Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232382e302f32342d3234203d3e2034383132.roa
File:                     3130332e3230302e3232382e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier:          RFU/qJLN+5B9SdDg8Y3iTjzK4SYsOHlBH4sQZocbwHQ=
Subject key identifier:   04:BA:4D:08:33:EC:DA:37:A6:A6:8C:55:69:3D:F6:CC:77:B6:80:38
Certificate issuer:       /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial:       53550222DDD13FA2B8C5F91B90DA60BF51521577
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232382e302f32342d3234203d3e2034383132.roa
Signing time:             Fri 17 Apr 2026 06:23:24 +0000
ROA not before:           Fri 17 Apr 2026 06:18:24 +0000
ROA not after:            Fri 16 Apr 2027 06:23:24 +0000
asID:                     4812
IP address blocks:        103.200.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:55:02:22:dd:d1:3f:a2:b8:c5:f9:1b:90:da:60:bf:51:52:15:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
        Validity
            Not Before: Apr 17 06:18:24 2026 GMT
            Not After : Apr 16 06:23:24 2027 GMT
        Subject: CN=04BA4D0833ECDA37A6A68C55693DF6CC77B68038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:3e:2e:e3:5e:eb:cb:64:8d:3c:ff:f3:5d:
                    34:22:65:07:c0:c5:f2:1c:e3:e7:b9:1b:c2:a7:6b:
                    27:75:69:af:a9:bb:32:6a:f6:d1:26:ad:e9:70:70:
                    e3:80:4f:51:87:dd:16:58:90:4c:3c:59:10:ad:fe:
                    d0:63:05:22:f4:a2:ab:26:8d:0a:62:2d:ca:a3:58:
                    1a:f3:16:a3:c3:cd:f4:51:62:a6:3c:e8:72:9e:fb:
                    9a:eb:7d:de:c1:94:ed:4a:2d:53:0d:cc:d6:44:67:
                    fa:18:d8:47:ee:7a:ad:75:3f:ba:24:9a:4d:ca:d4:
                    eb:e2:b0:e9:81:1c:21:28:83:c2:ae:16:d0:23:fc:
                    54:b6:60:c6:cf:8b:3e:77:54:a1:5e:ae:7b:aa:04:
                    36:1d:3f:56:5f:fe:3b:b5:1c:c5:95:f0:8e:39:73:
                    34:0e:2c:1d:1a:ba:f8:10:c9:1b:1b:c7:14:25:2f:
                    f1:8e:2b:6d:4c:b5:d7:ae:ec:53:bf:24:32:0e:f2:
                    3d:02:da:06:11:3e:af:3c:1d:27:d5:cd:83:9b:e2:
                    77:0e:89:31:cb:ae:2b:b6:16:a1:e5:d0:5d:45:0e:
                    03:d1:5f:1e:a0:c9:26:a0:9a:42:9a:c0:1f:3c:23:
                    90:4f:01:14:ca:da:0d:50:b8:80:83:60:27:84:10:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BA:4D:08:33:EC:DA:37:A6:A6:8C:55:69:3D:F6:CC:77:B6:80:38
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230302e3232382e302f32342d3234203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:d4:05:1d:b4:a8:e0:a6:be:4b:cc:cd:bf:fa:6e:36:84:1f:
         ee:f6:7d:6b:eb:04:8a:f0:d5:a7:f6:30:74:8d:b6:0f:c1:1a:
         cc:f0:91:5a:fb:56:4d:3b:03:58:1f:ba:c2:7e:d0:6f:f2:68:
         6f:b1:24:c8:14:c3:ab:0a:74:1d:b2:03:7d:77:8c:28:78:fa:
         28:3c:5c:d4:ff:80:ec:25:08:ea:35:9b:6a:87:89:fb:a5:e2:
         f8:59:cb:e3:ae:bb:f5:68:ac:27:83:3b:14:6f:75:68:55:f0:
         06:97:93:b0:65:3f:b1:ea:12:01:71:3a:64:9a:b9:26:02:ad:
         45:76:16:86:22:0d:ec:91:d5:c5:7f:51:18:d9:77:5b:a5:3a:
         f3:b0:92:d1:92:0e:12:e3:a8:77:6e:da:69:10:2b:ca:8f:dd:
         35:1b:42:df:e6:c6:f8:c7:38:67:cc:26:a0:8e:05:dd:43:03:
         ff:b6:a9:7b:fa:73:12:f9:62:4a:8f:57:c5:24:ed:65:ee:e1:
         46:3a:32:ff:eb:91:71:5f:4e:03:44:07:04:d1:0b:f2:b6:b2:
         56:4c:76:98:39:22:44:f4:01:fd:fb:83:b0:7c:a3:b7:a5:22:
         2c:86:c0:67:8a:8c:82:fa:18:32:53:cb:22:f2:61:62:25:0f:
         8f:ae:4b:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:22:26 2026 by rpki-client