Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313430383639.roa
File:                     3130332e3131382e3231362e302f32322d3234203d3e20313430383639.roa (raw, json)
Hash identifier:          m6MzR/h45zvKU3jyD7WHizNsTE0dtAWHQMBbYOKYcQ0=
Subject key identifier:   49:4E:B3:F4:51:0E:07:51:77:FF:E7:09:FF:20:E2:CE:9E:2D:D7:E2
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       314F2206CF36E081D626E9C46B40D5237A82CA07
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313430383639.roa
Signing time:             Mon 02 Feb 2026 10:13:58 +0000
ROA not before:           Mon 02 Feb 2026 10:08:58 +0000
ROA not after:            Mon 01 Feb 2027 10:13:58 +0000
asID:                     140869
IP address blocks:        103.118.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4f:22:06:cf:36:e0:81:d6:26:e9:c4:6b:40:d5:23:7a:82:ca:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Feb  2 10:08:58 2026 GMT
            Not After : Feb  1 10:13:58 2027 GMT
        Subject: CN=494EB3F4510E075177FFE709FF20E2CE9E2DD7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:c8:aa:c4:a7:66:ec:a9:fd:02:ce:ac:47:
                    a3:c1:3b:b6:0f:9e:d9:13:cc:9c:78:1d:74:73:8f:
                    84:c3:2b:85:9c:1a:7c:f1:2a:cb:59:bf:69:41:bf:
                    d3:03:27:68:d6:34:eb:19:2e:b8:12:4d:c1:54:9d:
                    24:13:ff:54:e3:d1:0e:57:03:20:44:60:b2:6d:e0:
                    b3:b5:da:74:4b:5e:0f:b1:69:53:0c:3c:db:1e:e2:
                    a6:9e:da:83:78:07:02:31:86:ed:e3:fb:e9:d4:5f:
                    c7:fe:18:62:cc:6f:1f:89:9e:96:65:f6:db:a0:cc:
                    76:ce:e6:fd:19:42:69:ca:4c:a7:59:b2:a7:45:cf:
                    f6:70:38:15:a7:9c:ec:f5:84:09:f9:28:2c:33:8a:
                    be:5e:c7:6a:b2:e7:53:51:66:d6:06:a4:8c:01:93:
                    69:67:1e:7a:8d:8d:6b:6a:b5:28:2a:ab:22:44:c5:
                    24:56:1a:62:51:ed:7e:52:8c:6c:db:dc:10:88:21:
                    d5:ee:e8:92:fa:7e:b1:9c:0c:fc:50:eb:91:fd:e9:
                    20:b0:83:0a:c4:d8:5e:ed:8e:c0:cd:fb:1d:bb:64:
                    33:38:9c:2d:43:09:9c:8a:50:f2:3d:5b:69:90:7f:
                    46:0f:9b:ec:3e:0d:9b:90:92:87:53:a9:9d:7f:6c:
                    34:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4E:B3:F4:51:0E:07:51:77:FF:E7:09:FF:20:E2:CE:9E:2D:D7:E2
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231362e302f32322d3234203d3e20313430383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:7a:e4:84:8a:30:38:db:3a:08:c1:88:36:39:78:db:b6:b5:
         b5:a7:64:c1:b1:fc:50:97:c9:ac:77:d0:89:0a:a7:00:53:2a:
         cf:ab:7c:ee:74:ba:49:c1:47:6a:ef:db:37:78:16:fd:30:84:
         e6:a6:73:50:18:f8:34:1a:15:9a:2f:da:a7:22:91:1b:d8:33:
         d4:f5:3f:b2:73:7d:99:36:79:b2:56:a5:24:6e:cf:28:f5:d5:
         2b:ce:8e:b6:09:30:af:3c:31:ad:d1:50:4a:af:ef:b3:5c:f8:
         19:1b:97:d7:44:60:1a:e9:67:3d:58:45:d2:52:1c:65:11:d8:
         40:eb:19:7b:42:3d:a4:dc:ba:6d:28:23:13:20:ef:15:bd:61:
         0d:e0:34:8f:62:af:92:e2:aa:6a:71:d7:57:bb:94:f2:45:21:
         fe:49:21:e1:cb:96:e0:ff:bb:d8:ba:c9:18:d8:1e:7d:cc:4f:
         af:f4:99:91:99:27:68:95:2e:b1:2a:04:34:f6:5c:db:9b:2c:
         49:aa:27:4a:56:ba:c8:7e:84:79:b8:1a:66:98:8c:7f:9a:0e:
         e4:bc:e7:2d:71:2a:10:34:17:cb:a3:96:b9:27:6e:65:f7:d2:
         f2:c6:f6:2f:0e:65:c1:4e:c9:d6:9a:ba:36:39:47:96:b0:1d:
         d0:49:73:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:42:07 2026 by rpki-client