Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36352e302f32342d3234203d3e203130323132.roa
File:                     3231382e39362e36352e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier:          wbipUMV9osFX/M86Uz8s4ib9sKyaotgghQnglHzSN9k=
Subject key identifier:   8D:82:49:CF:FF:66:EC:0A:7C:CA:B9:D2:07:F7:7D:4A:2E:D1:F5:16
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       2C4882F20E8A38076C2687416F56F33F881204B4
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36352e302f32342d3234203d3e203130323132.roa
Signing time:             Mon 27 Apr 2026 08:55:31 +0000
ROA not before:           Mon 27 Apr 2026 08:50:31 +0000
ROA not after:            Mon 26 Apr 2027 08:55:31 +0000
asID:                     10212
IP address blocks:        218.96.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 09:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:48:82:f2:0e:8a:38:07:6c:26:87:41:6f:56:f3:3f:88:12:04:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 27 08:50:31 2026 GMT
            Not After : Apr 26 08:55:31 2027 GMT
        Subject: CN=8D8249CFFF66EC0A7CCAB9D207F77D4A2ED1F516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:21:96:53:83:0d:6d:6b:eb:a1:53:29:5e:49:
                    e1:00:02:58:a5:6b:f3:cb:35:ba:af:27:eb:37:8b:
                    7b:94:f2:e5:d1:89:d8:f6:b1:96:5f:ab:7a:31:bc:
                    ce:5a:42:a4:77:62:2a:59:1b:35:15:d4:e5:43:2a:
                    7b:08:03:e5:b4:14:9d:26:0d:fa:00:0d:f0:9a:21:
                    51:cb:5c:e9:da:47:8b:7a:64:0d:03:64:94:5b:3e:
                    7b:64:f7:d5:bc:b2:cc:0e:b5:08:32:a2:79:40:b2:
                    2a:01:71:77:ae:cd:d7:23:d6:63:a9:ee:6d:6c:ab:
                    cc:9d:96:f9:36:5c:d9:62:4f:43:2c:d2:e1:ab:4c:
                    31:58:42:ac:5a:1e:0b:76:62:7e:38:9c:30:5e:f0:
                    e9:a2:d4:5a:87:9f:88:4d:71:31:62:f4:65:84:3e:
                    62:69:ff:d4:cd:e6:15:15:de:9a:d0:21:53:97:97:
                    2a:8d:a9:89:65:47:1d:a4:e9:04:4c:5f:86:0c:a6:
                    9c:18:ca:14:d0:2a:9b:bb:7e:94:9d:0c:cc:c1:21:
                    fa:63:89:29:0f:d7:b5:37:4e:70:bb:b3:10:99:24:
                    1a:c8:68:66:17:c0:b8:91:43:cd:00:8a:79:db:94:
                    8b:86:6c:18:7a:58:d5:08:a4:5c:99:4d:22:95:dc:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:82:49:CF:FF:66:EC:0A:7C:CA:B9:D2:07:F7:7D:4A:2E:D1:F5:16
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e36352e302f32342d3234203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.96.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:bc:90:8b:32:2e:dc:14:4d:c2:38:f7:81:3d:0c:a0:54:30:
         46:d3:3d:20:1f:8e:97:9f:4e:e1:39:69:57:23:43:0e:23:d8:
         82:9c:6b:b4:78:7c:3c:ee:6f:95:7b:8c:21:a4:7a:3f:a5:26:
         22:d0:fd:a8:45:e9:25:b5:b2:bb:5b:13:f6:19:db:c9:f7:58:
         84:01:15:1a:9a:75:c5:65:b3:81:64:ce:a6:bf:71:7a:df:ce:
         c8:3d:61:fa:62:dd:08:28:73:12:be:50:55:f5:05:7b:7f:0f:
         43:d3:83:c1:9b:9b:7c:6d:45:52:b4:1f:22:13:5e:da:b4:c8:
         70:6e:40:9b:bc:82:51:57:fd:b4:bf:6a:30:34:99:cb:52:c9:
         09:5f:59:eb:4b:b2:a5:60:eb:29:f3:b3:da:84:e7:80:26:de:
         63:7f:c5:01:14:3d:bc:0a:09:72:89:5c:02:23:5c:1e:c4:9d:
         dc:35:cd:ad:aa:3c:83:55:b4:78:d3:14:7c:d6:5d:4e:3f:f9:
         b8:e2:5c:60:24:3c:9d:ee:8c:6a:31:d7:70:71:20:23:b3:eb:
         6a:91:1e:4e:b5:4d:c4:a1:55:8e:04:77:48:bb:55:85:ca:21:
         08:b6:a3:47:97:b6:ad:17:7c:81:c0:71:cf:02:a9:a1:70:66:
         af:10:91:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:23:10 2026 by rpki-client