Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/3230322e3133362e34382e302f32322d3234203d3e203234313433.roa
File:                     3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (raw, json)
Hash identifier:          PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=
Subject key identifier:   4A:82:C3:0D:B8:79:CF:86:43:80:8D:3B:B2:C3:2D:34:CD:63:52:48
Certificate issuer:       /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial:       548266C557D39DA1416BBF7D8442ECCF5A962F7B
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/3230322e3133362e34382e302f32322d3234203d3e203234313433.roa
Signing time:             Thu 16 Apr 2026 02:36:01 +0000
ROA not before:           Thu 16 Apr 2026 02:31:01 +0000
ROA not after:            Thu 15 Apr 2027 02:36:01 +0000
asID:                     24143
IP address blocks:        202.136.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:82:66:c5:57:d3:9d:a1:41:6b:bf:7d:84:42:ec:cf:5a:96:2f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
        Validity
            Not Before: Apr 16 02:31:01 2026 GMT
            Not After : Apr 15 02:36:01 2027 GMT
        Subject: CN=4A82C30DB879CF8643808D3BB2C32D34CD635248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:68:2e:4f:4d:d0:e3:7c:0a:2d:31:d2:46:
                    d3:91:bb:f0:fe:fa:39:5c:5e:85:dd:c2:92:d1:91:
                    0a:a3:7e:cb:1e:c3:18:8e:a2:f2:04:5f:d0:f6:5d:
                    05:b5:26:05:6b:20:6c:0f:05:b3:d7:f4:9a:0c:70:
                    e4:60:33:68:c8:53:b5:3c:00:16:e1:59:36:2b:92:
                    64:c3:c1:43:7b:10:ff:ca:04:69:85:9f:b6:4b:ad:
                    b4:0b:ff:2b:01:c0:b9:cf:51:d4:97:77:4c:5f:48:
                    fb:13:25:39:41:18:30:b1:ad:6d:ca:c4:d8:19:71:
                    0b:2d:30:81:c9:78:92:c2:7b:26:7e:34:cd:03:cb:
                    9b:6a:a0:7a:c5:41:fd:a2:3f:6c:d0:cb:8b:76:1b:
                    21:4f:4b:18:d1:a3:0f:0f:5b:17:de:26:19:db:d4:
                    3a:5f:f1:f4:01:c7:0a:c9:8d:c1:6f:e1:b0:6d:a5:
                    66:24:b3:61:e5:a2:d2:35:3b:46:6a:14:e2:f5:d9:
                    29:c3:1b:93:32:37:86:01:28:42:4a:df:75:bf:5a:
                    ea:ab:2a:24:65:8f:38:a5:08:64:d1:e4:54:f4:ed:
                    1d:61:d3:a5:3b:a7:e6:0e:82:09:21:6b:36:5a:09:
                    3c:5d:ec:6f:b5:34:4f:83:e8:31:7c:fd:ca:7c:a3:
                    c7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:82:C3:0D:B8:79:CF:86:43:80:8D:3B:B2:C3:2D:34:CD:63:52:48
            X509v3 Authority Key Identifier:
                keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/3230322e3133362e34382e302f32322d3234203d3e203234313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.136.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:f7:61:9c:e3:4b:54:ca:07:85:8c:46:85:f6:35:f0:55:93:
         e7:a9:76:55:8a:4c:41:e0:aa:5a:4d:27:51:dc:e2:eb:ad:a1:
         6a:a7:a1:ac:a6:54:de:65:3d:72:15:9a:3f:df:91:0f:64:41:
         28:56:a5:07:0e:56:4d:ae:40:fb:23:0e:a0:37:40:c9:2c:83:
         e6:bb:6d:ec:42:87:ee:a2:58:e7:77:bd:d3:f0:7e:bd:a1:26:
         a8:0d:ed:38:6a:3a:05:1d:e0:f6:f2:49:fc:50:1f:00:75:9d:
         78:c1:95:28:3b:91:7c:81:69:0e:55:6d:20:d7:dd:4c:bf:fd:
         b8:16:ba:7d:63:4b:03:32:be:b4:4c:37:7c:7c:80:8e:de:4d:
         69:c2:5a:6e:18:78:d0:45:86:0f:4d:04:ef:1d:2f:e5:8b:b6:
         c3:bc:0f:41:08:b7:c5:91:21:18:fc:f2:95:fa:15:24:e2:a5:
         a8:6a:29:d1:53:a2:08:50:c1:e3:80:9e:b2:7e:22:0f:0c:9c:
         63:fc:94:0c:c4:4b:cd:ad:18:e1:e2:8a:7f:00:d8:53:b4:17:
         64:02:bb:80:68:74:6c:47:2d:c7:2e:06:39:01:80:63:54:d0:
         24:a2:bf:dc:f3:a1:af:95:6f:f6:fe:d6:39:06:24:4b:d4:47:
         a1:a9:03:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:29:42 2026 by rpki-client