Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3230322e3134392e3232342e302f31392d3139203d3e2039383131.roa
File:                     3230322e3134392e3232342e302f31392d3139203d3e2039383131.roa (raw, json)
Hash identifier:          YdyvCw5rtpN8s3W7Xua+RJam9jxVeVbC+VX9oKroJVs=
Subject key identifier:   F4:F9:F8:EC:4E:71:F3:23:50:0F:82:3D:D6:CC:C3:03:49:3F:15:65
Certificate issuer:       /CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
Certificate serial:       67BD438C69D7838ADF8F61ED716BA0E2564EF9CF
Authority key identifier: 48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3230322e3134392e3232342e302f31392d3139203d3e2039383131.roa
Signing time:             Fri 29 May 2026 09:18:18 +0000
ROA not before:           Fri 29 May 2026 09:13:18 +0000
ROA not after:            Fri 28 May 2027 09:18:18 +0000
asID:                     9811
IP address blocks:        202.149.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bd:43:8c:69:d7:83:8a:df:8f:61:ed:71:6b:a0:e2:56:4e:f9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48DCC10A7E92444E80655999E7C33C876CF1C5A8
        Validity
            Not Before: May 29 09:13:18 2026 GMT
            Not After : May 28 09:18:18 2027 GMT
        Subject: CN=F4F9F8EC4E71F323500F823DD6CCC303493F1565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:dc:1f:92:ab:b5:c7:86:db:17:c1:bd:4c:14:
                    53:2f:a3:21:f7:ed:4c:2c:d0:5e:60:e6:60:26:32:
                    db:66:32:f4:a8:a9:e8:97:23:8b:df:f7:cf:a1:68:
                    10:05:48:eb:31:c7:9a:62:ca:b0:57:96:f9:e9:64:
                    2f:10:58:33:a5:cd:1a:1b:61:fc:7d:1d:9b:d8:3a:
                    c9:7c:b3:00:29:5f:30:59:5e:17:04:17:01:3d:22:
                    b2:17:c1:94:98:07:95:0e:f9:61:69:7d:99:8b:03:
                    d5:18:c2:cb:07:e6:d6:67:8f:80:80:17:e4:7e:3c:
                    1f:b4:10:14:03:6e:ab:52:2e:a1:8f:5f:c2:a5:50:
                    9f:f8:b2:c6:79:28:1a:b8:2e:aa:6d:e2:7c:7e:4c:
                    16:80:b9:f9:4e:61:26:6a:84:00:9d:21:e8:85:11:
                    bc:d5:be:1c:2e:eb:f8:f2:70:c4:7b:42:7d:a1:c2:
                    dc:85:90:66:ce:7f:0c:b8:d8:fe:7d:5a:5a:f6:e1:
                    00:fd:ea:fd:fc:cc:df:b4:4e:c6:4d:13:78:23:8d:
                    d7:c4:db:67:8c:3f:97:f3:24:5d:e3:9a:fd:b8:5b:
                    d6:af:81:b9:41:d2:3e:2b:ff:7d:10:10:bb:af:30:
                    e1:10:7a:26:92:af:67:bc:6a:80:d5:d7:14:b1:26:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F9:F8:EC:4E:71:F3:23:50:0F:82:3D:D6:CC:C3:03:49:3F:15:65
            X509v3 Authority Key Identifier:
