Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e36372e302f32342d3234203d3e2034383038.roa
File:                     3232332e3230322e36372e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          XEk+E5baFsc4MYSZBZnPp3KQLXX1/yOXQM8mPMS+HDE=
Subject key identifier:   A9:B3:83:A4:BE:45:78:1F:7E:52:EF:FA:A6:66:84:61:01:95:42:3B
Certificate issuer:       /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial:       07C243F3F3741E8AFB293862D19F18B3FD5F0547
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e36372e302f32342d3234203d3e2034383038.roa
Signing time:             Tue 19 May 2026 02:29:57 +0000
ROA not before:           Tue 19 May 2026 02:24:57 +0000
ROA not after:            Tue 18 May 2027 02:29:57 +0000
asID:                     4808
IP address blocks:        223.202.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c2:43:f3:f3:74:1e:8a:fb:29:38:62:d1:9f:18:b3:fd:5f:05:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
        Validity
            Not Before: May 19 02:24:57 2026 GMT
            Not After : May 18 02:29:57 2027 GMT
        Subject: CN=A9B383A4BE45781F7E52EFFAA66684610195423B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:3a:27:74:bd:57:39:30:bf:48:0b:6d:c3:
                    6d:b3:60:ab:53:40:c4:98:b6:8b:d9:10:f9:bf:bb:
                    b1:56:98:c4:69:be:ab:f3:04:98:22:76:fc:d7:0e:
                    1e:99:51:97:28:e1:82:bf:95:70:73:56:94:03:3b:
                    a0:f2:de:b1:88:6c:bc:18:0a:2f:f1:c4:49:de:2e:
                    dd:0e:69:1d:58:fb:d9:40:16:1f:02:6d:99:b1:f9:
                    96:4a:cf:24:18:95:ac:87:69:2b:7e:84:bd:f1:0f:
                    c3:a2:4b:e6:4d:61:72:8a:b7:cb:37:dc:76:5d:cd:
                    7b:52:ed:05:c3:4b:37:fd:d4:ef:47:77:08:0a:20:
                    cc:fe:78:ee:fb:d6:61:44:71:aa:24:e6:f8:3d:b5:
                    ff:f3:6c:02:a7:db:e7:a2:5d:86:c3:56:40:fc:46:
                    93:6b:5e:8d:f3:70:70:86:eb:e9:cb:cd:e6:71:c1:
                    53:af:91:ca:f1:45:13:c6:92:88:2b:82:f5:05:55:
                    96:f6:84:d3:c2:d8:89:3f:05:f3:77:99:d7:2c:5e:
                    96:19:16:c4:8b:b3:01:65:ab:54:a3:b8:10:e6:36:
                    e1:c1:4b:64:50:4d:be:f6:13:95:12:8b:08:36:aa:
                    cf:45:c0:a1:d8:02:ad:5f:82:cf:ec:0d:b4:c7:73:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B3:83:A4:BE:45:78:1F:7E:52:EF:FA:A6:66:84:61:01:95:42:3B
            X509v3 Authority Key Identifier:
                keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e36372e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.202.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:4e:d9:8d:65:8e:dd:5b:05:a5:90:5d:01:1a:d9:f3:f6:e9:
         6a:1b:10:31:d9:2d:56:0f:0d:7a:6a:fb:1b:86:33:5a:b0:f0:
         af:8d:6b:dd:48:5d:0a:ba:03:a3:63:ae:ef:9a:fb:a1:b5:f2:
         17:2e:ee:c1:27:51:73:f5:3d:36:38:3b:38:63:cb:e5:14:35:
         b2:45:4b:f9:8e:7f:4b:48:a9:fd:1b:f5:cb:10:6b:7e:3b:ec:
         ce:b3:f7:df:26:4b:ba:37:cd:8e:54:fe:56:d5:4d:30:f1:0f:
         05:51:53:d3:b9:20:3d:ac:14:8b:c4:36:74:73:04:94:6b:8f:
         1e:90:5f:83:d1:33:e6:62:17:46:25:b5:e9:e1:48:7e:ff:d5:
         d8:f1:98:a8:42:e5:d8:c8:bb:68:81:3c:d4:ee:4a:70:e1:e7:
         3c:50:81:fe:f0:c6:f8:e0:31:41:22:51:7b:99:e5:20:b3:a2:
         d7:aa:79:4d:33:9b:b4:12:42:be:98:5e:01:3f:1f:e4:57:0f:
         c5:20:88:4b:f9:0e:cd:85:ef:cc:07:3d:6e:a3:a9:7e:2a:b2:
         25:ad:51:05:68:7d:84:c4:01:e0:70:23:b3:10:6e:f7:52:c0:
         9f:c1:cb:37:79:e6:37:ac:e0:72:0e:0d:db:81:9a:de:c0:7d:
         cd:c2:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:47 2026 by rpki-client