Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231302e302f32342d3234203d3e20313436383431.roa
File:                     3231382e39382e3231302e302f32342d3234203d3e20313436383431.roa (raw, json)
Hash identifier:          yyPoXI8TawnrApBjndo7j1KSbBtPvYmc36UAqXtEA8U=
Subject key identifier:   D9:AB:72:42:E9:9C:F7:8C:62:26:8F:09:A8:B7:8A:CC:B1:08:CE:DF
Certificate issuer:       /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial:       7B9144609A2FBF0B9CBD492B3D97A9A350EE4750
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231302e302f32342d3234203d3e20313436383431.roa
Signing time:             Tue 14 Apr 2026 01:45:28 +0000
ROA not before:           Tue 14 Apr 2026 01:40:28 +0000
ROA not after:            Tue 13 Apr 2027 01:45:28 +0000
asID:                     146841
IP address blocks:        218.98.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 10:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:91:44:60:9a:2f:bf:0b:9c:bd:49:2b:3d:97:a9:a3:50:ee:47:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
        Validity
            Not Before: Apr 14 01:40:28 2026 GMT
            Not After : Apr 13 01:45:28 2027 GMT
        Subject: CN=D9AB7242E99CF78C62268F09A8B78ACCB108CEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e2:8e:2b:9e:a4:d0:c9:12:5d:50:00:55:04:
                    08:db:38:f3:33:fa:ce:d1:b3:04:74:38:d6:43:ad:
                    ca:e7:46:f3:bc:a8:cb:50:4b:62:07:f2:bd:6d:6a:
                    bf:78:2a:d6:09:3c:64:ca:fc:2c:26:bd:7d:68:6a:
                    99:ba:67:7d:d2:27:a4:85:32:3b:70:0e:77:34:7c:
                    49:62:9a:40:69:04:87:9e:3a:6f:25:00:e4:93:44:
                    11:f3:fc:a3:45:65:da:aa:08:be:03:d0:de:c4:65:
                    36:36:99:26:3a:b7:a5:7e:9a:a9:6e:d9:85:e8:e2:
                    47:ce:0d:19:39:17:32:b5:2a:8c:ee:bd:65:d2:3b:
                    40:f3:75:bf:b9:f1:b5:ef:6b:dd:b0:1c:9e:ef:05:
                    46:5a:03:51:b3:66:c5:b5:9a:62:a4:d7:21:82:9c:
                    41:2c:e6:ae:34:99:18:45:bc:49:7f:25:7d:67:66:
                    24:ef:13:a2:2e:38:9d:17:0f:c5:cf:04:ac:03:a8:
                    35:fd:2a:31:b9:b7:4e:07:ea:1d:47:f9:54:9b:86:
                    7c:8c:24:79:43:04:28:f6:53:8b:75:e8:a3:0b:b0:
                    c4:c8:34:51:cd:f4:58:fc:c4:6c:84:35:1e:93:15:
                    e8:8d:a0:53:19:f9:8f:31:f7:e3:71:4a:89:e4:a5:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:AB:72:42:E9:9C:F7:8C:62:26:8F:09:A8:B7:8A:CC:B1:08:CE:DF
            X509v3 Authority Key Identifier:
                keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/3231382e39382e3231302e302f32342d3234203d3e20313436383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.98.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c1:38:01:ab:be:2d:5e:57:f5:a7:99:91:65:3c:39:7c:2d:
