Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa
File:                     3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          k1rAJlK3nl+RMukZCZAOyW2Ztrz5xzJsS+9Jm+UCWLI=
Subject key identifier:   81:B3:66:59:EE:45:2A:F0:D3:D6:DE:76:07:8C:D4:44:6A:37:31:36
Certificate issuer:       /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Certificate serial:       6E54A129E0B2CF365F3698F639C767073D742D95
Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 16 Apr 2026 06:40:24 +0000
ROA not before:           Thu 16 Apr 2026 06:35:24 +0000
ROA not after:            Thu 15 Apr 2027 06:40:24 +0000
asID:                     4847
IP address blocks:        103.139.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 03:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:54:a1:29:e0:b2:cf:36:5f:36:98:f6:39:c7:67:07:3d:74:2d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
        Validity
            Not Before: Apr 16 06:35:24 2026 GMT
            Not After : Apr 15 06:40:24 2027 GMT
        Subject: CN=81B36659EE452AF0D3D6DE76078CD4446A373136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:1a:e4:97:15:3c:03:3b:8a:a4:dd:df:ad:
                    0b:00:f7:24:3e:1c:b4:ad:83:26:8d:2f:ff:a8:0d:
                    d5:79:28:3a:e8:86:bb:f3:9c:77:5e:76:c8:f5:94:
                    c4:a3:59:cb:b0:40:3e:63:1e:d3:b4:9b:36:5f:1b:
                    f4:3b:33:0e:1f:da:23:68:e9:1b:8d:cf:fd:0f:c3:
                    2e:b7:96:70:b1:18:67:8a:24:cf:57:3e:d2:b7:83:
                    4b:38:02:a0:66:c0:ef:a5:71:2d:a1:fc:bc:ca:01:
                    6d:7a:8e:1a:06:17:14:83:e3:12:0c:1c:61:14:9d:
                    65:e9:8c:a7:fa:7f:77:9d:a3:9e:d9:c4:29:77:d0:
                    f6:16:8d:72:51:a4:4f:2e:58:5f:4e:97:44:23:01:
                    6e:d2:ad:c2:bb:21:a3:6d:b3:46:af:28:70:87:a7:
                    02:a4:ed:66:11:8e:11:e9:25:0b:47:dc:ce:0c:e5:
                    cc:03:c0:dd:92:87:93:70:20:22:eb:c7:2d:1f:a7:
                    9f:7f:77:51:7e:17:ef:83:84:41:10:bd:61:82:23:
                    01:e0:7a:60:8c:2d:77:84:bd:95:a2:53:ae:4a:5e:
                    8f:cb:d2:83:1d:ec:4a:cc:ed:16:ab:a9:5c:fb:18:
                    0c:5d:53:4b:0b:ed:57:3a:eb:72:5f:49:4d:5b:c3:
                    bc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B3:66:59:EE:45:2A:F0:D3:D6:DE:76:07:8C:D4:44:6A:37:31:36
            X509v3 Authority Key Identifier:
                keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:b9:2e:5b:79:99:13:69:1e:f7:10:f0:7a:6d:b5:7c:84:
         3f:f4:ad:7b:b6:f0:d9:a9:e2:ce:82:67:5d:2d:ca:9b:81:90:
         7b:8a:db:60:24:e3:f2:89:e4:e6:1b:6c:4e:45:8c:f6:f1:22:
         bf:ac:fe:c2:a0:82:04:fc:f8:91:f7:dc:3a:26:f0:67:5a:ea:
         de:d0:49:4d:90:7f:6e:21:fd:58:b9:a9:26:58:96:ee:32:e1:
         a9:80:8e:a3:db:93:c8:1b:d3:d7:5f:a1:46:17:d4:c4:7f:92:
         0e:ef:e5:42:7c:91:70:4b:10:03:c7:2c:93:a2:b0:7c:02:cc:
         e3:08:36:73:5e:56:1f:bb:26:7e:ef:2b:70:76:3d:96:64:59:
         41:cc:e6:c2:ce:52:34:55:82:8c:88:3a:75:db:3e:30:7d:b4:
         13:34:67:07:a1:3b:52:df:45:9d:31:22:ad:2d:41:fa:0a:14:
         c6:37:17:b1:ce:3d:68:32:7d:b1:92:93:83:de:a2:d4:1d:d3:
         2d:47:d8:c7:49:a8:f2:9f:ff:76:ef:bb:bf:56:c3:6e:7f:5c:
         2e:05:59:10:ab:3e:ed:dc:e9:d8:51:3d:1f:c3:f7:3b:49:f1:
         5e:d7:71:cc:44:44:60:e7:9a:88:a0:b2:1e:f3:cc:ea:f4:50:
         a8:5a:3b:9b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:22 2026 by rpki-client