Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa
File:                     3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa (raw, json)
Hash identifier:          wAWydnytWwQ6KDrEdMo8gC5yClAHE5G7egoVtj8VJEQ=
Subject key identifier:   DD:A0:C2:46:E6:94:F3:44:26:29:8A:81:07:54:11:FD:11:B5:9B:7C
Certificate issuer:       /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Certificate serial:       4CE9998E3ED996969B4862935E062D835AB3C9BA
Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa
Signing time:             Thu 16 Apr 2026 07:01:26 +0000
ROA not before:           Thu 16 Apr 2026 06:56:26 +0000
ROA not after:            Thu 15 Apr 2027 07:01:26 +0000
asID:                     137764
IP address blocks:        103.105.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 08:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e9:99:8e:3e:d9:96:96:9b:48:62:93:5e:06:2d:83:5a:b3:c9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
        Validity
            Not Before: Apr 16 06:56:26 2026 GMT
            Not After : Apr 15 07:01:26 2027 GMT
        Subject: CN=DDA0C246E694F34426298A81075411FD11B59B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:49:be:56:78:de:93:6b:a6:f2:4c:84:fd:
                    0d:97:38:dd:66:7e:8f:b6:e5:1c:eb:7a:24:97:80:
                    b6:92:08:d3:9a:ec:89:e0:13:2c:95:8e:a1:02:c2:
                    72:d5:df:b8:b5:03:c6:a4:42:e7:cf:37:3c:48:d2:
                    6b:99:0f:b9:5e:81:4a:ab:dc:c6:82:b1:ae:d6:4b:
                    71:4d:9c:c1:17:a0:89:10:67:60:41:2d:36:d2:dd:
                    39:3a:79:5d:fe:0e:3a:e1:f9:8e:de:c4:5d:46:33:
                    91:14:8f:6f:38:cd:8a:e4:1a:13:b4:b1:71:a1:fe:
                    5e:38:1f:1f:f8:fd:ff:37:47:72:4c:e4:29:f4:3a:
                    3c:42:86:9c:54:6a:b2:7a:9b:d6:e8:1e:e0:c0:3b:
                    d4:20:41:d8:ed:4e:f6:6c:73:55:7d:31:39:a1:02:
                    9d:c6:a5:4e:55:e0:5e:a4:fd:38:62:c2:6a:9b:1d:
                    6f:20:17:dc:9e:3f:2b:e1:cd:a8:cc:f2:e6:c1:a5:
                    f1:81:4d:b4:d9:63:46:cf:fd:2a:36:67:e4:92:42:
                    6a:a9:39:12:10:c4:f6:de:bb:25:96:fc:91:af:9f:
                    4f:9f:79:b2:a0:02:88:29:25:53:84:4a:ea:37:b8:
                    f3:62:0a:f4:c5:16:3c:47:a5:0d:f9:f1:2a:f0:0d:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A0:C2:46:E6:94:F3:44:26:29:8A:81:07:54:11:FD:11:B5:9B:7C
            X509v3 Authority Key Identifier:
                keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:24:16:30:6b:3e:a7:5e:01:43:14:38:c9:a5:7a:4e:c2:d9:
         3d:4d:1c:60:5f:25:1e:14:17:61:20:83:c5:f6:58:3a:66:c1:
         05:f0:cc:cd:ec:44:14:ca:ef:d9:4f:e0:c0:85:97:4a:97:2a:
         e9:9a:22:eb:49:01:e7:34:6d:ff:0c:1b:e8:a3:a8:db:52:cd:
         73:7e:a5:c2:c8:02:9e:a3:ad:a1:6a:a5:ae:58:3f:85:13:4b:
         72:17:0b:79:52:ee:40:8b:07:cb:b6:f9:3c:41:2e:0a:3a:3c:
         15:5d:cb:51:66:4b:b2:7b:19:50:94:dc:4c:f5:3d:6e:40:2b:
         b8:a4:41:0f:2b:3c:cd:00:cb:57:86:33:13:f6:99:11:84:b9:
         6a:78:7a:d9:08:a9:f3:6c:34:35:77:78:fc:68:d5:ef:e9:30:
         bd:48:91:5c:6a:8c:f3:aa:9d:8d:1e:83:2b:1c:7f:1c:b4:99:
         d5:d3:cc:fe:d7:35:82:07:40:6d:d1:93:4b:c3:01:86:59:b9:
         9e:84:ae:12:97:0f:15:e8:b3:81:7d:33:74:9d:86:bf:d7:55:
         ba:6e:47:63:7b:f5:23:4d:63:07:ff:3f:90:85:4b:cf:c1:c6:
         a1:17:4b:5a:4f:76:41:20:5f:e6:07:94:4f:1a:85:4f:ee:16:
         cd:e7:f8:d3
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUTOmZjj7ZlpabSGKTXgYtg1qzybowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYz
NjUzNkU3MjAeFw0yNjA0MTYwNjU2MjZaFw0yNzA0MTUwNzAxMjZaMDMxMTAvBgNV
BAMTKEREQTBDMjQ2RTY5NEYzNDQyNjI5OEE4MTA3NTQxMUZEMTFCNTlCN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcvkm+Vnjek2um8kyE/Q2XON1m
fo+25RzreiSXgLaSCNOa7IngEyyVjqECwnLV37i1A8akQufPNzxI0muZD7legUqr
3MaCsa7WS3FNnMEXoIkQZ2BBLTbS3Tk6eV3+Djrh+Y7exF1GM5EUj284zYrkGhO0
sXGh/l44Hx/4/f83R3JM5Cn0OjxChpxUarJ6m9boHuDAO9QgQdjtTvZsc1V9MTmh
Ap3GpU5V4F6k/ThiwmqbHW8gF9yePyvhzajM8ubBpfGBTbTZY0bP/So2Z+SSQmqp
ORIQxPbeuyWW/JGvn0+febKgAogpJVOESuo3uPNiCvTFFjxHpQ358SrwDbQhAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU3aDCRuaU80QmKYqBB1QR/RG1m3wwHwYDVR0j
BBgwFoAUa4a9P6D7Cze6xk1sjS2fZjZTbnIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDU1MTY3MDg1Mjk0Mzg3My8wLzZCODZCRDNGQTBGQjBCMzdCQUM2NEQ2QzhEMkQ5
RjY2MzY1MzZFNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYzNjUzNkU3Mi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk0NTUxNjcwODUyOTQzODczLzAvMzEzMDMzMmUz
MTMwMzUyZTMyMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNzM3MzYz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdpyDANBgkqhkiG9w0BAQsFAAOCAQEApSQWMGs+p14BQxQ4
yaV6TsLZPU0cYF8lHhQXYSCDxfZYOmbBBfDMzexEFMrv2U/gwIWXSpcq6Zoi60kB
5zRt/wwb6KOo21LNc36lwsgCnqOtoWqlrlg/hRNLchcLeVLuQIsHy7b5PEEuCjo8
FV3LUWZLsnsZUJTcTPU9bkAruKRBDys8zQDLV4YzE/aZEYS5anh62Qip82w0NXd4
/GjV7+kwvUiRXGqM86qdjR6DKxx/HLSZ1dPM/tc1ggdAbdGTS8MBhlm5noSuEpcP
FeizgX0zdJ2Gv9dVum5HY3v1I01jB/8/kIVLz8HGoRdLWk92QSBf5geUTxqFT+4W
zef40w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:56 2026 by rpki-client