Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313331343833.roa
File:                     3130332e3138332e3132322e302f32332d3234203d3e20313331343833.roa (raw, json)
Hash identifier:          rylyJQqhEGDA9Bb2EvxEdp2rNUnwltCby6h+0t4UfH4=
Subject key identifier:   34:92:AA:C3:AF:8F:D7:74:86:63:B5:DB:3D:B3:D7:44:C1:A7:85:75
Certificate issuer:       /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial:       4D8B82C212A5DE4F007AE135C62E5B79F302D68A
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313331343833.roa
Signing time:             Mon 20 Apr 2026 09:10:50 +0000
ROA not before:           Mon 20 Apr 2026 09:05:50 +0000
ROA not after:            Mon 19 Apr 2027 09:10:50 +0000
asID:                     131483
IP address blocks:        103.183.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8b:82:c2:12:a5:de:4f:00:7a:e1:35:c6:2e:5b:79:f3:02:d6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
        Validity
            Not Before: Apr 20 09:05:50 2026 GMT
            Not After : Apr 19 09:10:50 2027 GMT
        Subject: CN=3492AAC3AF8FD7748663B5DB3DB3D744C1A78575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6b:f3:8e:69:bd:a1:9b:80:2d:b0:e6:d9:79:
                    de:cb:f5:85:a3:04:f6:08:21:f1:50:2f:59:87:3a:
                    e7:26:f8:55:be:d1:f7:02:ca:9e:5a:f4:1a:ee:10:
                    35:25:83:e5:72:0c:a5:a6:9a:bf:f3:f5:6f:47:21:
                    cb:c9:0a:8d:b2:3e:58:73:f4:ac:d2:67:6b:b5:c6:
                    a2:f5:69:5a:a6:72:13:b1:8d:c7:4f:2f:27:90:8c:
                    78:9a:2c:97:45:10:82:50:3e:a0:7f:71:50:9e:52:
                    81:ee:ef:21:45:60:06:74:be:b7:b9:14:6b:1c:a2:
                    b8:b0:15:be:8b:43:a5:7c:ff:32:86:a1:4e:75:f7:
                    21:c7:e2:c0:34:f3:7a:6d:c5:96:43:d0:1f:44:09:
                    d4:3f:f0:d1:13:f5:53:47:79:23:c8:a6:41:70:6a:
                    2a:ce:f1:b5:48:19:0e:19:20:a8:a6:bb:fc:b6:16:
                    ec:51:a7:a9:62:33:eb:8b:00:f0:8e:fc:69:23:2d:
                    a7:f3:ee:dd:5c:5d:d5:8f:9c:d6:dc:2c:20:1a:4c:
                    38:98:4b:99:ad:9e:09:3c:f3:8d:a0:c1:b2:04:22:
                    49:a9:26:d9:eb:e5:93:c3:6a:2d:ac:2b:01:9e:bd:
                    ee:b2:1e:7e:7a:1f:46:38:2f:ba:03:13:a2:bd:6d:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:92:AA:C3:AF:8F:D7:74:86:63:B5:DB:3D:B3:D7:44:C1:A7:85:75
            X509v3 Authority Key Identifier:
                keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313331343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:76:63:fb:e3:c4:26:8d:ae:22:ad:bd:6f:55:ed:9f:08:7d:
         2d:85:f0:21:23:32:35:e1:26:a8:40:5c:dd:b1:9e:5f:36:50:
         45:8e:46:7e:d2:53:17:d3:88:31:a9:71:08:aa:f4:b0:1f:56:
         ab:d7:ef:b3:ef:e9:e9:3c:67:cf:23:30:f9:2f:36:fe:18:b6:
         00:2d:0d:de:32:cc:49:3c:1f:23:c3:1a:31:9e:3d:ab:5b:f3:
         ae:28:4d:61:5a:57:ed:e3:d3:86:e7:12:94:d1:29:3b:f4:73:
         5c:8b:d4:dc:be:50:a1:d0:b3:b6:dd:89:ea:26:30:34:af:a3:
         24:fa:11:3d:76:6a:b9:2e:d2:4e:78:1b:29:7c:1b:3d:52:a2:
         d8:cf:d2:60:7d:20:50:d3:77:54:26:6f:40:e0:fb:1f:a8:f4:
         f0:09:0d:54:49:7f:97:94:47:33:b5:b0:40:a0:dd:80:ef:b0:
         61:bf:2c:4e:d7:f6:5d:9e:49:85:f7:47:a4:f9:7f:fb:35:93:
         7c:05:05:ff:06:3c:c1:4b:e4:09:64:6b:34:bd:94:df:1e:23:
         82:d8:3c:1a:13:6f:fa:8a:96:37:a9:26:2e:77:ad:3b:7b:25:
         db:5a:dc:d5:9e:45:be:b4:5a:20:a9:c3:5b:62:54:40:ff:c4:
         3f:0c:db:bb
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUTYuCwhKl3k8AeuE1xi5befMC1oowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB
QjhGQ0IwQjAeFw0yNjA0MjAwOTA1NTBaFw0yNzA0MTkwOTEwNTBaMDMxMTAvBgNV
BAMTKDM0OTJBQUMzQUY4RkQ3NzQ4NjYzQjVEQjNEQjNENzQ0QzFBNzg1NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKa/OOab2hm4AtsObZed7L9YWj
BPYIIfFQL1mHOucm+FW+0fcCyp5a9BruEDUlg+VyDKWmmr/z9W9HIcvJCo2yPlhz
9KzSZ2u1xqL1aVqmchOxjcdPLyeQjHiaLJdFEIJQPqB/cVCeUoHu7yFFYAZ0vre5
FGscoriwFb6LQ6V8/zKGoU519yHH4sA083ptxZZD0B9ECdQ/8NET9VNHeSPIpkFw
airO8bVIGQ4ZIKimu/y2FuxRp6liM+uLAPCO/GkjLafz7t1cXdWPnNbcLCAaTDiY
S5mtngk8842gwbIEIkmpJtnr5ZPDai2sKwGeve6yHn56H0Y4L7oDE6K9bfrhAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUNJKqw6+P13SGY7XbPbPXRMGnhXUwHwYDVR0j
BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1
MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzEzMDMzMmUz
MTM4MzMyZTMxMzIzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMTM0Mzgz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWe3ejANBgkqhkiG9w0BAQsFAAOCAQEAbHZj++PEJo2uIq29
b1Xtnwh9LYXwISMyNeEmqEBc3bGeXzZQRY5GftJTF9OIMalxCKr0sB9Wq9fvs+/p
6TxnzyMw+S82/hi2AC0N3jLMSTwfI8MaMZ49q1vzrihNYVpX7ePThucSlNEpO/Rz
XIvU3L5QodCztt2J6iYwNK+jJPoRPXZquS7STngbKXwbPVKi2M/SYH0gUNN3VCZv
QOD7H6j08AkNVEl/l5RHM7WwQKDdgO+wYb8sTtf2XZ5JhfdHpPl/+zWTfAUF/wY8
wUvkCWRrNL2U3x4jgtg8GhNv+oqWN6kmLnetO3sl21rc1Z5FvrRaIKnDW2JUQP/E
Pwzbuw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:05:10 2026 by rpki-client