Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e2034383335.roa
File:                     3230332e3139362e302e302f32312d3332203d3e2034383335.roa (raw, json)
Hash identifier:          iBmo/DZsJYuOkdZe0e0gObCDwJApBW19tRYQ4FhsS4s=
Subject key identifier:   3B:1A:5A:01:FE:D7:08:BB:61:F8:09:5F:0C:7D:0F:39:DD:33:5A:0E
Certificate issuer:       /CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
Certificate serial:       66B6B62B26C4647DDBFACBF800E8094426D9F6EA
Authority key identifier: 1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e2034383335.roa
Signing time:             Tue 14 Apr 2026 03:00:09 +0000
ROA not before:           Tue 14 Apr 2026 02:55:09 +0000
ROA not after:            Tue 13 Apr 2027 03:00:09 +0000
asID:                     4835
IP address blocks:        203.196.0.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b6:b6:2b:26:c4:64:7d:db:fa:cb:f8:00:e8:09:44:26:d9:f6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C519CD1C415925E7FCE92FDA20FF18EC544C74B
        Validity
            Not Before: Apr 14 02:55:09 2026 GMT
            Not After : Apr 13 03:00:09 2027 GMT
        Subject: CN=3B1A5A01FED708BB61F8095F0C7D0F39DD335A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:ba:12:fe:c3:b5:fa:9c:c6:9a:04:e8:c8:
                    cb:88:c0:68:60:c7:7c:8e:83:6e:b6:86:71:ab:90:
                    77:33:d1:14:cc:28:98:de:a2:83:78:b8:43:71:b6:
                    fb:ba:e8:78:9b:0c:d0:40:55:fb:f4:92:fb:d7:c1:
                    5c:b3:d3:73:aa:c6:02:be:58:c1:34:32:a5:b9:20:
                    8e:5c:f9:2e:36:05:ce:3c:fd:b0:2b:77:6a:69:1c:
                    89:1b:be:b8:c5:e3:29:6f:0c:53:56:69:93:4e:e4:
                    b5:e7:f5:2c:ed:c2:f7:95:b6:71:dc:30:44:cb:61:
                    0e:38:88:10:f1:aa:32:0d:9c:9d:7a:eb:6b:7d:9c:
                    6d:a4:91:fe:ae:03:c3:57:a3:5a:76:e4:3a:01:6e:
                    8c:c5:0c:b6:82:8a:2a:c7:71:ab:01:97:52:28:ec:
                    a3:1b:b7:dd:bb:94:27:f2:33:95:67:dc:3a:6d:0e:
                    7d:4f:c2:26:35:16:b1:d4:30:67:00:63:b2:f6:e6:
                    e1:b9:7b:7b:91:f5:c3:b7:dd:c0:42:d0:87:93:71:
                    4f:f3:a7:11:ac:b0:e7:6b:bd:de:4a:c5:eb:bd:0f:
                    45:b8:f6:a3:23:86:b5:10:e4:dc:6e:32:03:e5:a8:
                    18:40:9a:f7:d7:9f:b6:f0:37:c2:6d:4f:0c:3c:b4:
                    d4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:5A:01:FE:D7:08:BB:61:F8:09:5F:0C:7D:0F:39:DD:33:5A:0E
            X509v3 Authority Key Identifier:
                keyid:1C:51:9C:D1:C4:15:92:5E:7F:CE:92:FD:A2:0F:F1:8E:C5:44:C7:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C519CD1C415925E7FCE92FDA20FF18EC544C74B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/1/3230332e3139362e302e302f32312d3332203d3e2034383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.196.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:d1:91:dc:8b:b4:7d:f8:6f:10:51:91:ec:77:af:78:2e:2f:
         51:88:59:84:5f:2e:b7:b3:b6:89:74:4d:14:c3:56:9f:53:83:
         27:f2:b4:dc:b8:5a:95:e5:29:ff:ab:fe:14:ee:93:80:c5:02:
         61:ce:66:cd:54:63:a8:b4:4e:ca:4b:52:b0:99:58:27:c9:83:
         f2:2b:1b:31:42:1e:6f:ec:3c:b4:6d:9d:35:6a:0f:c5:d1:f9:
         24:6d:0f:da:47:90:b7:b5:d9:aa:e6:1d:ae:61:e1:ea:2b:33:
         08:f2:e3:e2:3f:dd:d1:6a:1d:4a:93:ba:1b:27:23:e4:ce:33:
         85:85:46:e3:55:07:7d:66:ea:23:9c:40:93:46:4e:d4:68:3e:
         99:38:db:f2:a2:42:c6:42:53:ec:bb:42:e2:98:2f:2a:0b:67:
         5a:ce:6d:b0:62:c8:a6:cf:6f:1b:96:6f:43:4a:75:05:84:06:
         2f:7c:a5:7f:71:22:aa:69:eb:b9:1d:59:aa:4e:89:5f:95:e9:
         fa:bb:ed:92:61:fb:02:66:2e:f2:b9:54:21:21:07:8f:ec:77:
         c9:1a:ed:6a:ea:e1:58:be:be:5f:33:19:11:a0:84:14:6a:11:
         cc:f4:0e:c6:b1:d5:fa:3f:00:e6:49:71:14:7c:0b:13:a1:d1:
         d9:91:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:33 2026 by rpki-client