Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232382e302f32342d3234203d3e2034383337.roa
File:                     3130332e32342e3232382e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          EkHOAQ9SZLQtgUKfohxIGCu30Zcv63COLPGEXCHOHaY=
Subject key identifier:   75:4A:69:3F:AB:69:C8:93:24:21:1A:99:06:70:68:6B:70:AD:40:36
Certificate issuer:       /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial:       04D33BD17F27EA05EED7A580C33BFC4CB20EB687
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232382e302f32342d3234203d3e2034383337.roa
Signing time:             Thu 09 Apr 2026 07:14:38 +0000
ROA not before:           Thu 09 Apr 2026 07:09:38 +0000
ROA not after:            Thu 08 Apr 2027 07:14:38 +0000
asID:                     4837
IP address blocks:        103.24.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 03:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d3:3b:d1:7f:27:ea:05:ee:d7:a5:80:c3:3b:fc:4c:b2:0e:b6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
        Validity
            Not Before: Apr  9 07:09:38 2026 GMT
            Not After : Apr  8 07:14:38 2027 GMT
        Subject: CN=754A693FAB69C89324211A990670686B70AD4036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:8e:06:d4:aa:b6:59:e2:1c:02:0b:e0:4e:
                    f7:30:14:ab:e6:7c:0f:9d:54:9d:0d:21:96:dc:76:
                    6e:fe:e8:ba:0a:41:3b:5b:e6:07:71:10:4a:e9:9f:
                    57:02:22:30:97:d4:75:39:04:07:36:00:77:11:76:
                    a5:84:7d:27:48:73:c4:8d:76:60:5b:23:f9:d7:a0:
                    ef:69:ac:2b:0f:2b:cb:cb:25:d8:81:53:ce:31:1c:
                    dd:aa:c5:49:d1:9a:bf:10:60:61:88:83:b3:9a:ea:
                    44:1f:ca:c1:d3:ce:66:5c:8a:17:d7:09:98:da:0d:
                    15:8d:b7:f3:95:c0:96:2e:30:8f:48:e1:78:7e:f3:
                    2a:1a:e8:87:38:e2:84:c1:36:9f:04:10:c9:36:28:
                    55:36:18:4f:cb:7b:c5:4e:1f:ed:2b:88:4f:1f:03:
                    40:44:c6:70:c9:6a:d5:13:7b:7e:87:fc:ea:73:6e:
                    39:67:bb:1e:73:47:96:ed:82:b6:f1:27:84:10:12:
                    c4:5b:74:c6:19:2c:2f:72:c4:43:d8:44:d6:75:9d:
                    cd:9e:cd:c0:4a:02:b2:cb:9b:6f:39:c9:35:a7:ce:
                    b0:4c:46:25:21:7d:80:81:98:ab:d5:f3:fd:53:4c:
                    3e:da:1f:0f:a9:0b:a3:ee:b3:40:3f:90:38:17:e3:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4A:69:3F:AB:69:C8:93:24:21:1A:99:06:70:68:6B:70:AD:40:36
            X509v3 Authority Key Identifier:
                keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232382e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:ca:e4:32:15:99:81:fd:72:36:5b:7d:fb:53:a8:68:33:bd:
         a4:8d:1a:88:a3:58:0e:c9:90:96:11:ca:eb:c2:50:f0:1c:70:
         1f:18:96:cc:91:99:fe:6d:95:ba:3a:0e:8d:ef:69:35:47:04:
         e4:47:53:56:b3:4c:cd:7e:1e:61:de:9f:19:0c:32:70:12:bd:
         b4:65:f1:4f:9c:2c:95:c5:c6:c4:3e:3e:11:9c:37:3e:d2:41:
         36:ab:84:dc:8c:67:5a:d2:2b:31:93:23:a7:6f:70:e5:c2:c8:
         19:d7:fb:1d:8c:cb:55:6b:10:fa:9a:c8:c6:5c:77:74:a4:ee:
         26:ee:b3:b5:b9:57:d7:db:d4:98:d1:19:ec:0b:44:5f:2e:4a:
         99:89:33:6c:e0:89:36:21:43:c1:72:f0:43:7d:46:3e:f9:43:
         fc:76:12:bc:a0:80:2c:e0:22:05:1f:44:a4:c1:b6:95:ee:e4:
         37:9a:9f:6d:ea:8f:7e:50:54:0a:a3:6c:d9:ae:cc:93:99:37:
         76:4a:79:21:02:9f:5b:c1:30:d1:17:ab:2a:61:08:5c:39:39:
         b2:0c:db:2f:13:e3:c2:db:05:92:61:ca:a5:72:2c:f3:50:3a:
         4c:a1:99:1d:90:b2:55:5f:d9:28:db:95:0a:2d:bb:3f:cd:a6:
         36:8b:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:11:15 2026 by rpki-client