Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS4812.roa
File:                     AS4812.roa (raw, json)
Hash identifier:          vzUhrujA1c5E8/rZaOH7xpYP8zWCf2GYXeGOsmKkwI4=
Subject key identifier:   73:88:DB:F6:7B:04:49:7E:8A:CC:3A:DE:93:F4:CD:6B:EC:C5:13:72
Certificate issuer:       /CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
Certificate serial:       5B65F92AAF2BB4E3A8EF27B05E6CA82F87B9A6C5
Authority key identifier: 9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS4812.roa
Signing time:             Tue 16 Jun 2026 14:57:16 +0000
ROA not before:           Tue 16 Jun 2026 14:52:16 +0000
ROA not after:            Tue 15 Jun 2027 14:57:16 +0000
asID:                     4812
IP address blocks:        122.9.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:65:f9:2a:af:2b:b4:e3:a8:ef:27:b0:5e:6c:a8:2f:87:b9:a6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E09269F04335C992685B10E8709F2C95DC5E8DE
        Validity
            Not Before: Jun 16 14:52:16 2026 GMT
            Not After : Jun 15 14:57:16 2027 GMT
        Subject: CN=7388DBF67B04497E8ACC3ADE93F4CD6BECC51372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:98:64:ed:27:89:d2:d8:4c:9d:3b:83:b6:
                    61:34:86:43:74:c0:99:6a:d7:32:fe:c6:4c:85:12:
                    35:08:d5:c8:1b:34:71:a3:c7:41:ea:a0:15:8a:1d:
                    87:c6:82:38:ec:21:5f:c5:a1:cb:e1:99:ff:57:09:
                    b7:93:6e:b7:f0:b9:fc:00:27:11:fa:91:83:ad:9c:
                    3e:e4:71:52:39:4c:f5:e7:a7:fc:42:b7:37:35:ee:
                    6f:a9:c7:c8:2d:c8:0d:b4:f9:c4:ac:7f:82:c7:40:
                    94:e8:03:87:60:9f:c0:8b:28:13:66:c0:7d:2d:04:
                    74:a1:f9:f9:f0:21:6e:c8:00:13:05:02:b8:16:2f:
                    98:a8:9a:55:a0:4b:d1:51:9a:91:fb:3a:d2:7c:7d:
                    62:b1:39:d7:d3:b6:43:70:97:d4:d9:b0:7c:6f:59:
                    00:31:b7:b8:de:e2:62:16:64:73:6f:d8:38:42:43:
                    c4:7d:e3:27:36:99:7f:c7:5b:1c:e2:f2:23:5f:d1:
                    13:7b:7e:4c:16:74:a9:49:26:21:10:9b:5e:84:eb:
                    3e:9f:cc:c7:6f:f2:3d:69:56:ee:42:20:62:3a:29:
                    3c:fe:e3:4f:b3:5b:03:b2:f8:ca:a1:11:cb:23:ff:
                    8c:a8:a6:33:6a:2a:dc:50:ce:f2:55:01:d4:cb:df:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:88:DB:F6:7B:04:49:7E:8A:CC:3A:DE:93:F4:CD:6B:EC:C5:13:72
            X509v3 Authority Key Identifier:
                keyid:9E:09:26:9F:04:33:5C:99:26:85:B1:0E:87:09:F2:C9:5D:C5:E8:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/9E09269F04335C992685B10E8709F2C95DC5E8DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E09269F04335C992685B10E8709F2C95DC5E8DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/0/AS4812.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.9.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:1f:ec:32:1d:98:a1:ec:8f:3c:a5:97:29:d9:7f:80:35:85:
