Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e37312e302f32342d3234203d3e203130323132.roa
File:                     3231382e39362e37312e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier:          91zSHy2GJJEvKtRXcbt3ViJMMUW2C0Xfrmbd3Ap8a50=
Subject key identifier:   9D:83:98:0A:DB:A5:57:08:09:7F:48:31:46:7C:CD:76:E2:08:94:3F
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       489B5F16A7B088F6CB7DB2D68479548FD37E94EF
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e37312e302f32342d3234203d3e203130323132.roa
Signing time:             Tue 27 Oct 2026 07:45:49 +0000
ROA not before:           Tue 27 Oct 2026 07:40:49 +0000
ROA not after:            Tue 26 Oct 2027 07:45:49 +0000
asID:                     10212
IP address blocks:        218.96.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 00:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9b:5f:16:a7:b0:88:f6:cb:7d:b2:d6:84:79:54:8f:d3:7e:94:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Oct 27 07:40:49 2026 GMT
            Not After : Oct 26 07:45:49 2027 GMT
        Subject: CN=9D83980ADBA55708097F4831467CCD76E208943F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:37:27:9a:da:af:92:fc:ca:37:fa:3b:fa:
                    70:12:73:97:8a:5d:d4:56:97:58:ea:cb:d7:de:fb:
                    0c:e0:b8:96:1f:c8:b0:0c:5e:47:bb:0e:43:11:ad:
                    eb:e2:fe:4a:09:af:01:c1:e5:ed:9d:f4:ab:55:90:
                    07:7c:26:c8:94:69:3f:0c:08:d7:43:cc:c8:f9:dc:
                    46:da:c9:50:8c:0b:e8:36:04:21:47:b5:a5:0c:48:
                    04:d5:ca:2e:4c:f9:cf:13:34:85:ae:85:8e:db:90:
                    27:3f:7f:fa:fd:62:d3:d5:ad:66:85:be:86:18:ba:
                    6f:0a:c1:8f:08:48:48:7f:69:f3:95:9c:08:24:16:
                    af:eb:52:4c:b9:fb:3c:c7:63:57:6a:3d:f5:a9:41:
                    90:ce:cd:56:4b:d3:4a:98:91:ca:c7:59:0d:90:d2:
                    d3:95:cd:2d:2f:b5:37:6a:29:ff:ba:f7:70:4e:e9:
                    a8:b0:f8:f0:c9:29:ea:dc:e3:49:81:2c:dd:34:4e:
                    ad:93:ba:a5:63:55:bf:b9:e3:d0:3f:eb:f4:51:3c:
                    4a:76:29:b4:13:fd:47:3b:26:ea:bb:22:75:46:35:
                    a4:fa:c8:24:17:88:20:5a:c3:39:01:b7:50:a5:65:
                    70:ef:30:4d:cf:2f:f9:3f:de:18:83:65:55:6c:eb:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:83:98:0A:DB:A5:57:08:09:7F:48:31:46:7C:CD:76:E2:08:94:3F
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39362e37312e302f32342d3234203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.96.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:be:11:4b:b2:3b:0c:8f:e1:a3:0c:e6:6d:a6:7a:b6:42:dd:
         05:f8:70:a1:0f:71:80:60:63:c0:89:d0:ce:7f:5b:fc:c9:ee:
         2d:90:96:6f:38:83:3d:04:cc:52:16:1e:fd:09:35:2f:31:6f:
         cb:b0:18:09:0f:b1:1a:11:75:80:68:06:35:1e:f7:30:d4:48:
         4c:94:2f:83:89:ca:e6:48:4e:21:27:af:e7:64:aa:b1:2e:82:
         8c:70:34:50:32:b3:6b:7d:47:6c:fd:98:c6:df:21:b1:ea:8e:
         e1:26:1f:73:bf:22:b4:20:11:f5:16:ab:d8:14:1f:52:b2:30:
         8d:32:74:b8:a1:9c:86:56:1b:63:f3:29:f4:98:48:87:b6:f1:
         36:c4:fb:55:d4:37:fb:e4:60:c7:cc:b6:54:90:1d:a6:a7:ac:
         f9:67:7b:b4:20:be:0f:5d:10:cb:49:25:e7:7a:d1:9f:85:68:
         3c:5c:1a:c4:e4:fc:d5:77:39:e3:20:eb:4e:d4:63:d0:90:08:
         f1:89:11:e3:93:62:70:ab:37:2d:b6:e9:19:18:ec:e6:36:57:
         b5:1b:6a:e1:1c:cd:14:9a:74:92:55:50:ce:08:1f:ae:0f:d4:
         cb:18:b1:af:29:69:34:b5:98:41:db:8d:5f:8d:b3:26:56:13:
         c8:b4:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:20:31 2026 by rpki-client