Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/3130332e36302e3232382e302f32332d3233203d3e2034383131.roa
File:                     3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=
Subject key identifier:   94:30:B3:A4:C0:4B:79:29:8A:54:73:8A:FA:92:EB:A0:91:3A:6C:78
Certificate issuer:       /CN=98AA7A42F1AD88F64241535778555B0FE42637EA
Certificate serial:       5D82CC5263169AE677451BD269CFDDEE2A19EDA5
Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/3130332e36302e3232382e302f32332d3233203d3e2034383131.roa
Signing time:             Wed 15 Apr 2026 02:36:19 +0000
ROA not before:           Wed 15 Apr 2026 02:31:19 +0000
ROA not after:            Wed 14 Apr 2027 02:36:19 +0000
asID:                     4811
IP address blocks:        103.60.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 02:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:82:cc:52:63:16:9a:e6:77:45:1b:d2:69:cf:dd:ee:2a:19:ed:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA
        Validity
            Not Before: Apr 15 02:31:19 2026 GMT
            Not After : Apr 14 02:36:19 2027 GMT
        Subject: CN=9430B3A4C04B79298A54738AFA92EBA0913A6C78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b7:57:29:ad:2d:34:d1:7f:70:4c:23:f7:ad:
                    48:b8:56:b6:81:e4:d5:42:bc:7b:5a:be:36:dc:ba:
                    b4:f4:13:aa:58:60:d4:c4:ee:6a:14:be:59:0b:14:
                    d5:5b:84:ad:ed:83:d1:77:b3:58:ce:cf:ed:19:5e:
                    8f:55:29:5e:90:32:7f:4b:b1:ee:6b:81:0e:24:73:
                    c8:91:0f:e8:4b:95:77:f7:c1:b7:16:99:b1:b1:66:
                    24:f9:2a:ea:96:50:ed:6a:73:b2:87:0c:fd:8f:c7:
                    91:37:e1:5d:5f:1e:d6:9d:5a:99:06:d6:24:5d:51:
                    04:4f:d7:6c:b1:1f:4c:4f:15:f4:e7:37:7a:35:f0:
                    2b:78:21:05:28:ec:f8:96:0c:de:47:14:af:f0:6a:
                    3d:3b:42:fe:6b:9f:d1:78:20:62:f9:72:7f:e3:ec:
                    44:3e:aa:bc:87:e2:ad:49:d7:1b:30:24:d3:3c:30:
                    b9:59:80:2c:37:b4:a3:db:2e:ad:9a:ab:c7:77:cd:
                    0a:a9:2f:01:cd:9b:6c:5b:6c:26:c1:3e:33:25:8e:
                    3c:43:75:44:50:35:3c:dd:c0:8b:11:58:53:45:33:
                    72:5e:1c:c6:6b:65:59:99:a4:6e:f3:77:35:d5:94:
                    c7:1a:81:31:4e:86:84:f7:b4:a2:31:de:51:a3:c2:
                    3d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:30:B3:A4:C0:4B:79:29:8A:54:73:8A:FA:92:EB:A0:91:3A:6C:78
            X509v3 Authority Key Identifier:
                keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/3130332e36302e3232382e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:dd:fc:a8:7a:59:f4:dc:3e:3a:0e:2a:6c:be:bf:eb:03:03:
         aa:20:eb:29:c6:49:45:68:c9:c5:2c:3f:0b:78:44:d8:a8:51:
         3c:61:38:fe:69:e0:0e:f4:1d:e5:95:76:48:f1:87:0a:0a:7a:
         92:58:75:92:c5:8b:ea:af:cc:10:54:f8:47:1a:e6:7c:39:97:
         18:88:51:65:b9:c6:8b:ce:35:02:78:f9:80:cd:87:7f:88:eb:
         7b:6d:9d:4a:d7:4e:a4:5b:36:61:d7:a5:15:96:40:cf:5b:6e:
         98:d5:2f:a7:07:cb:a0:9a:0c:79:ba:9d:b9:27:f7:fd:e4:90:
         e4:42:86:9f:09:1e:b8:00:0d:82:58:c8:bd:c4:4f:6c:1e:13:
         4d:c3:c6:5f:80:7d:74:02:35:44:17:83:b9:60:cc:74:4a:17:
         d2:0a:76:dd:34:85:e8:88:42:cf:53:ff:27:b0:53:4a:3e:32:
         6c:da:36:5b:08:2c:a6:65:24:50:c9:d6:95:33:8b:27:18:2e:
         a6:0a:31:99:c5:65:c4:f9:23:85:a8:14:85:f7:93:04:56:c1:
         f4:36:f9:44:82:e3:18:7b:c0:d6:2e:a8:14:da:8a:0c:65:01:
         4a:2d:ef:04:7d:a4:25:5f:e1:b9:c4:71:e3:c3:5a:56:e7:c1:
         d0:17:57:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:37:54 2026 by rpki-client