Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e36372e302f32342d3234203d3e2034383437.roa
File:                     3232332e3230322e36372e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          NBfU2vienOV6ArtPyhs7/SgJ4NNmsVLtZ7Ar1u6YEWw=
Subject key identifier:   CC:9E:7D:88:C6:E1:6E:F4:DF:74:3C:7B:CE:6E:58:69:45:E0:35:4C
Certificate issuer:       /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial:       1B8F2F7C32893A86E985F26AB8722F31D40E043D
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e36372e302f32342d3234203d3e2034383437.roa
Signing time:             Tue 19 May 2026 05:36:39 +0000
ROA not before:           Tue 19 May 2026 05:31:39 +0000
ROA not after:            Tue 18 May 2027 05:36:39 +0000
asID:                     4847
IP address blocks:        223.202.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8f:2f:7c:32:89:3a:86:e9:85:f2:6a:b8:72:2f:31:d4:0e:04:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
        Validity
            Not Before: May 19 05:31:39 2026 GMT
            Not After : May 18 05:36:39 2027 GMT
        Subject: CN=CC9E7D88C6E16EF4DF743C7BCE6E586945E0354C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:8b:5d:30:41:19:c6:a7:62:1f:e0:0c:91:
                    5b:2d:b1:3c:47:e1:df:f3:4f:99:4d:62:d8:ed:5f:
                    60:ec:ec:3c:1e:9f:61:c7:26:94:82:30:24:aa:1e:
                    6e:4b:aa:52:20:10:c0:e6:74:28:29:d9:3f:d3:38:
                    4c:6e:fc:ea:50:7a:0d:50:83:95:52:32:31:d8:72:
                    6f:ee:8c:52:1f:99:e0:97:96:7d:28:b5:c9:c5:ca:
                    b7:17:75:72:07:01:59:0f:13:67:2c:2a:45:d3:33:
                    75:f7:01:62:fe:c4:40:73:39:1b:7b:cd:a2:97:13:
                    08:1f:ed:7e:32:53:2d:c7:59:02:3f:8c:30:aa:8b:
                    ba:b2:66:3b:71:1d:af:6a:a3:7b:25:47:7b:5d:44:
                    43:02:60:d1:d8:12:0b:72:d4:4b:72:5c:37:04:85:
                    65:7e:7e:0c:27:f9:b4:1a:33:35:7e:88:4e:c3:1f:
                    bf:16:7f:38:7b:15:91:d9:4f:56:86:62:9a:08:57:
                    cf:34:9d:99:aa:7d:ad:b0:34:b0:a1:06:cf:26:eb:
                    f6:b9:ca:34:59:01:05:2d:62:3f:d8:0a:c3:97:14:
                    11:70:b0:bb:c4:46:44:aa:65:bd:3c:e7:f7:84:38:
                    42:52:33:16:08:23:1e:0e:c0:af:96:a6:4e:a3:46:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9E:7D:88:C6:E1:6E:F4:DF:74:3C:7B:CE:6E:58:69:45:E0:35:4C
            X509v3 Authority Key Identifier:
                keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e36372e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.202.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:17:88:ee:14:fe:1d:c5:9f:71:c2:7d:aa:77:d1:fc:9b:da:
         a7:e0:c8:bf:2c:2b:44:db:3c:9a:08:65:d5:05:3b:38:fb:1a:
         2c:13:dd:e9:11:14:b6:53:67:c6:b3:12:46:96:7b:72:74:5d:
         9f:21:91:9e:43:3d:7b:0a:68:7b:ab:29:0d:71:df:e9:a4:dc:
         92:49:a1:ef:e8:7f:d1:c5:bb:48:8c:e9:53:6c:f7:2b:98:2d:
         6d:20:d9:df:02:a6:17:07:c3:44:e8:2f:63:03:b2:0f:29:7c:
         f3:49:68:95:c3:fb:43:22:2a:3f:7a:55:a8:0a:7f:d0:2d:2f:
         52:94:a8:72:8c:79:92:b5:e3:69:41:2a:97:0b:b6:dc:f1:fe:
         3e:f0:2d:30:22:41:04:4d:27:4a:d0:db:97:f6:7d:69:b5:8b:
         8e:4f:80:15:48:51:ed:11:6c:ab:84:fc:87:28:1c:21:d7:90:
         50:4c:8b:46:5b:b4:4d:c4:61:22:a5:21:61:60:cc:73:30:43:
         e6:0d:8e:96:2b:63:13:9a:e3:d6:28:52:12:08:e7:b5:31:83:
         00:94:68:6b:16:52:b1:d5:9a:e1:24:ac:7b:54:77:d1:90:1a:
         93:58:bf:04:8e:88:23:81:5e:d3:96:54:fc:7b:5a:a9:77:e5:
         23:4b:34:4e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUG48vfDKJOobphfJquHIvMdQOBD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC
NUYxOTU1MTAeFw0yNjA1MTkwNTMxMzlaFw0yNzA1MTgwNTM2MzlaMDMxMTAvBgNV
BAMTKENDOUU3RDg4QzZFMTZFRjRERjc0M0M3QkNFNkU1ODY5NDVFMDM1NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiXYtdMEEZxqdiH+AMkVstsTxH
4d/zT5lNYtjtX2Ds7Dwen2HHJpSCMCSqHm5LqlIgEMDmdCgp2T/TOExu/OpQeg1Q
g5VSMjHYcm/ujFIfmeCXln0otcnFyrcXdXIHAVkPE2csKkXTM3X3AWL+xEBzORt7
zaKXEwgf7X4yUy3HWQI/jDCqi7qyZjtxHa9qo3slR3tdREMCYNHYEgty1EtyXDcE
hWV+fgwn+bQaMzV+iE7DH78Wfzh7FZHZT1aGYpoIV880nZmqfa2wNLChBs8m6/a5
yjRZAQUtYj/YCsOXFBFwsLvERkSqZb085/eEOEJSMxYIIx4OwK+Wpk6jRmJfAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUzJ59iMbhbvTfdDx7zm5YaUXgNUwwHwYDVR0j
BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF
NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3MDU1Mzk2MDQxODUwODgxLzAvMzIzMjMzMmUzMjMw
MzIyZTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAN/KQzANBgkqhkiG9w0BAQsFAAOCAQEAIxeI7hT+HcWfccJ9qnfR/Jvap+DI
vywrRNs8mghl1QU7OPsaLBPd6REUtlNnxrMSRpZ7cnRdnyGRnkM9ewpoe6spDXHf
6aTckkmh7+h/0cW7SIzpU2z3K5gtbSDZ3wKmFwfDROgvYwOyDyl880lolcP7QyIq
P3pVqAp/0C0vUpSocox5krXjaUEqlwu23PH+PvAtMCJBBE0nStDbl/Z9abWLjk+A
FUhR7RFsq4T8hygcIdeQUEyLRlu0TcRhIqUhYWDMczBD5g2OlitjE5rj1ihSEgjn
tTGDAJRoaxZSsdWa4SSse1R30ZAak1i/BI6II4Fe05ZU/HtaqXflI0s0Tg==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:45 2026 by rpki-client