Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2033343333.roa
File:                     3130332e32382e3230342e302f32322d3232203d3e2033343333.roa (raw, json)
Hash identifier:          S4LI7F5/nKJonKbl1JWtK8auVNwfL73FgDTRMFWqL1Q=
Subject key identifier:   86:A2:C3:0A:EF:F1:BE:5F:53:31:12:9E:A2:26:3C:85:50:FF:9E:20
Certificate issuer:       /CN=573895035A5FB9C94F33AC71886002E21C9EE894
Certificate serial:       6FE4EF55497A427DC624D577AE4FCF7F6820841F
Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2033343333.roa
Signing time:             Tue 14 Apr 2026 09:49:33 +0000
ROA not before:           Tue 14 Apr 2026 09:44:33 +0000
ROA not after:            Tue 13 Apr 2027 09:49:33 +0000
asID:                     3433
IP address blocks:        103.28.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e4:ef:55:49:7a:42:7d:c6:24:d5:77:ae:4f:cf:7f:68:20:84:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894
        Validity
            Not Before: Apr 14 09:44:33 2026 GMT
            Not After : Apr 13 09:49:33 2027 GMT
        Subject: CN=86A2C30AEFF1BE5F5331129EA2263C8550FF9E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:b0:ed:c3:dc:0f:33:93:8d:ce:cc:cb:0a:
                    71:5b:ac:e9:49:13:20:67:21:24:60:05:fb:6e:f0:
                    20:7b:6f:fa:4e:58:6a:26:6b:9e:cf:56:4f:35:dc:
                    e5:25:3a:98:a6:17:8e:61:a1:62:f7:f9:ca:d1:4a:
                    92:44:7d:60:53:d7:2d:cc:84:c2:cc:f4:90:89:64:
                    ac:a5:ec:a6:c1:78:0f:4e:09:51:91:af:11:d4:ef:
                    54:8a:90:28:74:d2:58:34:a5:43:c3:7a:a0:4c:5d:
                    cd:2e:45:ce:67:12:d5:a2:be:91:83:84:86:00:03:
                    d5:d4:12:15:25:be:05:bc:cc:60:0d:32:a3:eb:9f:
                    0c:d7:91:5c:a6:e0:e0:18:3c:46:4a:9d:eb:08:90:
                    1c:53:20:10:64:57:0c:21:a8:54:e2:69:26:9c:4e:
                    86:c1:f0:4f:12:84:9e:87:3b:1e:30:58:11:b5:0c:
                    97:87:89:c6:6f:50:5a:55:85:75:f9:73:8d:37:3a:
                    dc:94:57:b9:31:62:f6:02:59:26:be:70:68:93:b1:
                    7b:93:4e:26:57:d4:8d:08:e6:69:59:ee:12:bd:eb:
                    9a:79:5c:5a:e1:a8:14:7b:a7:04:cf:95:f9:8e:ce:
                    9b:40:0c:54:bf:a5:ee:e9:9c:1d:5f:d6:89:a5:ee:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A2:C3:0A:EF:F1:BE:5F:53:31:12:9E:A2:26:3C:85:50:FF:9E:20
            X509v3 Authority Key Identifier:
                keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2033343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:ef:66:73:75:96:7d:18:c7:1e:b7:59:c2:05:6c:f6:03:9b:
         9c:c6:ec:da:8a:e7:2e:cb:a4:15:47:b3:b0:eb:d7:af:44:b7:
         fa:ee:cf:22:8a:28:05:9f:6c:ca:d7:57:3d:b2:22:4b:2e:0f:
         a1:05:8e:a3:2b:38:b2:80:7b:4d:02:b3:d7:09:bf:41:df:06:
         84:11:5a:95:18:b2:23:82:93:22:cf:de:88:72:f6:58:42:e7:
         3f:da:61:d4:3a:7a:e7:db:31:7f:d8:f2:a8:2f:ef:bf:76:86:
         2e:1c:ca:ca:f1:c8:fe:64:21:5d:1c:5d:d6:90:ad:79:f8:ca:
         de:95:99:7b:52:18:30:c3:9c:7c:70:fc:44:9e:de:27:ca:2f:
         4a:d1:cd:1a:42:af:1f:c7:35:34:e5:92:9a:5d:e0:40:8c:4c:
         ca:09:d2:94:4c:bd:53:a7:2f:cc:b0:a4:78:a7:c4:46:3a:ed:
         3d:cb:5d:31:b2:c6:b7:75:f8:d9:b1:32:8d:d9:55:c5:6b:08:
         65:c6:ba:0c:d6:27:37:ad:c3:0b:21:3d:8d:02:09:80:04:b5:
         3f:74:4c:c6:6a:45:ba:85:3a:03:a4:86:8d:c1:87:c4:8d:33:
         dc:3a:ab:31:d1:09:95:68:b3:fc:1f:4b:fa:a3:b6:a7:1d:37:
         6b:6a:fa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:10:28 2026 by rpki-client