Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3234312e302f32342d3234203d3e203130323132.roa
File:                     3231382e39362e3234312e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier:          hXUOxx1KcgwPYsSY4RhopykzrMle+hdBfEvHZTrTpHE=
Subject key identifier:   92:D1:11:BB:A7:89:1D:5A:B2:82:38:7D:A8:01:0B:59:F1:1D:99:CE
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       47321D0AF43845B9B127BE9288F34A71AC74607B
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3234312e302f32342d3234203d3e203130323132.roa
Signing time:             Mon 27 Apr 2026 02:41:50 +0000
ROA not before:           Mon 27 Apr 2026 02:36:50 +0000
ROA not after:            Mon 26 Apr 2027 02:41:50 +0000
asID:                     10212
IP address blocks:        218.96.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 09:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:32:1d:0a:f4:38:45:b9:b1:27:be:92:88:f3:4a:71:ac:74:60:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 27 02:36:50 2026 GMT
            Not After : Apr 26 02:41:50 2027 GMT
        Subject: CN=92D111BBA7891D5AB282387DA8010B59F11D99CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:5a:8c:b9:30:91:fb:52:11:03:92:ff:5d:
                    66:e4:7d:c2:a9:29:4a:18:8f:22:41:e1:ee:5e:00:
                    9f:39:4e:2d:b5:1c:f7:35:96:6a:65:ba:b9:b9:e5:
                    24:9f:f0:b1:6b:d1:9a:e1:e8:d9:ad:3c:f1:8c:46:
                    2c:00:2a:c7:66:aa:1c:76:a1:41:8c:11:b8:ec:30:
                    6d:d2:3d:8b:3a:f0:67:7c:42:ab:1f:23:14:40:a8:
                    06:22:2c:b5:26:cd:6c:b0:7f:85:08:8c:f0:85:88:
                    1f:f8:55:64:c0:be:a7:41:f8:4a:a8:d7:e3:71:bc:
                    7e:d1:38:2c:bd:7e:6f:a5:91:1e:5a:16:67:13:70:
                    98:98:0c:52:a4:bc:aa:5d:e6:07:9e:bd:9a:0d:af:
                    57:28:ad:05:39:2a:f0:bd:87:98:47:6d:d6:de:8a:
                    61:b7:3a:30:89:79:de:36:e8:30:bd:99:f3:52:fb:
                    62:9d:24:84:f2:e3:db:3e:48:a9:f5:75:21:87:2c:
                    e0:3a:bc:9e:47:d7:79:3e:98:01:33:7b:0e:c8:18:
                    26:6f:21:02:3f:f8:e6:d6:ca:6f:44:3d:32:30:e3:
                    3f:c0:e5:04:20:6a:77:bf:55:28:08:3a:bf:78:d0:
                    6c:a8:7e:23:87:e9:45:6d:94:83:94:d9:d9:f8:9e:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D1:11:BB:A7:89:1D:5A:B2:82:38:7D:A8:01:0B:59:F1:1D:99:CE
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e3234312e302f32342d3234203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.96.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:0d:13:f0:64:1f:d2:f1:d3:14:13:90:8a:46:5b:c3:94:ea:
         d8:72:95:6a:da:ec:86:4f:6d:a4:47:0a:c5:e9:ec:c4:23:0e:
         55:cd:78:e5:35:fa:e7:32:3b:58:6c:79:34:ec:03:df:df:4e:
         fc:96:56:fc:5c:97:b2:52:90:b9:7e:85:1e:8f:d2:73:2a:ac:
         75:a4:65:88:f8:1b:52:f0:86:75:fe:d6:04:64:f1:76:17:f4:
         9d:74:ad:c2:20:14:3b:37:1a:12:11:28:8e:e3:b9:19:91:eb:
         47:10:27:99:ab:c6:87:21:72:38:f2:23:3c:39:9f:99:6b:cc:
         d7:23:70:3b:f4:d2:0a:4a:ef:c7:cd:7e:db:15:aa:f0:4e:21:
         a8:f8:00:84:3e:de:10:cb:d0:90:ef:3d:bc:3e:b7:31:8f:8f:
         66:b2:c6:e7:5e:ab:c9:ed:aa:4a:4a:26:bb:c0:bc:a1:4b:f2:
         00:c0:7c:f7:a7:90:0d:64:44:71:af:7d:ab:6f:6c:21:c4:cc:
         1c:59:56:a8:b4:2c:87:6c:c8:26:62:9e:89:9e:78:45:ce:ed:
         fd:2b:a6:cd:68:70:2e:dd:b7:06:d0:7e:5d:bf:0c:56:f7:cc:
         72:c3:84:4d:2c:a9:2d:69:ea:39:b4:51:85:86:b2:a9:40:9d:
         33:5d:ec:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:02:11 2026 by rpki-client