Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31322e302f32342d3234203d3e203137373831.roa
File:                     3230332e3139322e31322e302f32342d3234203d3e203137373831.roa (raw, json)
Hash identifier:          V607HldWKuDXxlXGV+41k9BZRTPj2GoE42D0lUJabyA=
Subject key identifier:   AD:62:A1:9A:B0:15:43:D7:1B:65:3F:06:A8:62:64:0E:16:D7:02:01
Certificate issuer:       /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial:       75A41919325D073B7340C37B0121C279E67F5B39
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31322e302f32342d3234203d3e203137373831.roa
Signing time:             Fri 29 May 2026 08:43:58 +0000
ROA not before:           Fri 29 May 2026 08:38:58 +0000
ROA not after:            Fri 28 May 2027 08:43:58 +0000
asID:                     17781
IP address blocks:        203.192.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 08:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a4:19:19:32:5d:07:3b:73:40:c3:7b:01:21:c2:79:e6:7f:5b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
        Validity
            Not Before: May 29 08:38:58 2026 GMT
            Not After : May 28 08:43:58 2027 GMT
        Subject: CN=AD62A19AB01543D71B653F06A862640E16D70201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:99:3a:4f:63:49:2d:18:5a:cf:30:67:6c:
                    6c:3c:a5:d6:ee:c1:6f:38:ce:e5:b5:92:42:f3:76:
                    d3:d6:ce:42:11:99:48:2e:5e:45:8e:1c:38:c7:c0:
                    76:dd:50:19:89:72:52:39:29:74:4f:9e:e9:92:f7:
                    e7:0d:09:49:fd:b7:e7:f8:2b:7e:31:88:25:92:51:
                    91:99:ef:0b:39:a3:66:37:d0:f6:4d:b7:88:45:b6:
                    d9:01:bf:e5:77:6b:ab:d7:9d:b1:59:d8:21:9d:c2:
                    ad:0f:78:f9:80:1d:ae:9e:a7:52:bc:dd:55:72:9c:
                    2b:f9:3c:46:de:1a:16:7b:7e:73:e2:da:20:21:14:
                    2b:4f:a2:8d:fe:6a:51:cc:7d:3f:29:2b:64:0e:6d:
                    82:16:6f:21:1a:fe:66:c0:f2:12:48:4a:2d:4f:17:
                    8f:f3:a2:17:0d:f5:81:25:e5:27:3b:80:bd:8f:b4:
                    89:c9:32:27:30:c2:3c:e4:b0:a8:4a:c0:f1:ed:1c:
                    c0:a5:68:b0:90:1c:36:97:e7:fc:a2:ba:8f:38:0d:
                    29:5d:bf:97:38:be:fc:47:84:22:13:8b:21:1d:fe:
                    df:fd:88:e6:4e:a6:d4:61:64:51:3a:5d:9d:e0:fb:
                    d9:d2:ff:53:8e:0f:e6:b3:5e:30:c5:2c:8c:2f:9c:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:62:A1:9A:B0:15:43:D7:1B:65:3F:06:A8:62:64:0E:16:D7:02:01
            X509v3 Authority Key Identifier:
                keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31322e302f32342d3234203d3e203137373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.192.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e6:3d:4b:c4:b6:90:13:46:00:68:0c:4a:96:16:f5:c4:e9:
         1e:2a:d9:b1:66:73:49:2f:9e:88:64:a2:2d:e1:74:e5:47:44:
         ce:d3:f2:5b:c7:5a:9e:c9:2e:9b:45:2f:6d:4d:27:17:7d:04:
         c8:cf:b6:ef:97:7e:9a:a4:f7:65:4d:e9:6c:16:1c:b1:b4:d3:
         ac:2a:bb:bc:d3:19:db:2b:4f:29:16:bc:85:d2:f8:84:09:d4:
         04:10:7f:6d:a7:2f:1a:21:37:d6:b9:b4:78:e6:d7:aa:34:1e:
         33:6f:12:66:36:db:57:52:73:e3:71:28:cb:95:09:9f:8e:89:
         b4:be:b6:d8:cd:d1:a9:e4:7a:ad:06:10:c6:51:c2:45:ae:ff:
         c6:2a:78:dc:f4:6e:1f:20:8d:a9:84:55:ff:f2:c0:7c:f9:b5:
         fb:17:0e:c3:b1:a1:0b:27:61:a3:61:e1:71:ba:bb:f7:ad:41:
         20:1a:96:08:12:27:5c:a5:fa:a0:77:7a:5c:8a:4b:55:b9:6e:
         e2:4c:66:be:1c:3f:da:c3:40:33:28:1b:40:df:8d:e9:76:fe:
         1f:6b:ba:a8:39:06:eb:3c:41:75:5d:5c:c1:9c:d9:9d:26:58:
         b6:8b:e8:fd:8e:23:0a:76:b6:9e:ad:07:95:f2:f8:f9:ca:53:
         0c:6a:e9:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:10 2026 by rpki-client