Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133362e302f32342d3234203d3e20313531323935.roa
File:                     3130332e3231362e3133362e302f32342d3234203d3e20313531323935.roa (raw, json)
Hash identifier:          9kHoyMHbc5Lo9JrmsxQ0p4owCPiQ4h7ry2QhVrlEM6E=
Subject key identifier:   41:98:1A:68:FE:59:23:A5:3B:C5:5A:2D:1B:87:CF:43:36:67:0F:AE
Certificate issuer:       /CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
Certificate serial:       647F33B50C1FE50148BE81D8949A6B908A47035F
Authority key identifier: EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133362e302f32342d3234203d3e20313531323935.roa
Signing time:             Fri 17 Apr 2026 08:10:08 +0000
ROA not before:           Fri 17 Apr 2026 08:05:08 +0000
ROA not after:            Fri 16 Apr 2027 08:10:08 +0000
asID:                     151295
IP address blocks:        103.216.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:7f:33:b5:0c:1f:e5:01:48:be:81:d8:94:9a:6b:90:8a:47:03:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5
        Validity
            Not Before: Apr 17 08:05:08 2026 GMT
            Not After : Apr 16 08:10:08 2027 GMT
        Subject: CN=41981A68FE5923A53BC55A2D1B87CF4336670FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:b6:d1:78:e2:fe:6a:06:4a:e4:3b:7d:2b:
                    73:37:03:7f:42:6d:03:0a:d8:ce:e3:51:65:00:36:
                    93:0b:bc:de:e5:93:83:48:7b:1a:69:cf:d3:39:fd:
                    5c:34:84:42:07:47:f1:0a:ed:06:87:0b:8e:d0:33:
                    06:ca:d7:b5:52:6f:d2:39:7f:5e:c8:40:81:46:03:
                    dd:dc:17:aa:25:37:84:b9:5e:5f:a0:a9:b0:cc:b9:
                    4f:47:e1:e1:ce:3f:37:ea:28:52:13:b0:e5:8e:30:
                    a8:62:38:d7:f5:50:54:86:94:78:77:3e:49:2f:e9:
                    07:66:36:4f:14:e3:ba:48:3c:a7:02:eb:f9:6f:1f:
                    a6:00:b2:ec:40:23:55:21:d0:45:c7:1c:bd:a0:7a:
                    09:41:7e:c5:3f:7f:d2:28:ab:8a:4c:99:74:d0:fa:
                    89:9c:bb:6d:4a:1d:de:3d:29:10:f8:4d:84:d2:3c:
                    ab:23:a4:51:8c:52:6c:70:4c:81:a6:2c:00:0a:45:
                    2a:79:94:cf:26:16:6b:e5:92:27:34:38:bb:7c:ef:
                    c5:55:ba:17:57:b5:6b:6e:61:96:4a:b3:e1:41:4f:
                    98:49:45:6b:23:85:fc:00:6f:46:30:07:73:5d:f0:
                    dc:ea:2e:0a:72:50:0b:d9:7b:ab:91:e2:ad:2c:54:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:98:1A:68:FE:59:23:A5:3B:C5:5A:2D:1B:87:CF:43:36:67:0F:AE
            X509v3 Authority Key Identifier:
                keyid:EF:71:80:BB:CF:EE:6A:47:CF:C4:29:C1:F6:1B:F4:C2:69:F8:19:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EF7180BBCFEE6A47CFC429C1F61BF4C269F819D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265682433/0/3130332e3231362e3133362e302f32342d3234203d3e20313531323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:df:27:d8:e6:7b:ee:61:87:02:9c:44:89:18:e2:7f:66:4a:
         77:78:55:e5:94:dd:85:7f:1b:b9:8e:2b:c8:9b:65:c4:ba:f9:
         98:d9:f4:39:9e:4c:97:09:95:f7:8c:9d:ac:66:56:d6:a4:93:
         7b:74:13:5d:02:ab:a2:ff:2b:cc:f8:32:8b:4a:0b:4d:9e:7c:
         e7:8a:0b:6d:35:d3:b6:81:a9:23:a5:ef:d4:d5:9a:73:18:a5:
         c7:06:e4:78:09:02:cd:b5:8a:3e:c7:b6:4c:11:3b:cc:dc:f3:
         48:27:cc:39:79:d5:03:f2:42:e3:53:64:78:ef:20:6a:42:4c:
         b3:9a:09:8d:70:05:64:b7:77:f5:ec:ef:42:d2:c5:14:bc:d6:
         e7:90:7a:86:1c:d3:83:a4:30:86:d5:24:51:9c:72:c9:82:57:
         6f:a3:f3:d7:78:2e:08:39:f8:cd:52:50:a6:92:ed:11:f2:8d:
         75:1b:a5:0a:f0:c1:45:ea:b1:81:3a:11:61:5f:76:ee:45:bb:
         2d:49:4b:de:a0:8f:8d:4c:31:8d:f3:74:cc:83:8c:16:36:59:
         95:45:ea:47:9e:0c:f1:37:0f:7c:11:86:3f:c5:55:27:1b:35:
         80:1e:4a:96:2b:e9:15:68:61:04:76:fb:f4:99:d4:42:63:c3:
         18:e5:fa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:00:28 2026 by rpki-client