         b0:f1:1b:8b:8a:45:66:ce:3a:99:8c:31:66:3c:5e:48:ee:ce:
         c4:55:86:76:a3:7f:14:b5:48:3d:d2:a6:7d:d4:f0:f6:1e:ac:
         b9:b3:86:95:d7:db:e2:90:c4:1b:94:47:14:16:6e:cf:b3:77:
         17:c0:5f:c6:6b:c1:b0:38:f3:d1:9b:76:3a:30:37:8b:8a:36:
         4a:c9:f1:8a:9f:d4:e3:54:10:e8:3b:60:8e:64:ec:b0:ea:b5:
         de:08:99:6f:79:2b:b0:bb:e5:67:d0:9b:42:f1:58:5d:a9:6e:
         f0:27:76:db:5e:25:c9:3e:10:07:c3:04:0f:ba:46:15:a3:27:
         41:ba:b3:6b:23:5e:fa:c4:d5:b7:8c:df:29:dd:7a:4a:50:13:
         5f:da:e9:f8:05:47:56:c0:19:9a:99:53:cf:70:f0:50:c2:9c:
         49:fe:4e:f8:fc:f3:a3:26:d8:f1:0f:6f:d7:df:c3:8b:65:cc:
         13:a6:17:87:b0:19:2b:13:53:8f:42:4a:b7:8d:6f:4a:4c:ee:
         93:87:ce:2a:21:15:c0:46:c7:c9:cc:1a:bd:11:9a:fc:23:4b:
         a6:8b:06:22:92:1f:41:c8:cc:85:f8:2d:5e:86:ef:71:9c:2b:
         19:9a:20:54
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUe5FEYJovvwucvUkrPZepo1DuR1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0
RkQ1OEYwMzAeFw0yNjA0MTQwMTQwMjhaFw0yNzA0MTMwMTQ1MjhaMDMxMTAvBgNV
BAMTKEQ5QUI3MjQyRTk5Q0Y3OEM2MjI2OEYwOUE4Qjc4QUNDQjEwOENFREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi4o4rnqTQyRJdUABVBAjbOPMz
+s7RswR0ONZDrcrnRvO8qMtQS2IH8r1tar94KtYJPGTK/CwmvX1oapm6Z33SJ6SF
MjtwDnc0fElimkBpBIeeOm8lAOSTRBHz/KNFZdqqCL4D0N7EZTY2mSY6t6V+mqlu
2YXo4kfODRk5FzK1KozuvWXSO0Dzdb+58bXva92wHJ7vBUZaA1GzZsW1mmKk1yGC
nEEs5q40mRhFvEl/JX1nZiTvE6IuOJ0XD8XPBKwDqDX9KjG5t04H6h1H+VSbhnyM
JHlDBCj2U4t16KMLsMTINFHN9Fj8xGyENR6TFeiNoFMZ+Y8x9+NxSonkpSHZAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU2atyQumc94xiJo8JqLeKzLEIzt8wHwYDVR0j
BBgwFoAUcnYz2iSPasRibg35szFFt0/VjwMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDU0Mzc4NzUzMjc0Njc1NS8wLzcyNzYzM0RBMjQ4RjZBQzQ2MjZFMERGOUIzMzE0
NUI3NEZENThGMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzI3NjMzREEyNDhGNkFDNDYyNkUwREY5QjMzMTQ1Qjc0RkQ1OEYwMy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTQ1NDM3ODc1MzI3NDY3NTUvMC8zMjMxMzgyZTM5
MzgyZTMyMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzQzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEANpi0jANBgkqhkiG9w0BAQsFAAOCAQEAbsE4Aau+LV5X9aeZkWU8
OXwtsPEbi4pFZs46mYwxZjxeSO7OxFWGdqN/FLVIPdKmfdTw9h6subOGldfb4pDE
G5RHFBZuz7N3F8BfxmvBsDjz0Zt2OjA3i4o2Ssnxip/U41QQ6DtgjmTssOq13giZ
b3krsLvlZ9CbQvFYXalu8Cd2214lyT4QB8MED7pGFaMnQbqzayNe+sTVt4zfKd16
SlATX9rp+AVHVsAZmplTz3DwUMKcSf5O+PzzoybY8Q9v19/Di2XME6YXh7AZKxNT
j0JKt41vSkzuk4fOKiEVwEbHycwavRGa/CNLposGIpIfQcjMhfgtXobvcZwrGZog
VA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:54:41 2026 by rpki-client