Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111882915819552787/0/3230332e37392e302e302f32302d3233203d3e2034383337.roa
File:                     3230332e37392e302e302f32302d3233203d3e2034383337.roa (raw, json)
Hash identifier:          iZk0qBKAsJdjY7IihKFZpnUxC226AAiytnSm3L2t6F8=
Subject key identifier:   0B:20:84:29:29:E2:C9:71:D2:25:7F:A6:4A:17:13:A0:D0:6A:AF:58
Certificate issuer:       /CN=CCB400245E6C2E159A469D4699195E08ECCE5250
Certificate serial:       596A948E5C632A3605E39A2EF3DA85EF6D89D178
Authority key identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/3230332e37392e302e302f32302d3233203d3e2034383337.roa
Signing time:             Mon 29 Jun 2026 08:54:30 +0000
ROA not before:           Mon 29 Jun 2026 08:49:30 +0000
ROA not after:            Mon 28 Jun 2027 08:54:30 +0000
asID:                     4837
IP address blocks:        203.79.0.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 10:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6a:94:8e:5c:63:2a:36:05:e3:9a:2e:f3:da:85:ef:6d:89:d1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB400245E6C2E159A469D4699195E08ECCE5250
        Validity
            Not Before: Jun 29 08:49:30 2026 GMT
            Not After : Jun 28 08:54:30 2027 GMT
        Subject: CN=0B20842929E2C971D2257FA64A1713A0D06AAF58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:44:a4:70:8e:df:27:8c:4f:90:89:8b:e9:
                    03:db:d9:28:02:0e:60:8f:35:d6:48:0a:0c:26:40:
                    cd:a5:b4:e9:49:86:78:8f:63:ba:4f:71:98:ba:8d:
                    ee:e3:89:b3:d0:3d:9c:9a:31:e3:7d:f6:77:83:89:
                    b7:ad:4f:a9:2e:d5:de:c4:8d:c3:27:87:23:c5:61:
                    94:57:ed:49:d6:7f:df:49:a0:f9:7e:3f:15:98:27:
                    ff:c9:f2:73:e4:05:6e:20:3d:b7:9b:ec:01:da:9a:
                    41:44:1a:f5:01:46:72:68:99:0e:30:13:1a:ab:4e:
                    76:b6:18:16:a7:be:2f:59:7e:06:1d:57:e0:37:12:
                    2c:7c:b2:1e:54:9e:35:46:9b:19:68:df:06:2f:a6:
                    cf:f0:93:ba:c1:e4:63:c4:4f:71:24:f2:b3:28:39:
                    2d:ac:c9:a9:0b:f8:fa:bb:04:81:c3:27:24:ce:f6:
                    20:61:49:83:7b:f0:7a:55:0d:67:7f:36:f3:f6:89:
                    e0:a1:3e:a7:3f:1e:ee:f2:3c:26:fe:e0:19:94:2f:
                    88:1b:6f:68:01:cf:a6:b0:1e:f0:42:5f:c1:c2:87:
                    a4:3d:fd:64:99:58:1c:30:e0:dc:42:15:db:aa:b6:
                    c7:35:1b:86:5f:e9:bc:e3:03:9d:62:de:65:f2:4d:
                    d9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:84:29:29:E2:C9:71:D2:25:7F:A6:4A:17:13:A0:D0:6A:AF:58
            X509v3 Authority Key Identifier:
