Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e3130302e302f32342d3234203d3e2034383038.roa
File:                     3232332e3230332e3130302e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          fNb92duD/DNG8bi0URTOdh5PTkQL7siiRngUwP593Yk=
Subject key identifier:   C2:F5:4B:28:F3:D1:B7:9D:AB:87:B4:0F:E1:33:21:99:6F:46:1A:32
Certificate issuer:       /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial:       5FCE28AA7188A31321F61979FF542D6963A37AB2
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e3130302e302f32342d3234203d3e2034383038.roa
Signing time:             Tue 19 May 2026 02:29:56 +0000
ROA not before:           Tue 19 May 2026 02:24:56 +0000
ROA not after:            Tue 18 May 2027 02:29:56 +0000
asID:                     4808
IP address blocks:        223.203.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ce:28:aa:71:88:a3:13:21:f6:19:79:ff:54:2d:69:63:a3:7a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
        Validity
            Not Before: May 19 02:24:56 2026 GMT
            Not After : May 18 02:29:56 2027 GMT
        Subject: CN=C2F54B28F3D1B79DAB87B40FE13321996F461A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cb:78:e1:da:79:76:c6:fe:6c:ab:1c:5e:35:
                    9e:96:e8:d9:3f:d7:aa:8b:25:15:91:04:ab:1c:3e:
                    06:23:bd:a7:1e:fc:84:e9:70:56:97:96:4f:02:57:
                    18:09:c1:7c:7a:9c:cc:0e:3f:47:f8:c1:fb:2d:ae:
                    50:13:88:75:da:a3:fe:c1:24:e3:e7:23:46:57:30:
                    08:d5:dc:2c:6d:aa:00:95:b1:21:f2:01:74:63:19:
                    c2:f0:90:64:a9:52:27:58:47:6f:e9:ed:a8:14:53:
                    3d:99:71:52:f6:68:1d:f2:9f:64:60:37:72:96:73:
                    85:8a:d3:58:a1:2f:ea:8a:87:ca:41:3a:4f:23:e5:
                    c4:0a:ee:b3:db:a4:e2:e5:02:8b:6e:90:42:89:58:
                    71:52:81:dd:20:33:b0:7f:67:74:ec:5e:0f:21:fa:
                    7c:93:15:13:63:aa:a0:43:95:c8:a1:14:f2:8a:10:
                    fb:b6:ab:81:4a:e8:43:40:65:33:c4:f0:7b:2e:24:
                    db:8e:da:f2:9f:e8:7a:b1:d9:3a:40:a3:68:25:23:
                    f1:ed:a1:e0:5b:de:48:45:17:c2:f0:59:23:70:13:
                    9f:6a:12:cf:ff:62:11:3b:a5:c4:ee:fa:ff:0e:d1:
                    4c:1b:d3:b0:9a:90:3c:8f:c5:d7:f1:61:2c:cd:12:
                    4b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F5:4B:28:F3:D1:B7:9D:AB:87:B4:0F:E1:33:21:99:6F:46:1A:32
            X509v3 Authority Key Identifier:
                keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e3130302e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.203.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:de:a7:6b:3a:b8:66:c9:f4:ab:f1:fd:58:1d:48:95:21:d6:
         5e:57:65:4c:86:47:4b:04:b1:ff:80:11:69:54:aa:51:c3:68:
         0a:c7:48:ad:14:7e:40:34:aa:93:05:73:f2:21:fa:c9:3d:c6:
         42:92:75:da:02:d7:27:1c:1c:06:9b:a3:18:03:20:5f:06:91:
         22:0f:b5:b7:12:87:4d:f8:d2:fd:fd:61:f6:62:a3:cf:08:a1:
         58:ef:de:7e:95:f9:35:ae:0f:4a:6a:23:44:b8:7b:7b:66:36:
         41:53:8e:91:d5:12:bd:b9:0c:ce:95:ec:da:9a:b3:16:cd:9b:
         bd:09:87:d6:3b:e4:79:38:d3:0c:49:73:24:ad:84:ee:af:fd:
         22:61:97:db:06:61:63:15:27:1e:73:bf:fb:3d:6f:c9:ef:ab:
         c9:7d:4f:94:99:99:7a:e4:9c:d1:67:5b:92:29:c2:63:6f:70:
         16:2a:e9:62:f2:12:ed:78:81:a0:35:8b:78:48:6a:d1:6a:e4:
         1c:35:7a:94:ec:53:e7:1d:e4:c2:b6:07:3b:46:e8:87:8f:be:
         d7:02:be:fd:b2:81:19:d8:a1:44:31:0e:14:6b:bf:b3:d7:c2:
         04:78:e6:7d:c8:78:01:a9:49:65:dc:d2:64:e7:96:50:6f:70:
         f3:45:03:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:52:41 2026 by rpki-client