Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34312e3131362e302f32322d3232203d3e203535393931.roa
File:                     3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (raw, json)
Hash identifier:          AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=
Subject key identifier:   BC:84:16:1C:7B:92:D5:5A:DA:45:A5:AD:D7:4B:70:5B:DA:7F:09:F2
Certificate issuer:       /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial:       4DE5B8A825C388CD932281E05A473AACBEBDE2A7
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34312e3131362e302f32322d3232203d3e203535393931.roa
Signing time:             Wed 15 Apr 2026 08:21:45 +0000
ROA not before:           Wed 15 Apr 2026 08:16:45 +0000
ROA not after:            Wed 14 Apr 2027 08:21:45 +0000
asID:                     55991
IP address blocks:        103.41.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e5:b8:a8:25:c3:88:cd:93:22:81:e0:5a:47:3a:ac:be:bd:e2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
        Validity
            Not Before: Apr 15 08:16:45 2026 GMT
            Not After : Apr 14 08:21:45 2027 GMT
        Subject: CN=BC84161C7B92D55ADA45A5ADD74B705BDA7F09F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:6c:b6:cf:81:b6:b9:43:6f:59:c5:ae:b4:
                    9b:88:cb:6f:65:03:1b:15:c5:97:91:d8:e6:bd:ba:
                    7f:7f:2e:78:0c:d8:6c:f0:cd:82:6a:52:c7:a4:11:
                    04:de:e5:17:7e:a2:c3:43:f9:23:cf:e2:a0:f0:f0:
                    1b:d5:b3:fc:d5:94:12:33:2f:0e:1a:95:51:5b:6d:
                    9f:b7:d1:28:9b:7e:40:5c:96:c2:8e:21:58:89:d3:
                    bf:64:f0:2f:b0:ff:e7:3a:02:b1:ef:f3:b1:71:76:
                    d9:28:f0:95:66:5a:e8:b9:7f:a9:c1:7a:ff:5f:81:
                    ba:f6:18:04:5f:5e:51:47:a2:c5:04:39:c8:c8:52:
                    94:78:22:7c:c8:24:a7:9c:bf:86:d1:1c:2f:64:e9:
                    eb:a8:dd:f8:3b:7e:78:2d:97:bc:79:c9:9d:76:a7:
                    17:f1:00:1b:4c:8c:99:1d:40:52:df:8e:da:5e:3c:
                    d1:cf:0e:e7:94:78:0d:b2:d2:57:cd:e4:f6:ef:ab:
                    3d:d0:69:a4:c4:d1:ae:2b:9e:c9:f9:bb:52:01:b9:
                    3b:2e:3c:ef:8a:8c:f4:b9:bb:e0:64:0f:80:45:c7:
                    5d:1a:ad:2b:8a:ca:ce:9f:17:ff:66:32:e0:1d:5e:
                    6e:3e:fc:25:2b:38:11:d8:e5:9b:46:f9:a1:71:98:
                    74:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:84:16:1C:7B:92:D5:5A:DA:45:A5:AD:D7:4B:70:5B:DA:7F:09:F2
            X509v3 Authority Key Identifier:
                keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34312e3131362e302f32322d3232203d3e203535393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:0f:09:18:af:d4:f9:8b:f0:71:25:25:7b:6c:92:d3:bf:
         8d:7f:73:17:46:9d:50:53:b4:03:b1:99:b4:14:8a:21:bf:a3:
         58:2a:4f:c5:ae:52:a0:00:63:62:4e:87:fb:88:fd:b8:03:44:
         4e:53:c8:15:7c:2d:e4:14:e2:4a:ed:3a:70:95:d4:d8:73:1b:
         53:d0:36:76:3c:7f:15:fa:df:e8:70:e8:fc:5d:c9:5d:3f:5f:
         3f:bb:bc:d8:9c:fd:f6:75:65:87:af:c2:ee:b8:f0:57:6c:38:
         bb:e2:b2:a5:93:bd:82:93:72:08:5b:10:f1:aa:f3:65:de:9e:
         ce:c3:85:23:5a:e3:fc:34:b7:f7:37:9b:7a:ba:67:ab:a2:3c:
         82:95:dd:56:cb:d8:e4:05:72:cd:7c:7f:0e:62:40:0b:50:66:
         2d:d3:52:1b:2e:af:74:70:de:b8:1e:9e:bb:a0:2a:e0:15:0d:
         dc:bb:2b:3d:41:55:03:ac:4e:8b:23:a2:df:da:2c:aa:86:ab:
         a2:94:e3:95:dc:be:18:1b:2f:34:21:e3:06:d2:75:10:ea:a0:
         1b:98:77:e5:f1:58:64:43:52:54:26:0b:80:6b:11:e4:67:39:
         52:7d:f8:45:c7:af:15:23:b4:53:98:c6:4b:a2:de:41:0f:c9:
         e3:62:df:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:49 2026 by rpki-client