Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e2034383337.roa
File:                     3130332e3138332e3132342e302f32332d3234203d3e2034383337.roa (raw, json)
Hash identifier:          0QCJo6dKTKVOvLBGSboL5oDjVKJpu+Vz/EwgNf9cfWA=
Subject key identifier:   5A:52:E9:13:78:0D:A5:5A:98:D7:9F:D9:57:10:9E:99:43:5D:0C:6D
Certificate issuer:       /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial:       5F7264B8DE980D45AEFF8F8B1818BFF1958D3AE3
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e2034383337.roa
Signing time:             Mon 20 Apr 2026 06:53:03 +0000
ROA not before:           Mon 20 Apr 2026 06:48:03 +0000
ROA not after:            Mon 19 Apr 2027 06:53:03 +0000
asID:                     4837
IP address blocks:        103.183.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:72:64:b8:de:98:0d:45:ae:ff:8f:8b:18:18:bf:f1:95:8d:3a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
        Validity
            Not Before: Apr 20 06:48:03 2026 GMT
            Not After : Apr 19 06:53:03 2027 GMT
        Subject: CN=5A52E913780DA55A98D79FD957109E99435D0C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:93:b6:aa:3e:f2:09:4b:94:00:0d:a9:1b:eb:
                    34:d3:8d:00:3c:05:71:1b:b5:96:12:c9:b7:38:98:
                    d7:9d:43:e5:db:0b:ed:a4:18:e4:3c:c1:80:27:d4:
                    94:5c:96:03:d6:f0:77:09:d6:2c:8c:a4:72:32:9a:
                    07:12:33:8a:d8:52:1a:af:5e:44:5b:bd:4f:a3:6f:
                    37:2c:5d:0a:a0:15:19:77:90:07:ef:5d:35:1c:b9:
                    62:d7:76:6e:dd:22:ac:e1:22:1a:8c:c8:13:a2:8c:
                    0e:0f:97:df:6d:d2:6b:19:b4:35:67:2d:fa:cc:a8:
                    c7:f8:3e:c9:24:e2:b4:d1:78:72:a0:5f:4e:4b:eb:
                    04:40:aa:b0:c3:5c:f5:78:84:23:61:e7:7b:01:90:
                    71:b7:b4:fa:49:52:0c:2f:66:00:7c:b2:e1:2a:2c:
                    78:3f:02:a7:d0:78:98:b5:2f:30:f6:87:5a:bc:c0:
                    e9:d1:da:43:97:1f:d3:df:51:ef:a6:1a:dd:53:09:
                    15:fe:bc:cf:3e:73:59:2a:89:34:48:f6:f2:2f:60:
                    89:de:ea:35:c2:42:96:14:64:55:ac:65:c9:ff:0c:
                    43:f6:e4:08:32:b7:2e:b0:44:58:eb:09:5d:86:43:
                    65:91:f4:89:69:52:16:b7:df:88:71:cd:a5:c8:7c:
                    a1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:52:E9:13:78:0D:A5:5A:98:D7:9F:D9:57:10:9E:99:43:5D:0C:6D
            X509v3 Authority Key Identifier:
                keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:6c:e4:e5:5c:04:b1:05:ab:39:4f:7b:ae:10:92:4a:df:
         2d:e1:5d:68:a2:a8:25:5d:85:a1:a3:e8:e1:10:b7:0b:2d:3a:
         3d:80:d8:1e:6a:59:96:e0:a5:5c:d0:7a:6f:ee:d7:9f:e9:61:
         0f:89:24:f5:71:68:03:f7:45:8d:ca:5f:c4:a5:25:85:b3:b7:
         43:9f:46:85:f4:6e:28:5e:a3:8b:ec:bd:f8:58:4b:b9:49:43:
         67:f6:be:a8:88:29:96:14:4c:22:03:d1:67:bf:b9:23:48:6b:
         e8:d1:73:3e:e7:fb:a2:d0:fd:ac:c9:42:ca:66:35:b4:b7:44:
         24:e9:04:fa:1e:54:c4:de:8c:4a:6f:22:17:52:d4:ca:e2:4c:
         e2:02:bf:13:77:a8:3b:ed:0f:0d:cc:95:56:e8:b8:d8:73:68:
         50:bd:b2:67:a2:a3:61:16:8f:68:b5:85:de:5b:3c:68:e9:9d:
         8e:6d:9f:01:72:a7:8d:5b:31:86:2f:d5:dd:bd:c8:37:64:8d:
         54:ac:3b:bd:c3:cf:34:14:5b:83:0d:61:e5:60:fa:a0:77:a5:
         a0:54:f5:84:0a:37:96:da:c1:57:54:04:92:45:98:95:4c:10:
         60:ab:1a:24:53:04:36:d3:51:d1:d8:f5:a1:d0:74:67:c9:3c:
         4f:93:ad:6d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUX3JkuN6YDUWu/4+LGBi/8ZWNOuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB
QjhGQ0IwQjAeFw0yNjA0MjAwNjQ4MDNaFw0yNzA0MTkwNjUzMDNaMDMxMTAvBgNV
BAMTKDVBNTJFOTEzNzgwREE1NUE5OEQ3OUZEOTU3MTA5RTk5NDM1RDBDNkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbk7aqPvIJS5QADakb6zTTjQA8
BXEbtZYSybc4mNedQ+XbC+2kGOQ8wYAn1JRclgPW8HcJ1iyMpHIymgcSM4rYUhqv
XkRbvU+jbzcsXQqgFRl3kAfvXTUcuWLXdm7dIqzhIhqMyBOijA4Pl99t0msZtDVn
LfrMqMf4Pskk4rTReHKgX05L6wRAqrDDXPV4hCNh53sBkHG3tPpJUgwvZgB8suEq
LHg/AqfQeJi1LzD2h1q8wOnR2kOXH9PfUe+mGt1TCRX+vM8+c1kqiTRI9vIvYIne
6jXCQpYUZFWsZcn/DEP25Agyty6wRFjrCV2GQ2WR9IlpUha334hxzaXIfKElAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUWlLpE3gNpVqY15/ZVxCemUNdDG0wHwYDVR0j
BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1
MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzMxMzAzMzJlMzEz
ODMzMmUzMTMyMzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWe3fDANBgkqhkiG9w0BAQsFAAOCAQEAaa5s5OVcBLEFqzlPe64Qkkrf
LeFdaKKoJV2FoaPo4RC3Cy06PYDYHmpZluClXNB6b+7Xn+lhD4kk9XFoA/dFjcpf
xKUlhbO3Q59GhfRuKF6ji+y9+FhLuUlDZ/a+qIgplhRMIgPRZ7+5I0hr6NFzPuf7
otD9rMlCymY1tLdEJOkE+h5UxN6MSm8iF1LUyuJM4gK/E3eoO+0PDcyVVui42HNo
UL2yZ6KjYRaPaLWF3ls8aOmdjm2fAXKnjVsxhi/V3b3IN2SNVKw7vcPPNBRbgw1h
5WD6oHeloFT1hAo3ltrBV1QEkkWYlUwQYKsaJFMENtNR0dj1odB0Z8k8T5OtbQ==
-----END CERTIFICATE-----
Generated at Wed Apr 22 05:08:21 2026 by rpki-client