac:74:f4:
                    d6:24:aa:e8:00:ea:ce:3f:a2:52:75:f1:18:95:cb:
                    31:bb:ec:38:f4:bf:97:4a:bb:58:b7:76:01:ee:a4:
                    5e:f4:9c:03:06:01:f0:ab:28:f9:f0:07:be:e7:a3:
                    55:a0:f9:35:91:d9:29:22:1e:51:26:d1:63:74:df:
                    f9:88:5e:9f:2c:e9:82:64:61:33:6d:57:b1:9a:29:
                    ee:03:98:35:7b:1f:98:41:4b:c9:13:45:a1:55:24:
                    df:4d:f3:05:b8:68:cc:27:be:8b:16:aa:29:e7:66:
                    d9:9c:b7:ea:8c:92:c4:19:37:ec:99:3e:c4:6a:d8:
                    a9:55:1a:5d:6f:48:bb:d0:ca:d3:d4:dc:03:cc:59:
                    0e:79:56:0a:20:e0:87:d7:87:52:12:6d:3b:6f:a5:
                    e0:54:4d:2b:5c:c2:69:7b:43:52:33:6d:22:d3:50:
                    7e:db:2b:65:4a:cb:ae:c7:bc:19:d8:6e:0b:7a:a8:
                    25:d5:60:2e:79:57:ca:64:0e:02:ec:26:10:9b:06:
                    70:66:7e:0d:89:68:37:41:77:67:6e:f4:46:21:84:
                    2a:88:9d:26:bd:02:40:e4:49:c8:0b:e2:76:78:38:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:73:BC:D3:C8:73:85:27:E9:BB:34:BC:23:07:57:AB:89:59:5C:A5
            X509v3 Authority Key Identifier:
                keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e3231322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.202.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a8:eb:80:d9:8d:03:ed:67:64:16:fc:e9:76:b6:ac:83:be:
         4c:4a:8d:27:8c:3b:04:dd:8f:a2:ca:db:4e:c7:3f:f9:70:8e:
         cd:3b:4b:b1:8f:f1:64:eb:48:b3:27:88:77:95:24:fa:f4:9e:
         f9:0c:4c:e3:0d:d6:24:de:64:17:28:f4:c8:a2:17:d8:89:8a:
         ef:69:b5:d8:b6:f7:69:19:eb:de:12:cc:12:29:b3:4c:f4:dc:
         71:b4:ba:8d:40:33:c1:8b:a1:e7:c0:06:c4:ba:52:3a:35:8b:
         54:3a:ae:4c:b0:15:b9:97:88:9d:80:5e:24:d9:b2:af:d9:d7:
         70:50:00:26:3c:21:e0:79:6b:06:1f:11:40:40:ef:94:f1:3c:
         0b:75:53:1a:65:70:6f:e9:fd:ae:89:f6:bb:3c:c0:9f:d0:e3:
         f8:78:27:c9:2c:28:52:0e:da:06:61:d9:e9:f7:49:3d:95:ae:
         99:03:1b:32:eb:e8:88:7c:91:c3:fd:84:49:27:5c:a0:47:b7:
         d1:99:7d:32:7e:89:d9:6b:25:e0:b3:e4:ac:11:b1:4b:2f:c8:
         0a:ba:03:d2:14:a0:96:c6:d7:71:4e:9f:60:81:54:7f:3e:6d:
         a0:5f:38:88:8a:3e:cc:80:ed:b4:c2:be:d4:25:d4:ae:8a:4f:
         f6:57:c6:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:54:28 2026 by rpki-client