         78:92:54:50:f6:6a:b8:43:eb:78:fa:ac:9e:50:7c:0f:8f:52:
         c2:13:eb:94:a5:41:b4:20:da:37:a9:7c:10:58:0f:ca:22:be:
         f2:cc:f7:a3:06:58:7c:b3:fd:ba:d6:6d:da:d7:dc:0e:87:02:
         5c:58:cc:d5:78:81:a5:c1:40:ae:0a:ed:cb:98:aa:31:fc:86:
         6f:f7:4b:09:5d:f5:54:f9:1e:7c:9e:89:a3:b1:da:9c:13:75:
         13:20:11:81:83:3e:92:76:37:9e:88:89:33:24:e2:1a:44:3c:
         2e:e8:d1:f6:f7:be:0a:d7:57:9f:03:b7:11:7f:28:96:03:fd:
         3f:ec:ea:be:e7:12:ab:44:df:46:0a:df:10:27:61:cf:29:38:
         56:66:a0:0a:54:1b:0b:0b:a0:9f:df:fd:19:a9:7c:fd:3b:51:
         ca:d8:ab:87:5e:f6:58:d1:19:c5:31:3b:92:9d:7e:27:e7:cb:
         20:4a:54:b8:62:70:04:61:2d:59:05:7a:81:9c:fa:11:bd:d2:
         c2:65:fe:c4:21:d8:73:fc:e9:18:74:a6:68:bc:18:28:9e:24:
         f3:d1:c7:22:d8:c9:fa:43:11:16:35:a0:f1:ab:d0:05:b7:76:
         b5:40:7a:bc
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgIUW2X5Kq8rtOOo7yewXmyoL4e5psUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1
REM1RThERTAeFw0yNjA2MTYxNDUyMTZaFw0yNzA2MTUxNDU3MTZaMDMxMTAvBgNV
BAMTKDczODhEQkY2N0IwNDQ5N0U4QUNDM0FERTkzRjRDRDZCRUNDNTEzNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQ5hk7SeJ0thMnTuDtmE0hkN0
wJlq1zL+xkyFEjUI1cgbNHGjx0HqoBWKHYfGgjjsIV/Focvhmf9XCbeTbrfwufwA
JxH6kYOtnD7kcVI5TPXnp/xCtzc17m+px8gtyA20+cSsf4LHQJToA4dgn8CLKBNm
wH0tBHSh+fnwIW7IABMFArgWL5iomlWgS9FRmpH7OtJ8fWKxOdfTtkNwl9TZsHxv
WQAxt7je4mIWZHNv2DhCQ8R94yc2mX/HWxzi8iNf0RN7fkwWdKlJJiEQm16E6z6f
zMdv8j1pVu5CIGI6KTz+40+zWwOy+MqhEcsj/4yopjNqKtxQzvJVAdTL3+apAgMB
AAGjggHiMIIB3jAdBgNVHQ4EFgQUc4jb9nsESX6KzDrek/TNa+zFE3IwHwYDVR0j
BBgwFoAUngkmnwQzXJkmhbEOhwnyyV3F6N4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTIyMzY4MS8wLzlFMDkyNjlGMDQzMzVDOTkyNjg1QjEwRTg3MDlG
MkM5NURDNUU4REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUUwOTI2OUYwNDMzNUM5OTI2ODVCMTBFODcwOUYyQzk1REM1RThERS5jZXIw
XAYIKwYBBQUHAQsEUDBOMEwGCCsGAQUFBzALhkByc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMC9BUzQ4MTIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAR6CbAwDQYJKoZIhvcNAQELBQADggEBAIwf7DIdmKHsjzyllynZf4A1hXiS
VFD2arhD63j6rJ5QfA+PUsIT65SlQbQg2jepfBBYD8oivvLM96MGWHyz/brWbdrX
3A6HAlxYzNV4gaXBQK4K7cuYqjH8hm/3Swld9VT5HnyeiaOx2pwTdRMgEYGDPpJ2
N56IiTMk4hpEPC7o0fb3vgrXV58DtxF/KJYD/T/s6r7nEqtE30YK3xAnYc8pOFZm
oApUGwsLoJ/f/RmpfP07UcrYq4de9ljRGcUxO5KdfifnyyBKVLhicARhLVkFeoGc
+hG90sJl/sQh2HP86Rh0pmi8GCieJPPRxyLYyfpDERY1oPGr0AW3drVAerw=
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:28 2026 by rpki-client