Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e2034383038.roa
File:                     3130312e3233362e33322e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier:          kTjrtjs2Z6A1FbMsRCqlqWU+exXxUki4cQNSV8VWl68=
Subject key identifier:   04:41:A5:A7:AA:A5:C5:AE:5E:D0:C3:7D:5D:9B:E5:A0:D8:59:FD:4E
Certificate issuer:       /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial:       56697B10813C37FAD18FA35FE0709EF1FD4EDCCF
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e2034383038.roa
Signing time:             Thu 11 Jun 2026 15:42:46 +0000
ROA not before:           Thu 11 Jun 2026 15:37:46 +0000
ROA not after:            Thu 10 Jun 2027 15:42:46 +0000
asID:                     4808
IP address blocks:        101.236.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 18:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:69:7b:10:81:3c:37:fa:d1:8f:a3:5f:e0:70:9e:f1:fd:4e:dc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
        Validity
            Not Before: Jun 11 15:37:46 2026 GMT
            Not After : Jun 10 15:42:46 2027 GMT
        Subject: CN=0441A5A7AAA5C5AE5ED0C37D5D9BE5A0D859FD4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:97:8f:11:89:37:96:e1:5f:24:54:aa:d2:
                    5c:99:00:23:46:f0:1b:73:d4:af:d1:b7:a5:7d:9d:
                    c7:f9:76:15:b4:e0:ac:68:b7:a5:70:58:13:f0:f4:
                    b0:e3:94:e2:cf:f1:99:bf:ba:7b:86:f6:7d:2d:7f:
                    58:ef:c1:57:91:98:55:8f:ac:a7:a0:6f:15:06:07:
                    6c:94:8e:dd:89:62:80:d3:c5:de:e0:1b:f5:2c:12:
                    5c:58:9c:f3:b0:a3:4e:2e:60:5d:36:84:f6:a0:75:
                    b1:bc:98:45:13:ca:19:a3:fc:b0:fc:1b:b2:0a:a5:
                    55:c9:98:47:d8:23:6f:1c:88:7c:1c:63:b0:c6:cd:
                    1c:9b:c8:9b:aa:6d:54:47:1b:57:00:21:0f:cc:49:
                    4c:8f:8d:00:f4:a2:c0:f8:e9:a6:21:7a:0e:b0:83:
                    c9:8a:f0:3a:b4:53:d8:a0:a2:ae:01:09:c9:42:01:
                    1a:08:38:58:86:67:ff:0d:01:e3:ae:c3:70:63:09:
                    70:c6:9e:1e:fe:6f:b7:b5:3f:2c:c4:da:44:fe:9a:
                    4f:ac:f1:78:50:5b:24:a4:5b:d8:03:8c:3c:4d:04:
                    64:44:be:94:cf:7b:a4:d0:9f:3f:20:53:92:2a:fb:
                    a8:da:ee:e3:67:1d:c5:7e:cf:aa:8d:aa:20:02:f0:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:41:A5:A7:AA:A5:C5:AE:5E:D0:C3:7D:5D:9B:E5:A0:D8:59:FD:4E
            X509v3 Authority Key Identifier:
                keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.236.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:c3:a7:3c:f5:61:be:07:56:43:45:40:e5:4b:3d:8a:cc:38:
         06:8e:49:5c:4c:90:15:67:85:4b:4d:d8:fd:c1:2e:2f:1d:8c:
         3a:17:12:1e:29:a1:5e:9b:26:a2:e9:32:36:da:52:31:c4:01:
         92:67:cd:9d:cc:5e:3e:41:d0:fa:ae:a1:cc:e7:da:d6:32:e6:
         fa:4a:d6:5d:06:b2:6c:51:07:43:fa:bd:27:5b:39:ec:20:a6:
         f1:72:42:40:d2:9a:d2:91:10:e2:df:66:79:24:46:a1:9f:44:
         26:63:63:24:a0:c6:18:de:02:01:52:05:b0:47:7f:50:4e:60:
         4f:e1:8c:7b:5c:52:57:ca:f1:78:81:14:eb:b0:14:ed:a0:72:
         a0:1f:15:bd:7d:6e:30:a4:50:51:21:63:93:1b:3d:13:78:aa:
         93:58:93:ba:73:76:38:23:0a:4d:f4:94:84:08:39:3e:db:df:
         45:41:7c:2a:21:fe:f1:bb:67:e3:a0:1c:a1:c2:d2:5b:8f:e7:
         5c:b0:bc:b8:0e:d8:57:09:7e:22:e4:bb:ca:22:50:cd:6c:da:
         85:6e:09:a8:71:82:e9:ce:bb:20:ca:b4:b2:15:04:0f:b7:8a:
         af:2c:f9:81:58:86:a9:3a:24:a5:24:e1:6f:75:34:f8:0d:f5:
         dd:78:08:70
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUVml7EIE8N/rRj6Nf4HCe8f1O3M8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0
Q0FDOEY2MDAeFw0yNjA2MTExNTM3NDZaFw0yNzA2MTAxNTQyNDZaMDMxMTAvBgNV
BAMTKDA0NDFBNUE3QUFBNUM1QUU1RUQwQzM3RDVEOUJFNUEwRDg1OUZENEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYcZePEYk3luFfJFSq0lyZACNG
8Btz1K/Rt6V9ncf5dhW04Kxot6VwWBPw9LDjlOLP8Zm/unuG9n0tf1jvwVeRmFWP
rKegbxUGB2yUjt2JYoDTxd7gG/UsElxYnPOwo04uYF02hPagdbG8mEUTyhmj/LD8
G7IKpVXJmEfYI28ciHwcY7DGzRybyJuqbVRHG1cAIQ/MSUyPjQD0osD46aYheg6w
g8mK8Dq0U9igoq4BCclCARoIOFiGZ/8NAeOuw3BjCXDGnh7+b7e1PyzE2kT+mk+s
8XhQWySkW9gDjDxNBGREvpTPe6TQnz8gU5Iq+6ja7uNnHcV+z6qNqiAC8MhBAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUBEGlp6qlxa5e0MN9XZvloNhZ/U4wHwYDVR0j
BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1
N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTE3NDcyNjUzMTQyMTk2MjUxLzAvMzEzMDMxMmUzMjMz
MzYyZTMzMzIyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA2XsIDANBgkqhkiG9w0BAQsFAAOCAQEArcOnPPVhvgdWQ0VA5Us9isw4Bo5J
XEyQFWeFS03Y/cEuLx2MOhcSHimhXpsmoukyNtpSMcQBkmfNncxePkHQ+q6hzOfa
1jLm+krWXQaybFEHQ/q9J1s57CCm8XJCQNKa0pEQ4t9meSRGoZ9EJmNjJKDGGN4C
AVIFsEd/UE5gT+GMe1xSV8rxeIEU67AU7aByoB8VvX1uMKRQUSFjkxs9E3iqk1iT
unN2OCMKTfSUhAg5PtvfRUF8KiH+8btn46AcocLSW4/nXLC8uA7YVwl+IuS7yiJQ
zWzahW4JqHGC6c67IMq0shUED7eKryz5gViGqTokpSThb3U0+A313XgIcA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:15 2026 by rpki-client