Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e3130382e302f32322d3232203d3e20313531323936.roa
File:                     3130332e392e3130382e302f32322d3232203d3e20313531323936.roa (raw, json)
Hash identifier:          BQkj9JY42h/4Ktqm5PZu183HmciBKbXBVRuupkHRF58=
Subject key identifier:   EC:50:8F:15:55:1E:21:B3:45:BA:8E:5D:B7:C3:0E:05:06:03:9B:07
Certificate issuer:       /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
Certificate serial:       34C3A5FEE8AD1E535BF9ADD01E9ED2ACCB7C8F8B
Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e3130382e302f32322d3232203d3e20313531323936.roa
Signing time:             Fri 17 Apr 2026 07:59:10 +0000
ROA not before:           Fri 17 Apr 2026 07:54:10 +0000
ROA not after:            Fri 16 Apr 2027 07:59:10 +0000
asID:                     151296
IP address blocks:        103.9.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c3:a5:fe:e8:ad:1e:53:5b:f9:ad:d0:1e:9e:d2:ac:cb:7c:8f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF
        Validity
            Not Before: Apr 17 07:54:10 2026 GMT
            Not After : Apr 16 07:59:10 2027 GMT
        Subject: CN=EC508F15551E21B345BA8E5DB7C30E0506039B07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:cd:18:6d:ef:05:4a:d0:95:ab:4a:85:48:
                    06:29:95:79:c5:21:c6:e0:ff:36:b7:72:ca:78:a1:
                    87:7f:ad:b9:89:41:5e:f3:9a:e2:4c:61:97:ee:7f:
                    0f:7d:56:bc:c4:4a:38:d3:8e:44:4c:29:59:6c:eb:
                    28:8d:bc:eb:fa:0e:a6:e9:6e:14:25:53:de:95:a1:
                    08:09:26:50:55:b5:ac:9c:67:f3:cb:36:6b:77:fc:
                    af:55:53:eb:0e:75:f0:c1:86:cd:95:cb:4f:92:2e:
                    b8:fe:94:6d:d1:f5:32:d9:3f:99:39:11:62:71:85:
                    2a:69:36:95:1a:1b:a1:0a:99:88:fa:77:b2:31:1b:
                    a9:72:d8:1b:c9:13:8e:94:84:04:b9:cd:2d:e1:62:
                    09:c8:27:12:06:06:f5:7c:d5:61:2f:9e:aa:03:37:
                    7f:1c:fa:20:8b:3e:47:2f:f4:fe:a2:54:db:3b:46:
                    59:54:47:75:4f:72:c2:cf:8b:ad:26:d7:82:02:36:
                    56:15:04:a4:13:20:37:6d:74:da:e3:44:e5:21:16:
                    f2:d4:1f:fa:4a:a8:2d:04:9c:f4:1a:9d:81:2e:d4:
                    e2:8d:72:be:ce:e5:8f:53:be:b0:ed:6b:05:2e:aa:
                    56:1c:45:9b:5b:59:3b:9b:13:df:49:d2:1f:76:37:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:50:8F:15:55:1E:21:B3:45:BA:8E:5D:B7:C3:0E:05:06:03:9B:07
            X509v3 Authority Key Identifier:
                keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/3130332e392e3130382e302f32322d3232203d3e20313531323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:c3:3a:58:c7:2f:9c:f0:23:7d:d8:86:cf:f4:b3:0d:c2:25:
         5b:4c:f8:38:ba:39:51:2e:4b:9c:3b:e6:41:be:6e:06:70:4e:
         3a:cf:7f:d0:24:0b:ce:7d:80:ca:b7:29:52:a5:0f:ed:93:fc:
         f2:e6:9e:c4:31:45:0c:2c:b9:bd:fe:f3:54:b9:91:55:e7:c4:
         e6:d0:a3:0c:af:1b:49:91:70:a2:02:dc:81:36:17:ed:9b:98:
         07:61:ac:a9:14:bf:4c:9e:ed:53:29:28:2e:7d:13:2b:12:d6:
         ce:f7:d3:ae:73:78:09:32:7b:5c:24:72:1e:ab:ca:5e:17:f9:
         06:e7:69:59:dd:d3:b3:54:38:9e:0a:bd:d7:ad:06:47:2b:01:
         02:df:3c:20:cc:7a:db:aa:70:46:f7:fb:74:6a:93:aa:fd:b7:
         0a:fa:61:8f:4b:e8:34:91:a2:c9:b9:13:c6:b6:62:df:84:28:
         47:27:37:c5:07:d0:b6:03:24:47:55:43:82:cb:7a:9d:c1:16:
         79:c0:9d:8f:03:e6:48:3a:4a:4f:ba:65:e3:f8:f2:78:ef:a8:
         75:23:7e:56:f0:f4:e9:5e:80:e4:91:f1:a5:86:60:08:8c:fe:
         eb:cf:a2:00:f5:0f:bd:6d:bc:0d:c7:33:ed:83:cd:fa:0c:84:
         a2:ff:79:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:32:22 2026 by rpki-client