                keyid:CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/3230332e37392e302e302f32302d3233203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:a1:9e:47:49:48:97:1f:b8:62:05:46:3c:19:22:47:43:
         25:16:22:8f:7d:97:0a:fb:6b:c0:c9:c4:23:3d:3e:2a:e3:09:
         41:1b:88:5e:f8:63:06:c1:69:f7:28:f1:24:8e:f1:90:06:d4:
         ec:f6:cd:12:0c:a8:a7:f9:5f:fe:5e:85:ce:ea:57:44:af:40:
         34:f8:58:6f:d3:04:3a:8d:89:27:ec:ed:5f:38:11:7d:35:38:
         b0:3c:82:26:28:20:f4:42:9a:70:d1:f6:ed:64:a3:56:de:27:
         97:bf:39:89:18:3e:3a:38:74:45:2f:28:f2:86:ef:11:2b:fa:
         02:71:9a:a1:0f:b1:34:99:23:d8:7e:51:61:19:d4:a0:c4:e7:
         f6:04:61:9f:cb:b5:70:99:e0:7c:fd:d6:e6:ae:e9:84:08:d1:
         d8:d9:83:06:eb:f6:10:7f:cf:0d:42:c1:c9:70:f9:53:51:aa:
         52:e4:81:a6:6f:ab:94:d8:11:8d:39:1a:e9:cf:8a:78:92:f2:
         c4:07:8c:34:74:05:ba:69:73:77:82:a7:99:80:c6:5c:52:99:
         ec:eb:d5:73:a1:e2:22:3b:dc:ce:f9:dd:37:a1:eb:f0:2b:cd:
         00:fb:d6:5b:61:1f:ab:59:e0:c2:92:a8:9f:15:3b:fb:8a:d9:
         9b:d6:65:92
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUWWqUjlxjKjYF45ou89qF722J0XgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhF
Q0NFNTI1MDAeFw0yNjA2MjkwODQ5MzBaFw0yNzA2MjgwODU0MzBaMDMxMTAvBgNV
BAMTKDBCMjA4NDI5MjlFMkM5NzFEMjI1N0ZBNjRBMTcxM0EwRDA2QUFGNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTg0SkcI7fJ4xPkImL6QPb2SgC
DmCPNdZICgwmQM2ltOlJhniPY7pPcZi6je7jibPQPZyaMeN99neDibetT6ku1d7E
jcMnhyPFYZRX7UnWf99JoPl+PxWYJ//J8nPkBW4gPbeb7AHamkFEGvUBRnJomQ4w
ExqrTna2GBanvi9ZfgYdV+A3Eix8sh5UnjVGmxlo3wYvps/wk7rB5GPET3Ek8rMo
OS2syakL+Pq7BIHDJyTO9iBhSYN78HpVDWd/NvP2ieChPqc/Hu7yPCb+4BmUL4gb
b2gBz6awHvBCX8HCh6Q9/WSZWBww4NxCFduqtsc1G4Zf6bzjA51i3mXyTdnfAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUCyCEKSniyXHSJX+mShcToNBqr1gwHwYDVR0j
BBgwFoAUzLQAJF5sLhWaRp1GmRleCOzOUlAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTg4MjkxNTgxOTU1Mjc4Ny8wL0NDQjQwMDI0NUU2QzJFMTU5QTQ2OUQ0Njk5MTk1
RTA4RUNDRTUyNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhFQ0NFNTI1MC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTExODgyOTE1ODE5NTUyNzg3LzAvMzIzMDMzMmUzNzM5
MmUzMDJlMzAyZjMyMzAyZDMyMzMyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
y08AMA0GCSqGSIb3DQEBCwUAA4IBAQCBjKGeR0lIlx+4YgVGPBkiR0MlFiKPfZcK
+2vAycQjPT4q4wlBG4he+GMGwWn3KPEkjvGQBtTs9s0SDKin+V/+XoXO6ldEr0A0
+Fhv0wQ6jYkn7O1fOBF9NTiwPIImKCD0Qppw0fbtZKNW3ieXvzmJGD46OHRFLyjy
hu8RK/oCcZqhD7E0mSPYflFhGdSgxOf2BGGfy7VwmeB8/dbmrumECNHY2YMG6/YQ
f88NQsHJcPlTUapS5IGmb6uU2BGNORrpz4p4kvLEB4w0dAW6aXN3gqeZgMZcUpns
69VzoeIiO9zO+d03oevwK80A+9ZbYR+rWeDCkqifFTv7itmb1mWS
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:54:30 2026 by rpki-client