Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e32342e302f32342d3234203d3e203137373831.roa
File:                     3230332e3139322e32342e302f32342d3234203d3e203137373831.roa (raw, json)
Hash identifier:          BbMTunYrz1nmuNv7CTHzX20n2SaSGLdFMAbzTikvoko=
Subject key identifier:   BD:98:F0:C5:65:CF:0B:81:0B:F0:86:0A:E5:77:BE:30:5F:B5:55:AC
Certificate issuer:       /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
Certificate serial:       72F057D1F0C3C94644DC01B8671A2B38F61D8BD4
Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e32342e302f32342d3234203d3e203137373831.roa
Signing time:             Fri 29 May 2026 08:43:59 +0000
ROA not before:           Fri 29 May 2026 08:38:59 +0000
ROA not after:            Fri 28 May 2027 08:43:59 +0000
asID:                     17781
IP address blocks:        203.192.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 08:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f0:57:d1:f0:c3:c9:46:44:dc:01:b8:67:1a:2b:38:f6:1d:8b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D
        Validity
            Not Before: May 29 08:38:59 2026 GMT
            Not After : May 28 08:43:59 2027 GMT
        Subject: CN=BD98F0C565CF0B810BF0860AE577BE305FB555AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:21:93:fa:bb:c2:c6:38:ba:42:8e:e2:78:33:
                    7d:3e:df:ae:5c:26:c5:40:bf:c6:2e:0a:63:6f:a8:
                    dd:1a:e5:25:c0:f0:3c:7e:20:2b:c6:e3:48:32:ec:
                    1f:9f:48:2c:13:5b:ca:b3:49:21:a7:c9:f6:06:4e:
                    74:39:8e:cb:aa:4f:44:05:69:82:15:85:c0:5f:f6:
                    22:ce:12:46:9c:fb:b2:8e:d4:ef:6c:6a:fe:3a:bf:
                    9e:d4:50:5c:0f:76:2d:99:66:bc:48:06:25:11:f0:
                    0a:d4:3e:77:66:42:41:9c:e5:99:59:d7:87:ce:e1:
                    cd:e9:f1:c2:d7:8d:a9:57:ce:2a:a2:7b:e2:0c:93:
                    03:8b:bb:f3:08:53:a0:51:12:8f:34:d4:1e:36:47:
                    c5:21:3f:90:2c:38:54:50:14:d4:10:a9:f1:72:91:
                    3d:09:85:7d:be:69:40:d1:e7:98:a6:6a:26:dd:03:
                    ee:25:b7:a2:26:51:4f:4b:22:e8:fb:fd:42:1c:ae:
                    72:9a:af:46:f9:5f:33:ed:2f:31:6e:ff:5d:34:41:
                    d2:9b:39:e2:da:a3:2d:72:83:11:a7:64:d5:47:96:
                    59:c9:9d:5a:66:2e:c7:df:65:51:89:ba:6d:3b:bb:
                    06:ac:47:f3:d4:8f:d3:5e:94:31:c3:7d:fa:e5:94:
                    b0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:98:F0:C5:65:CF:0B:81:0B:F0:86:0A:E5:77:BE:30:5F:B5:55:AC
            X509v3 Authority Key Identifier:
                keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e32342e302f32342d3234203d3e203137373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.192.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:d7:6d:3c:b0:97:65:03:58:4d:3f:25:f2:3b:6a:f3:a5:a3:
         2e:fa:38:ae:66:a0:6c:18:e1:10:54:ff:ac:d0:36:56:12:2b:
         ea:60:bd:c5:03:32:ac:49:9f:95:a8:b1:cb:88:3e:52:d6:de:
         b6:72:9b:78:7c:bf:d2:44:a5:23:74:b7:fb:3d:ae:9c:6c:e0:
         d8:c3:89:c7:55:19:47:99:30:34:24:f4:10:e7:65:a9:c6:54:
         4f:92:33:4e:dc:19:d0:ab:ae:96:01:61:ad:bc:97:28:2b:d2:
         77:e3:87:45:c3:51:2e:d8:ae:23:7e:3b:e8:08:85:af:a7:9d:
         47:f2:0f:d5:31:d5:b6:0a:43:bb:82:7f:5b:20:c0:4e:53:d4:
         52:f9:2e:74:39:f6:ad:2c:6b:87:87:32:18:b4:64:00:e6:ae:
         4b:92:48:bb:98:f8:94:c7:15:af:c4:dc:3b:8a:be:7a:ff:ff:
         5e:80:fb:01:3f:47:fa:b4:9c:31:68:3b:d6:71:2d:8d:61:d6:
         0f:db:77:f3:89:76:51:0b:0e:84:cf:2e:53:94:42:05:f0:ac:
         bd:25:4c:48:c3:70:e8:14:71:65:a0:49:bf:a8:37:d8:a6:04:
         60:f2:a3:5d:49:e9:5a:7d:e8:c0:5b:b2:59:dd:14:ee:33:5e:
         ab:10:b0:b9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:40 2026 by rpki-client