Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e31342e302f32342d3234203d3e203130323132.roa
File:                     3231382e39372e31342e302f32342d3234203d3e203130323132.roa (raw, json)
Hash identifier:          hXVVwBG1u3t4glQy0IUdMWoeg4XIfu+VLJC8+jhWQCI=
Subject key identifier:   1E:54:F3:74:65:30:E2:B6:45:5B:EB:B2:87:F1:E4:CC:84:E7:B5:6F
Certificate issuer:       /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
Certificate serial:       049884DF4F8024963F7B4E450BAEACB70A5A7DB8
Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e31342e302f32342d3234203d3e203130323132.roa
Signing time:             Mon 27 Apr 2026 02:22:23 +0000
ROA not before:           Mon 27 Apr 2026 02:17:23 +0000
ROA not after:            Mon 26 Apr 2027 02:22:23 +0000
asID:                     10212
IP address blocks:        218.97.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 09:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:98:84:df:4f:80:24:96:3f:7b:4e:45:0b:ae:ac:b7:0a:5a:7d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF
        Validity
            Not Before: Apr 27 02:17:23 2026 GMT
            Not After : Apr 26 02:22:23 2027 GMT
        Subject: CN=1E54F3746530E2B6455BEBB287F1E4CC84E7B56F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c8:3e:70:07:99:4f:bd:92:a4:d8:59:24:b0:
                    02:f2:38:39:c9:82:56:3f:c9:9c:65:25:6f:fa:db:
                    0c:0c:de:4b:f5:76:ac:9f:38:e6:3d:02:30:38:75:
                    7f:48:c0:92:91:93:86:06:2a:4c:dc:55:da:48:22:
                    a3:e2:16:5d:a8:7b:9a:30:02:e9:41:fe:d5:38:79:
                    88:ea:01:f7:47:e0:f1:7b:27:57:77:bf:98:e2:16:
                    bf:26:d1:20:6e:d3:3c:6a:30:ab:e8:df:7e:72:c8:
                    28:7d:31:72:dd:fc:d3:9d:97:06:60:7d:77:53:37:
                    bf:82:65:6d:a9:f5:bd:61:24:8a:68:02:e6:57:f0:
                    32:57:c8:61:3f:10:c8:bf:bb:7f:66:67:26:44:91:
                    29:aa:4b:23:79:d0:01:20:3e:f8:26:c6:e0:77:64:
                    f9:d1:c4:7e:af:c4:4b:32:a6:45:3f:62:31:f1:21:
                    35:75:f9:46:83:f0:70:3d:f8:47:66:0f:91:aa:7d:
                    bb:65:9a:ba:c3:55:5b:87:0b:3c:79:57:9e:a8:4c:
                    73:ae:37:31:43:2f:3d:a7:f4:91:7b:7f:7b:a6:12:
                    3b:32:de:21:53:b0:fd:8a:da:09:35:73:9f:e4:f4:
                    52:45:0e:12:f0:7d:60:36:e6:64:12:75:f9:35:fc:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:54:F3:74:65:30:E2:B6:45:5B:EB:B2:87:F1:E4:CC:84:E7:B5:6F
            X509v3 Authority Key Identifier:
                keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/3231382e39372e31342e302f32342d3234203d3e203130323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.97.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:cc:03:a1:ae:36:29:31:25:78:bf:4c:37:ab:36:ab:54:77:
         e7:43:76:dd:d9:c0:31:2a:c1:dd:90:8a:c0:ad:86:9b:d4:c1:
         a9:7f:f5:65:57:7e:d6:11:35:bb:0b:cf:7f:50:43:e7:4c:21:
         b3:7c:43:2b:3a:7d:62:8c:ba:ac:53:bc:01:ad:95:59:d9:9e:
         6a:8b:a8:47:98:e2:cb:ca:7e:a2:29:03:b1:61:89:bf:e2:28:
         c5:92:82:60:a5:d1:9e:9e:05:35:b8:a6:f5:5e:c8:23:ad:be:
         b0:46:b1:6b:fc:46:c8:6d:98:70:4f:95:2e:54:bd:a6:35:70:
         35:85:de:19:1f:dc:e9:81:59:f1:70:5d:12:e8:76:0c:49:6b:
         3d:23:58:79:c4:61:af:46:e0:d7:bf:51:e9:49:9f:f7:26:79:
         71:02:59:d6:4f:ca:55:ac:2f:d3:ae:9b:0e:12:d0:bb:26:15:
         61:f1:33:08:f4:c1:bd:a0:a2:f2:ee:68:4e:0d:2f:d2:bf:b5:
         df:40:e3:f3:a0:7a:2d:ea:f3:06:29:18:f5:23:43:be:ca:f7:
         1f:02:38:70:5d:ea:4c:57:8c:2e:ff:ba:57:20:38:f6:de:72:
         0f:1b:2e:f0:bd:ff:30:08:f0:1b:c2:36:27:e2:f9:e2:90:6a:
         ff:2a:ef:02
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUBJiE30+AJJY/e05FC66stwpafbgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx
NkYzQTdFRjAeFw0yNjA0MjcwMjE3MjNaFw0yNzA0MjYwMjIyMjNaMDMxMTAvBgNV
BAMTKDFFNTRGMzc0NjUzMEUyQjY0NTVCRUJCMjg3RjFFNENDODRFN0I1NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTyD5wB5lPvZKk2FkksALyODnJ
glY/yZxlJW/62wwM3kv1dqyfOOY9AjA4dX9IwJKRk4YGKkzcVdpIIqPiFl2oe5ow
AulB/tU4eYjqAfdH4PF7J1d3v5jiFr8m0SBu0zxqMKvo335yyCh9MXLd/NOdlwZg
fXdTN7+CZW2p9b1hJIpoAuZX8DJXyGE/EMi/u39mZyZEkSmqSyN50AEgPvgmxuB3
ZPnRxH6vxEsypkU/YjHxITV1+UaD8HA9+EdmD5GqfbtlmrrDVVuHCzx5V56oTHOu
NzFDLz2n9JF7f3umEjsy3iFTsP2K2gk1c5/k9FJFDhLwfWA25mQSdfk1/K9ZAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUHlTzdGUw4rZFW+uyh/HkzITntW8wHwYDVR0j
BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5
QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzMTM4MmUzOTM3
MmUzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzEzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANphDjANBgkqhkiG9w0BAQsFAAOCAQEAsMwDoa42KTEleL9MN6s2q1R350N2
3dnAMSrB3ZCKwK2Gm9TBqX/1ZVd+1hE1uwvPf1BD50whs3xDKzp9Yoy6rFO8Aa2V
WdmeaouoR5jiy8p+oikDsWGJv+IoxZKCYKXRnp4FNbim9V7II62+sEaxa/xGyG2Y
cE+VLlS9pjVwNYXeGR/c6YFZ8XBdEuh2DElrPSNYecRhr0bg179R6Umf9yZ5cQJZ
1k/KVawv066bDhLQuyYVYfEzCPTBvaCi8u5oTg0v0r+130Dj86B6LerzBikY9SND
vsr3HwI4cF3qTFeMLv+6VyA49t5yDxsu8L3/MAjwG8I2J+L54pBq/yrvAg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:00:48 2026 by rpki-client