Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e3133322e302e302f31352d3234203d3e203337393633.roa
File:                     3130312e3133322e302e302f31352d3234203d3e203337393633.roa (raw, json)
Hash identifier:          PgEayyjblxwmQtn5/ykMvfP/SGAD+IM6RqvWkL7jT/M=
Subject key identifier:   98:2D:FD:EB:64:DF:E6:0E:BE:7D:AE:4B:1B:50:2C:87:1C:36:9D:59
Certificate issuer:       /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial:       46249B3BD082583E7AB8575752C2A32346E6A5E2
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e3133322e302e302f31352d3234203d3e203337393633.roa
Signing time:             Thu 16 Apr 2026 02:04:08 +0000
ROA not before:           Thu 16 Apr 2026 01:59:08 +0000
ROA not after:            Thu 15 Apr 2027 02:04:08 +0000
asID:                     37963
IP address blocks:        101.132.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 11:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:24:9b:3b:d0:82:58:3e:7a:b8:57:57:52:c2:a3:23:46:e6:a5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
        Validity
            Not Before: Apr 16 01:59:08 2026 GMT
            Not After : Apr 15 02:04:08 2027 GMT
        Subject: CN=982DFDEB64DFE60EBE7DAE4B1B502C871C369D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a2:8f:fa:0c:0d:d2:8b:cc:83:15:94:bb:d5:
                    69:f6:c5:59:65:c2:5b:68:ca:d1:ba:53:f6:f0:ec:
                    ac:1e:12:2f:8c:f4:a9:dd:17:a2:68:49:d3:d8:9d:
                    10:4b:e4:d5:74:0f:f0:dc:bd:eb:2d:50:29:88:a2:
                    b5:41:a5:36:f7:b9:69:a3:2e:c0:88:c5:e3:45:4a:
                    cf:96:96:27:17:9d:ba:f7:a0:bc:bd:57:69:bb:43:
                    36:01:7a:e7:4b:87:0b:ab:e8:ea:22:79:dd:5d:a2:
                    24:1a:6d:ad:be:88:45:f1:1c:5f:f2:7e:67:91:56:
                    7c:1b:ab:5c:30:dc:fd:88:08:66:d0:2d:98:4f:30:
                    c4:53:b4:df:ab:32:71:71:22:55:9f:35:1c:9a:29:
                    99:09:82:38:b3:f1:d7:3e:42:dd:43:d3:36:ab:b8:
                    dd:28:83:55:e4:df:89:d0:94:4c:d7:da:5b:7a:bd:
                    be:58:3c:b4:64:cc:99:37:0e:53:2a:3b:88:3c:7b:
                    6b:d1:4a:af:8b:19:97:4c:8c:96:15:25:0e:e6:c1:
                    ee:ea:bf:02:e1:ec:d8:a2:f4:d9:7a:a7:30:33:a6:
                    5c:3f:5c:cc:82:4d:9c:74:c0:0b:61:bd:06:bc:9f:
                    b5:c4:cc:43:8e:67:77:72:6e:bd:f7:eb:33:6c:32:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2D:FD:EB:64:DF:E6:0E:BE:7D:AE:4B:1B:50:2C:87:1C:36:9D:59
            X509v3 Authority Key Identifier:
                keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3130312e3133322e302e302f31352d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.132.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:35:cb:8e:9d:3b:fa:c4:c7:3c:4c:e4:23:3c:22:a8:dd:
         43:6f:6f:40:1f:00:0d:86:f1:63:c4:51:5e:9d:c1:40:8b:e3:
         ff:8b:91:1a:be:94:ea:a4:48:4d:d4:09:a3:37:99:51:fd:f8:
         5b:c3:43:0f:80:91:46:50:54:54:96:15:95:80:43:c5:01:89:
         27:85:3d:24:e0:8b:ab:c4:10:cc:df:05:7e:be:45:c3:62:eb:
         83:cb:68:fe:31:2e:2b:0f:25:ef:32:13:79:4f:e3:2c:9a:54:
         a2:80:d5:ac:09:33:d5:fc:a0:07:16:69:eb:a9:4f:df:7c:da:
         b0:e4:63:42:f0:12:96:65:cf:17:3c:e8:39:bc:a9:58:9a:32:
         13:37:38:cc:a3:ea:a3:c9:96:1d:6a:2c:4f:5a:f7:c0:c1:6a:
         91:22:e0:05:e7:78:d7:f2:18:4c:90:9c:4b:9b:a9:53:6f:a0:
         db:1d:0b:b9:8e:ba:a3:37:38:04:14:37:da:cb:c3:bc:fb:25:
         22:13:c1:49:c5:d7:1f:20:cc:9a:05:20:ca:8d:a9:ab:29:ca:
         ec:a1:70:c1:95:05:8f:2b:32:22:4e:c0:02:62:4e:d3:59:cd:
         88:18:02:87:76:bb:92:3f:d8:ba:e5:14:f0:9a:5e:cf:50:a3:
         11:25:37:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:55 2026 by rpki-client