Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139362e302f32342d3234203d3e20313334373733.roa
File:                     3130332e3230312e3139362e302f32342d3234203d3e20313334373733.roa (raw, json)
Hash identifier:          7iELXq+Yo1iKdCfwoWEe9GpxFFCiI49dgr9eRC+Mc1U=
Subject key identifier:   C5:00:77:E2:8F:E5:7A:69:AB:11:7C:4C:95:44:C1:56:4B:D7:86:68
Certificate issuer:       /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial:       378F07E5042971F059F705A996FFB76575B98394
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139362e302f32342d3234203d3e20313334373733.roa
Signing time:             Fri 17 Apr 2026 02:24:46 +0000
ROA not before:           Fri 17 Apr 2026 02:19:46 +0000
ROA not after:            Fri 16 Apr 2027 02:24:46 +0000
asID:                     134773
IP address blocks:        103.201.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8f:07:e5:04:29:71:f0:59:f7:05:a9:96:ff:b7:65:75:b9:83:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
        Validity
            Not Before: Apr 17 02:19:46 2026 GMT
            Not After : Apr 16 02:24:46 2027 GMT
        Subject: CN=C50077E28FE57A69AB117C4C9544C1564BD78668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:a3:bd:d5:d9:2b:96:f3:20:6c:12:69:42:
                    22:44:1f:1d:ea:77:49:5f:63:04:3d:25:1f:7a:0d:
                    59:13:ee:33:58:ce:d6:53:cf:2c:08:b8:05:7f:f8:
                    09:4a:ff:2c:6c:cc:aa:61:a2:f4:9c:29:7d:93:28:
                    49:ef:d1:f9:b6:7b:9d:32:bb:84:80:6e:67:79:51:
                    aa:de:51:74:1d:31:66:b1:59:31:f9:49:09:6d:05:
                    b6:d3:c1:24:f0:e3:a3:c1:46:2d:ff:82:0f:a5:7d:
                    68:71:48:17:a7:c1:68:8d:54:9a:87:60:96:13:e1:
                    9b:2e:a5:f7:90:ae:6b:65:2c:b1:ae:50:19:e2:a7:
                    3a:44:bb:86:f0:d7:a5:1c:ba:ae:4f:41:41:8b:ab:
                    36:d1:b2:6c:05:e8:80:bd:3e:52:57:2d:99:90:b7:
                    62:5b:5e:93:59:b4:e9:d1:b7:b6:95:e0:80:14:fb:
                    fd:20:81:40:28:48:57:3a:9b:62:ec:62:7c:af:13:
                    7f:66:1b:39:fe:d0:ae:bf:39:bf:d2:08:74:49:a0:
                    fd:24:8a:e1:39:0b:fd:2b:5c:b7:b5:b5:32:10:f3:
                    65:50:e0:fd:26:07:b6:55:e3:15:99:95:e2:a8:23:
                    ca:4d:43:7b:ac:b0:00:f5:cf:45:36:23:ff:64:fe:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:00:77:E2:8F:E5:7A:69:AB:11:7C:4C:95:44:C1:56:4B:D7:86:68
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139362e302f32342d3234203d3e20313334373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.201.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:38:c3:05:d3:a0:76:ab:84:f7:a8:fb:fb:7d:1c:67:d6:55:
         0b:ed:92:e7:80:21:0c:cc:64:d6:e5:08:31:70:11:fc:ea:81:
         02:dc:78:e3:f1:e3:20:ea:44:3c:71:3f:42:23:8e:1f:73:fc:
         c0:1b:0e:1e:b2:f3:fc:c3:2c:d9:84:59:db:43:e3:04:36:d7:
         9e:33:cf:78:4f:52:2a:52:bf:09:44:c1:b8:2a:ae:ff:ef:37:
         86:b6:41:2d:ae:8f:c6:04:ae:24:b5:51:57:6b:7a:5f:5a:86:
         0d:a9:fb:54:42:ea:51:d1:eb:c2:eb:69:40:1d:c0:a5:0a:59:
         28:9b:dd:7d:f6:e8:5f:86:c6:27:90:e6:14:0b:df:60:0f:5d:
         44:ee:24:82:c1:c4:a2:ce:b6:60:07:44:11:ee:eb:e0:8b:30:
         bc:49:13:59:dd:91:d0:4d:10:c9:84:53:58:41:52:76:70:f5:
         5d:ec:30:53:17:4e:f0:8b:ea:d6:9f:77:bd:3a:24:89:7b:35:
         f5:c4:83:4c:39:72:17:87:e8:57:04:90:80:8e:4e:e3:ff:6c:
         b4:57:72:45:33:fb:01:15:d1:16:8f:46:34:65:9f:27:f7:aa:
         d3:9a:35:45:b7:ec:f0:6a:51:88:fb:a1:62:aa:5a:01:25:01:
         a4:78:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:29:41 2026 by rpki-client