Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31362e302f32342d3234203d3e203137373831.roa
File:                     3230332e3139322e31362e302f32342d3234203d3e203137373831.roa (raw, json)
Hash identifier:          o1cwMuKJtWT+7Uff4dbGVEK93EucJkFrdoxPX5tQr2M=
Subject key identifier:   8B:15:79:0B:76:B2:D3:C8:66:C7:E0:92:E8:B3:37:73:42:17:00:D0
Certificate issuer:       /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial:       556DE1418C7F6AA9427637D425A716F6B85A8DF9
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31362e302f32342d3234203d3e203137373831.roa
Signing time:             Fri 29 May 2026 08:43:58 +0000
ROA not before:           Fri 29 May 2026 08:38:58 +0000
ROA not after:            Fri 28 May 2027 08:43:58 +0000
asID:                     17781
IP address blocks:        203.192.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 08:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6d:e1:41:8c:7f:6a:a9:42:76:37:d4:25:a7:16:f6:b8:5a:8d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
        Validity
            Not Before: May 29 08:38:58 2026 GMT
            Not After : May 28 08:43:58 2027 GMT
        Subject: CN=8B15790B76B2D3C866C7E092E8B33773421700D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:ef:1a:55:8a:c2:b5:06:6d:26:4b:9f:21:
                    26:30:a7:1a:82:55:fd:33:ae:fb:83:f3:82:b8:81:
                    a6:2e:a5:a9:c0:f7:38:b1:5a:a2:0a:47:62:25:5d:
                    dc:9a:c0:7b:ee:71:e4:05:ee:57:da:b7:d6:8d:d0:
                    85:4e:6f:94:63:03:01:a4:3a:b0:a0:4b:3f:35:93:
                    f1:a0:2c:a4:02:73:66:71:02:6c:0f:84:d7:3a:cb:
                    d4:fd:df:41:a0:67:5b:e1:d6:cc:6b:cf:69:a0:b8:
                    ed:da:bd:07:b4:06:ec:7e:9a:66:fa:7f:0d:57:44:
                    cd:cd:c7:22:08:17:92:52:3e:07:26:93:c7:52:99:
                    fd:17:9d:28:36:0f:52:04:85:38:a2:1f:d7:35:1b:
                    98:d4:72:04:70:a3:98:6a:88:69:3f:b5:3b:63:35:
                    dc:f0:36:d9:e8:e9:9d:87:55:57:da:8e:8a:30:bd:
                    6d:e5:3d:5f:a1:37:62:e6:4b:09:f5:29:a6:17:55:
                    23:01:2f:ea:e5:40:03:48:59:b9:9b:8d:61:68:f4:
                    13:ac:c8:dd:a4:14:d2:bc:ce:2f:42:30:03:20:4a:
                    75:53:1b:b0:99:9a:66:61:66:d0:24:fe:0d:26:47:
                    a8:36:0b:44:3d:57:6a:0b:f5:dd:2a:c1:2e:62:b1:
                    47:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:79:0B:76:B2:D3:C8:66:C7:E0:92:E8:B3:37:73:42:17:00:D0
            X509v3 Authority Key Identifier:
                keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e31362e302f32342d3234203d3e203137373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.192.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:e3:5f:0c:b2:ac:65:0a:1a:39:3d:2b:95:22:ab:5a:57:a0:
         46:91:54:5f:4f:fa:50:79:a0:ea:95:dc:69:5f:0b:47:8c:a4:
         47:ad:6e:f9:12:b0:6d:2d:c3:3c:b9:bd:f8:27:20:b1:f9:0d:
         a0:d9:35:0e:5b:e1:e4:ea:9c:3d:13:57:f7:2c:74:63:59:9a:
         c3:8b:ef:14:ed:0d:a4:4a:d9:38:50:ea:17:f9:e8:ed:80:8c:
         75:65:41:d0:ce:f0:5e:66:51:a3:8e:00:03:2d:bc:c5:a5:fd:
         59:b1:35:1c:39:18:7a:1f:12:37:8a:6a:21:5a:28:2e:d2:d0:
         31:b4:62:25:3e:c4:72:e0:9c:3e:e1:54:aa:3d:6f:5f:88:50:
         37:31:90:25:7a:b7:63:12:2d:4c:67:c3:65:df:07:64:54:40:
         d4:a1:0a:0d:c0:38:b9:ad:56:8a:9b:d2:e1:4c:c8:2b:39:30:
         5a:8e:3f:24:8b:47:3d:b2:1a:fd:29:68:f1:03:71:99:23:1d:
         07:26:36:2b:b0:24:b0:3d:d9:f6:a5:4a:b1:f0:e9:63:65:ea:
         48:dc:f0:26:55:f3:71:63:60:6b:b1:a6:df:2a:72:b4:1d:8b:
         fa:30:ef:72:0b:82:64:2f:32:f6:c9:9e:87:15:16:01:27:e5:
         63:8f:f5:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:14 2026 by rpki-client