Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3130332e34392e3138302e302f32322d3234203d3e2030.roa
File:                     3130332e34392e3138302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          Fnc+/A9b+fc0SndNXMwIwEmMSqi9YrT9wNRumwqY/is=
Subject key identifier:   6C:4A:A9:D0:97:29:FB:D3:C4:C7:9C:11:C9:00:59:B9:62:5C:CB:38
Certificate issuer:       /CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
Certificate serial:       4588D3943DDA6A415FF28FCFC63E2B8FFD1183CF
Authority key identifier: CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3130332e34392e3138302e302f32322d3234203d3e2030.roa
Signing time:             Thu 16 Apr 2026 08:00:45 +0000
ROA not before:           Thu 16 Apr 2026 07:55:45 +0000
ROA not after:            Thu 15 Apr 2027 08:00:45 +0000
asID:                     0
IP address blocks:        103.49.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:88:d3:94:3d:da:6a:41:5f:f2:8f:cf:c6:3e:2b:8f:fd:11:83:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5
        Validity
            Not Before: Apr 16 07:55:45 2026 GMT
            Not After : Apr 15 08:00:45 2027 GMT
        Subject: CN=6C4AA9D09729FBD3C4C79C11C90059B9625CCB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:a7:4f:15:b1:3f:b0:4f:5d:ff:e5:d0:87:
                    0d:22:bd:c2:c8:48:dd:0e:82:31:bc:49:6d:7d:86:
                    3a:bc:f7:62:1e:69:3c:4f:64:8f:fa:26:85:b2:c9:
                    aa:92:2b:22:1e:7a:e0:f4:22:7d:29:1d:f2:3e:cc:
                    f3:7e:72:aa:f4:8b:ff:18:e2:3e:65:c1:a3:06:16:
                    14:fd:3d:bc:f7:34:4e:82:1f:ea:ed:96:75:05:47:
                    27:6b:91:ec:6a:dd:c4:1f:5c:4a:fe:fc:0a:af:1c:
                    e0:c8:29:e3:5a:27:d2:41:a2:ec:09:a8:0d:7d:27:
                    80:0e:13:d4:5c:aa:f8:4e:5d:61:06:d8:0c:08:f7:
                    34:f1:08:c3:d1:c6:44:ae:3d:c5:4a:e7:5c:07:6d:
                    4c:c3:0a:18:d4:3b:98:9e:e2:92:08:59:ec:b9:a1:
                    dc:ce:8c:1b:2b:fa:47:68:06:64:aa:3d:7b:28:76:
                    93:e9:5b:7f:6f:eb:ec:04:e0:be:b9:90:fb:95:b9:
                    ad:d8:4c:6a:08:42:bd:de:26:16:0c:1a:fd:c5:fc:
                    23:51:aa:d5:b5:59:64:4e:54:55:d4:d7:28:77:54:
                    56:4c:09:6b:c5:60:25:b1:eb:53:3f:ab:e1:9e:13:
                    fb:ee:15:a4:0a:b8:35:f3:60:43:52:8c:84:4c:d4:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:A9:D0:97:29:FB:D3:C4:C7:9C:11:C9:00:59:B9:62:5C:CB:38
            X509v3 Authority Key Identifier:
                keyid:CE:E0:FB:0A:5E:4D:A9:AC:7D:78:C5:FC:8F:03:D9:AB:23:BF:C3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEE0FB0A5E4DA9AC7D78C5FC8F03D9AB23BFC3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447923715/1/3130332e34392e3138302e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:e8:e3:a2:ff:68:c7:d1:34:60:13:5f:6e:be:19:a7:d9:f0:
         35:81:2f:e5:fe:c0:3d:df:a1:ae:bf:ec:d8:e8:f6:c4:e4:2f:
         5c:e7:09:ef:a5:bb:0f:22:6a:32:2e:53:36:cb:13:14:7a:00:
         d0:21:f1:b3:bd:13:f2:a4:dc:91:d6:4e:49:69:38:6c:aa:ab:
         e3:1c:80:7a:30:76:a8:89:53:d2:61:03:15:f2:39:2a:ef:ce:
         9b:a1:1e:cc:2b:cf:5e:52:e8:f9:3b:d5:60:9c:17:87:fc:f3:
         a0:ca:2f:c2:9d:a5:5f:64:1e:26:84:7d:7d:be:e5:e5:77:c6:
         7c:84:7d:4d:0f:a3:1c:c2:76:e1:b0:b9:b6:1b:85:97:b1:ca:
         ff:46:74:83:c0:84:1c:df:65:07:5e:da:10:b8:65:4e:3c:c0:
         0d:e1:f2:b1:11:2e:3a:6a:28:cd:c9:71:85:db:fe:fb:fa:93:
         33:91:7e:6e:0a:57:f3:0a:79:72:bd:68:36:9b:db:81:91:5f:
         80:1c:51:87:95:9f:26:86:76:ef:f3:72:1c:56:56:66:7a:0b:
         0f:71:1f:36:0d:29:21:4f:d6:48:fc:f1:a5:6e:e2:62:d8:ff:
         6e:09:cd:c2:eb:db:79:71:b2:f3:bf:34:4f:7f:55:b0:c5:36:
         91:78:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:07 2026 by rpki-client