Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3235322e302f32322d3332203d3e203233373234.roa
File:                     3130332e3233372e3235322e302f32322d3332203d3e203233373234.roa (raw, json)
Hash identifier:          fsW9bgLnkSThZZN38JADzvD2+yEtJL46n4VSz59f8uA=
Subject key identifier:   52:64:B2:BE:A9:9F:56:6E:C4:DE:66:3B:CA:B3:F2:8A:28:33:CA:FE
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       020A4BEE099232649D9B996C8F1577AF2F7E169F
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3235322e302f32322d3332203d3e203233373234.roa
Signing time:             Wed 15 Apr 2026 07:55:21 +0000
ROA not before:           Wed 15 Apr 2026 07:50:21 +0000
ROA not after:            Wed 14 Apr 2027 07:55:21 +0000
asID:                     23724
IP address blocks:        103.237.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0a:4b:ee:09:92:32:64:9d:9b:99:6c:8f:15:77:af:2f:7e:16:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: Apr 15 07:50:21 2026 GMT
            Not After : Apr 14 07:55:21 2027 GMT
        Subject: CN=5264B2BEA99F566EC4DE663BCAB3F28A2833CAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:db:a1:28:4c:45:03:e5:fa:ec:c0:d5:8b:28:
                    a7:cc:38:c2:5c:9b:8c:aa:b9:e0:53:35:57:59:be:
                    e5:88:20:76:1a:16:43:35:7b:63:53:13:a3:47:19:
                    76:54:2e:85:a5:52:91:31:75:80:34:6e:af:a3:c5:
                    ea:56:62:b4:29:0a:1d:6c:75:3f:01:02:4b:33:5e:
                    a0:c8:fa:ac:b8:b6:0b:f6:57:62:00:f6:14:4b:88:
                    00:76:43:05:22:4d:9b:10:bd:9c:b1:16:f2:ce:2b:
                    7b:46:78:e0:d3:7e:e9:d8:89:d2:64:45:ba:cf:f1:
                    28:1d:b4:8c:a0:30:7e:89:ad:4a:92:f8:44:4a:6e:
                    4d:72:7d:0c:9a:c2:16:79:03:b0:a8:5a:c4:c9:4b:
                    a5:30:9f:4e:0e:f8:cb:ba:02:be:74:24:7a:dd:e5:
                    74:e0:04:6f:88:f9:02:38:40:ab:be:34:e0:7b:e5:
                    00:51:74:e4:e3:c0:a6:4e:ee:65:d8:a8:a1:e6:9c:
                    c7:07:44:c1:79:8a:c7:5b:b1:3d:0b:4a:25:3a:35:
                    0f:aa:68:fc:fb:e1:31:bb:26:73:e9:70:87:70:b0:
                    6f:2a:a1:53:e8:7a:c1:df:2e:ed:21:06:8b:89:5f:
                    75:57:10:29:89:5c:a2:c6:4e:c3:67:7d:2b:eb:62:
                    fc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:64:B2:BE:A9:9F:56:6E:C4:DE:66:3B:CA:B3:F2:8A:28:33:CA:FE
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3235322e302f32322d3332203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:bf:bb:ac:24:a5:94:3b:97:31:95:6b:58:91:a0:bf:f5:
         35:19:12:5c:e1:f8:04:36:d1:40:51:ef:03:2d:ea:92:f3:fb:
         da:5a:b7:d0:55:9f:ed:05:9e:d7:63:47:b4:12:cd:2f:46:50:
         c2:51:06:1c:db:2b:25:7c:d0:c9:64:6b:7f:fb:36:e8:f9:a5:
         b5:0b:b2:fa:ec:fa:13:5c:37:e2:9a:55:11:8e:3b:6b:50:4c:
         a7:77:58:cf:bf:7b:25:c5:cc:0e:91:e6:2d:a0:e8:33:75:e3:
         66:43:40:da:a4:70:b2:13:2a:28:a8:03:24:eb:05:7c:42:4d:
         61:03:9b:a3:40:60:63:0e:64:07:7f:09:b5:9b:ad:55:e8:90:
         b1:49:ea:6b:68:be:22:54:de:7d:b5:8a:7e:9b:a2:38:4c:80:
         c9:33:3f:09:e1:8b:d3:d9:ad:ac:84:b6:48:db:bb:c1:cd:86:
         a7:3b:fa:36:fc:69:c7:30:0d:3a:e2:c8:ff:2c:59:2f:25:60:
         14:4f:de:07:90:c0:13:d8:af:c8:11:07:cb:17:3f:8d:7c:ac:
         c7:a9:ff:8a:74:41:d6:47:73:a2:5f:a0:be:b8:04:c5:c8:6e:
         43:1a:b2:1e:17:44:49:a9:81:30:dd:89:80:c9:cc:09:d5:79:
         d8:42:bd:9c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUAgpL7gmSMmSdm5lsjxV3ry9+Fp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3
OEMxRTMxNTAeFw0yNjA0MTUwNzUwMjFaFw0yNzA0MTQwNzU1MjFaMDMxMTAvBgNV
BAMTKDUyNjRCMkJFQTk5RjU2NkVDNERFNjYzQkNBQjNGMjhBMjgzM0NBRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY26EoTEUD5frswNWLKKfMOMJc
m4yqueBTNVdZvuWIIHYaFkM1e2NTE6NHGXZULoWlUpExdYA0bq+jxepWYrQpCh1s
dT8BAkszXqDI+qy4tgv2V2IA9hRLiAB2QwUiTZsQvZyxFvLOK3tGeODTfunYidJk
RbrP8SgdtIygMH6JrUqS+ERKbk1yfQyawhZ5A7CoWsTJS6Uwn04O+Mu6Ar50JHrd
5XTgBG+I+QI4QKu+NOB75QBRdOTjwKZO7mXYqKHmnMcHRMF5isdbsT0LSiU6NQ+q
aPz74TG7JnPpcIdwsG8qoVPoesHfLu0hBouJX3VXECmJXKLGTsNnfSvrYvyxAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUUmSyvqmfVm7E3mY7yrPyiigzyv4wHwYDVR0j
BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB
OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTU5ODQyOTQ3NjcwOTk5MDUvMC8zMTMwMzMyZTMy
MzMzNzJlMzIzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzMzM3MzIzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmft/DANBgkqhkiG9w0BAQsFAAOCAQEAAv6/u6wkpZQ7lzGVa1iR
oL/1NRkSXOH4BDbRQFHvAy3qkvP72lq30FWf7QWe12NHtBLNL0ZQwlEGHNsrJXzQ
yWRrf/s26PmltQuy+uz6E1w34ppVEY47a1BMp3dYz797JcXMDpHmLaDoM3XjZkNA
2qRwshMqKKgDJOsFfEJNYQObo0BgYw5kB38JtZutVeiQsUnqa2i+IlTefbWKfpui
OEyAyTM/CeGL09mtrIS2SNu7wc2Gpzv6NvxpxzANOuLI/yxZLyVgFE/eB5DAE9iv
yBEHyxc/jXysx6n/inRB1kdzol+gvrgExchuQxqyHhdESamBMN2JgMnMCdV52EK9
nA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:12 2026 by rpki-client