Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3130332e33372e3137362e302f32322d3232203d3e2030.roa
File:                     3130332e33372e3137362e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          Ul6Xgpve+/mXk1Jchr8bZMQjL6d0ttL5gjbYwvG8+a0=
Subject key identifier:   A6:6E:F4:21:98:C9:A8:EF:51:81:12:16:61:A3:A8:E7:D2:0F:2B:F3
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       1925ADCB7107273B24367039BCBFE73603F2A9DD
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3130332e33372e3137362e302f32322d3232203d3e2030.roa
Signing time:             Wed 15 Apr 2026 03:58:43 +0000
ROA not before:           Wed 15 Apr 2026 03:53:43 +0000
ROA not after:            Wed 14 Apr 2027 03:58:43 +0000
asID:                     0
IP address blocks:        103.37.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:25:ad:cb:71:07:27:3b:24:36:70:39:bc:bf:e7:36:03:f2:a9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 03:53:43 2026 GMT
            Not After : Apr 14 03:58:43 2027 GMT
        Subject: CN=A66EF42198C9A8EF5181121661A3A8E7D20F2BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:1e:2a:59:e9:a7:a7:7a:12:2a:ed:3e:bc:
                    9b:80:a6:e1:76:52:d2:82:d0:99:0b:e1:11:5c:7f:
                    6e:cc:bb:35:ed:72:0b:69:44:db:0b:04:12:62:fb:
                    d0:39:d0:25:69:60:34:da:43:6f:5d:55:b3:c7:20:
                    63:20:eb:ca:88:f5:ef:48:16:eb:6d:77:90:9b:47:
                    b2:eb:e8:52:b4:ce:d5:95:61:9b:c8:7e:1f:36:61:
                    23:ef:e9:cd:dc:10:f8:70:a9:55:3f:9c:42:cc:06:
                    e3:5d:15:b8:f2:43:43:a8:eb:f7:97:51:25:7b:e4:
                    3f:fb:96:07:d7:86:de:c5:f9:cd:70:40:cb:77:8d:
                    ee:3b:2f:40:ab:59:c6:5e:44:d7:18:02:93:43:d9:
                    b3:d5:de:44:e4:2c:26:99:e1:54:c9:98:84:cb:0f:
                    79:d7:1e:a3:89:8c:7f:34:67:24:e8:0b:9c:7b:15:
                    69:c3:d6:f2:13:85:01:8d:74:7a:d2:02:46:6b:e3:
                    65:f3:77:2b:a3:80:4d:d8:eb:60:e5:de:ce:68:06:
                    36:ce:fe:61:61:8b:6d:14:4e:c2:20:24:d9:4f:6a:
                    95:f0:2f:35:28:a0:2f:9d:a3:09:ee:1f:0e:d7:74:
                    04:65:a6:89:3f:b5:d0:99:db:7f:19:5f:78:db:00:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:F4:21:98:C9:A8:EF:51:81:12:16:61:A3:A8:E7:D2:0F:2B:F3
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/3130332e33372e3137362e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:ec:49:f6:5f:cc:9c:6a:0c:50:6e:18:65:68:90:0a:b8:0d:
         64:f0:a0:2a:a6:55:87:e2:c4:ef:9a:95:02:0f:0d:c5:29:b9:
         a3:4b:0a:6d:3d:f9:95:dc:3b:d5:e0:9f:e0:d5:0a:40:ae:81:
         c0:41:8a:a7:4d:ab:c7:9a:4f:36:e0:74:71:0f:3f:2d:62:ee:
         ba:41:fe:41:be:5b:f2:f8:a3:f0:7f:53:0d:da:e3:08:f6:2a:
         ae:23:b8:03:64:7f:1d:88:79:bb:24:4b:ad:4b:19:4e:e2:2e:
         9c:92:18:e7:f9:9e:76:d1:63:0d:52:7e:fd:ae:6b:06:3b:30:
         dc:31:f2:6b:d0:44:c4:a7:ee:bf:65:67:fc:a6:2e:ad:bf:7f:
         0e:34:8c:e5:f0:0a:80:e1:41:29:24:55:b7:79:5b:8d:f1:41:
         94:1a:31:15:5b:c5:3c:68:93:6e:56:c5:6f:da:ec:9d:20:5e:
         a8:96:2c:59:ee:55:ca:e5:b7:74:5b:9a:55:de:2f:e8:41:13:
         b1:75:05:10:17:9c:12:3b:c7:73:0e:bd:fa:bf:f8:b4:c3:b1:
         d2:2b:1e:78:73:6e:f4:24:8b:cc:b6:d9:7d:c9:54:12:55:c1:
         27:1c:f4:d6:e6:b3:d1:ff:60:2d:7f:99:cc:57:fa:54:ea:b5:
         c6:2c:40:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:41 2026 by rpki-client