Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36342e302f32342d3234203d3e203130323132.roa
File:                     3231382e39362e36342e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier:          pJIG3J8mlof1YbnPmazwGdTZTnxXmLhj2AGIAHP5l5g=
Subject key identifier:   B6:73:3C:B0:1D:ED:0F:6E:32:9B:7D:FD:3C:22:63:9F:51:47:91:85
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       5F251DEFD16899215910ACDFEBD7AC75FB8D8C9D
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36342e302f32342d3234203d3e203130323132.roa
Signing time:             Mon 27 Apr 2026 08:55:31 +0000
ROA not before:           Mon 27 Apr 2026 08:50:31 +0000
ROA not after:            Mon 26 Apr 2027 08:55:31 +0000
asID:                     10212
IP address blocks:        218.96.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 09:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:25:1d:ef:d1:68:99:21:59:10:ac:df:eb:d7:ac:75:fb:8d:8c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 27 08:50:31 2026 GMT
            Not After : Apr 26 08:55:31 2027 GMT
        Subject: CN=B6733CB01DED0F6E329B7DFD3C22639F51479185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:f2:ba:71:a6:fa:1c:1c:aa:8e:36:3e:f8:
                    e7:0e:f4:dc:d0:c2:0b:28:13:84:4a:43:ca:3b:4f:
                    6d:ec:b6:5f:1e:aa:dd:c2:ca:8a:09:7c:cc:0a:57:
                    38:20:fd:64:1f:ba:12:84:64:74:23:eb:38:8c:bb:
                    e3:00:1b:6b:8a:b7:21:fc:fc:01:ee:bf:8b:14:38:
                    f2:d4:dd:ec:a0:96:d0:e1:ed:67:74:b5:96:13:98:
                    3a:cf:18:92:f4:39:b3:c6:55:86:af:5e:ce:e7:73:
                    35:c5:6d:a7:0c:fa:43:7a:33:fc:85:7a:68:87:ab:
                    00:33:b7:29:74:3f:46:a6:c2:80:c0:4e:0a:b4:bf:
                    95:76:bd:4e:0d:c1:21:de:e6:ba:fb:78:2b:42:d4:
                    79:79:52:f8:75:f4:94:b5:92:a1:e6:1c:27:92:98:
                    18:c1:25:e6:2e:46:9a:ba:b8:e5:b6:c5:bb:26:56:
                    e0:d9:89:5d:e8:93:9f:07:b1:a7:16:61:58:62:a0:
                    e3:bb:0e:ff:fc:37:fe:88:10:d2:7f:b2:2a:54:5b:
                    4f:7e:28:01:b2:27:99:7d:70:28:de:10:b0:4a:f4:
                    0c:95:0d:c9:10:19:1f:93:a6:83:e5:5f:62:a7:7f:
                    01:ee:07:00:23:7c:f5:67:0a:8c:8b:91:84:f7:ab:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:73:3C:B0:1D:ED:0F:6E:32:9B:7D:FD:3C:22:63:9F:51:47:91:85
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36342e302f32342d3234203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.96.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:5e:96:34:a2:c5:15:17:dc:3c:42:62:4f:0a:e1:f2:98:21:
         6b:3f:70:c0:c7:ef:3e:30:41:51:7c:41:78:63:0a:99:8e:2e:
         4b:86:9b:59:24:95:37:ff:6f:f5:41:bb:8f:20:3f:d9:d0:cb:
         12:6f:59:41:03:9a:a7:0d:83:86:08:d3:e4:77:f7:ab:bf:4a:
         54:5d:6a:1e:90:aa:ce:1d:21:1f:48:81:9b:dc:fc:85:83:4f:
         3d:09:7c:1b:60:0c:e9:7c:42:9f:3e:04:fc:71:c0:a4:97:e0:
         1a:64:67:cf:3b:ae:7f:64:d5:a4:9f:c6:f6:c7:28:3e:d6:86:
         eb:5f:d3:1b:d0:8c:ba:17:84:7e:2e:0e:aa:e1:72:98:7f:bb:
         99:95:88:fa:3b:48:25:0c:01:81:db:e7:83:d9:41:ef:80:2f:
         32:c3:99:98:5b:c0:5a:1f:65:ad:8b:35:19:b4:04:fa:7c:cf:
         8d:88:f2:f8:e2:fb:1f:8e:ed:b5:3c:05:13:df:25:d0:ef:a2:
         02:57:8a:cd:42:08:33:85:03:81:4c:83:a8:f8:ad:c1:2b:45:
         9d:91:cb:7c:de:cb:eb:77:21:5f:6a:da:09:48:1d:2d:6f:18:
         4f:18:71:b7:0a:09:bf:e4:f3:38:11:7a:32:72:d4:ed:8c:a5:
         07:76:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:23:10 2026 by rpki-client