                keyid:48:DC:C1:0A:7E:92:44:4E:80:65:59:99:E7:C3:3C:87:6C:F1:C5:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/48DCC10A7E92444E80655999E7C33C876CF1C5A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48DCC10A7E92444E80655999E7C33C876CF1C5A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112669904286253075/0/3230322e3134392e3232342e302f31392d3139203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.149.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:7d:5b:cb:ed:9d:c4:41:d9:a7:76:c0:1f:38:fb:12:62:13:
         0c:12:76:0b:33:83:46:17:db:46:73:0c:b6:b2:ba:1d:2c:0d:
         d1:ac:c2:5a:c6:c4:86:2e:48:db:20:b8:9c:d6:3d:a2:00:fa:
         08:48:3a:b7:0f:7a:a5:0c:08:73:9c:c7:18:6e:60:44:40:6f:
         63:02:87:ad:87:4d:e0:8d:43:62:98:74:f9:f5:88:84:5a:81:
         0c:ff:50:46:87:1f:3f:b2:42:d2:13:54:7b:0f:59:36:6e:98:
         ac:3c:cc:bd:dd:11:b4:83:22:07:be:f5:65:3b:17:6a:6b:19:
         37:21:7e:93:b6:82:ba:3b:df:4a:22:d3:5f:e1:45:4a:37:7b:
         44:a0:cd:5f:08:1c:b2:c3:d4:4e:32:24:20:70:70:bc:24:47:
         31:7b:03:ab:0e:57:29:53:e0:53:e9:d7:6c:e1:68:49:00:41:
         5e:f2:80:81:3f:8e:99:28:56:8c:47:ac:55:13:c0:52:8d:66:
         fc:2f:b6:cc:17:e3:14:37:c6:c6:f0:c7:df:82:f3:f2:8d:6d:
         be:7e:49:a6:38:ff:b6:ba:0b:39:3d:16:4c:e3:3b:39:20:1f:
         f1:bd:6e:27:0e:74:33:57:2c:61:b9:63:3b:ad:10:bd:44:0e:
         5a:cf:2c:47
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUZ71DjGnXg4rfj2HtcWug4lZO+c8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2
Q0YxQzVBODAeFw0yNjA1MjkwOTEzMThaFw0yNzA1MjgwOTE4MThaMDMxMTAvBgNV
BAMTKEY0RjlGOEVDNEU3MUYzMjM1MDBGODIzREQ2Q0NDMzAzNDkzRjE1NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW3B+Sq7XHhtsXwb1MFFMvoyH3
7Uws0F5g5mAmMttmMvSoqeiXI4vf98+haBAFSOsxx5piyrBXlvnpZC8QWDOlzRob
Yfx9HZvYOsl8swApXzBZXhcEFwE9IrIXwZSYB5UO+WFpfZmLA9UYwssH5tZnj4CA
F+R+PB+0EBQDbqtSLqGPX8KlUJ/4ssZ5KBq4Lqpt4nx+TBaAuflOYSZqhACdIeiF
EbzVvhwu6/jycMR7Qn2hwtyFkGbOfwy42P59Wlr24QD96v38zN+0TsZNE3gjjdfE
22eMP5fzJF3jmv24W9avgblB0j4r/30QELuvMOEQeiaSr2e8aoDV1xSxJtNnAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU9Pn47E5x8yNQD4I91szDA0k/FWUwHwYDVR0j
BBgwFoAUSNzBCn6SRE6AZVmZ58M8h2zxxagwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjY2OTkwNDI4NjI1MzA3NS8wLzQ4RENDMTBBN0U5MjQ0NEU4MDY1NTk5OUU3QzMz
Qzg3NkNGMUM1QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDhEQ0MxMEE3RTkyNDQ0RTgwNjU1OTk5RTdDMzNDODc2Q0YxQzVBOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExMjY2OTkwNDI4NjI1MzA3NS8wLzMyMzAzMjJlMzEz
NDM5MmUzMjMyMzQyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzOTM4MzEzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBcqV4DANBgkqhkiG9w0BAQsFAAOCAQEAJX1by+2dxEHZp3bAHzj7EmIT
DBJ2CzODRhfbRnMMtrK6HSwN0azCWsbEhi5I2yC4nNY9ogD6CEg6tw96pQwIc5zH
GG5gREBvYwKHrYdN4I1DYph0+fWIhFqBDP9QRocfP7JC0hNUew9ZNm6YrDzMvd0R
tIMiB771ZTsXamsZNyF+k7aCujvfSiLTX+FFSjd7RKDNXwgcssPUTjIkIHBwvCRH
MXsDqw5XKVPgU+nXbOFoSQBBXvKAgT+OmShWjEesVRPAUo1m/C+2zBfjFDfGxvDH
34Lz8o1tvn5Jpjj/troLOT0WTOM7OSAf8b1uJw50M1csYbljO60QvUQOWs8sRw==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:20 2026 by rpki-client