Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139322e302f32322d3232203d3e2034383337.roa
File:                     3130332e34302e3139322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          IxsnzDY/i2UAfZFQdezNooFbzPsYtvA8/wFAc0IrOuo=
Subject key identifier:   AD:7A:2F:60:28:18:DC:A2:FB:A8:AA:64:39:FF:C2:A6:7C:D8:9B:43
Certificate issuer:       /CN=B8D245B2C5B99498F3D8E0632643FF2259597775
Certificate serial:       177E8F5819FB2B210AAF1DD1FE6076D0856F863C
Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139322e302f32322d3232203d3e2034383337.roa
Signing time:             Thu 16 Apr 2026 03:39:56 +0000
ROA not before:           Thu 16 Apr 2026 03:34:56 +0000
ROA not after:            Thu 15 Apr 2027 03:39:56 +0000
asID:                     4837
IP address blocks:        103.40.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7e:8f:58:19:fb:2b:21:0a:af:1d:d1:fe:60:76:d0:85:6f:86:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775
        Validity
            Not Before: Apr 16 03:34:56 2026 GMT
            Not After : Apr 15 03:39:56 2027 GMT
        Subject: CN=AD7A2F602818DCA2FBA8AA6439FFC2A67CD89B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:81:70:36:7b:22:66:79:82:0a:34:4a:84:
                    c0:03:99:dc:3b:8a:80:9f:06:f9:54:72:bb:5f:a9:
                    f7:9d:32:54:77:db:a3:0b:e0:ae:ca:a1:97:c6:0b:
                    7d:66:c2:e4:9e:88:fa:a3:2f:48:21:6a:24:ac:c2:
                    08:14:39:90:b4:45:e3:db:f9:3b:69:18:7f:80:e4:
                    54:6b:a9:e6:00:51:f7:57:3d:39:50:7f:71:6e:39:
                    49:14:76:a8:f0:74:e5:50:c3:30:30:1c:d7:d4:b3:
                    dd:8d:a2:ac:1f:30:d5:2b:7a:22:f3:83:6c:62:f9:
                    12:85:aa:8e:ad:5d:8b:6c:74:a5:1e:16:6b:17:65:
                    08:e6:aa:eb:99:c0:ab:30:d3:0e:d4:66:df:b7:e5:
                    3c:e4:13:b8:74:d4:3b:f1:67:51:8f:ce:c6:6f:01:
                    62:5b:2d:bd:0e:13:ec:a9:38:c2:ea:31:68:0c:cf:
                    3a:5e:4c:11:0a:a1:20:5f:1f:6b:55:f8:1c:72:10:
                    50:58:e0:21:c0:b0:35:93:51:43:72:a9:05:c7:66:
                    68:9b:fe:ae:0b:20:99:8b:f9:e6:59:1a:d1:62:26:
                    b3:20:53:6d:53:54:19:ac:ef:e2:1a:64:b2:14:d1:
                    99:49:80:2e:45:ab:d7:fc:8c:bb:43:35:96:94:3d:
                    0a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7A:2F:60:28:18:DC:A2:FB:A8:AA:64:39:FF:C2:A6:7C:D8:9B:43
            X509v3 Authority Key Identifier:
                keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139322e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:c2:61:82:d2:54:f9:bc:ac:4a:35:b4:0e:9f:61:de:61:
         6c:72:54:ab:41:ad:45:5b:8c:39:84:dd:5f:b5:87:88:71:85:
         09:27:ba:bd:19:df:a3:92:27:81:ab:1c:4f:32:6e:ba:a3:6d:
         c6:9e:c7:a1:bf:86:9b:bc:6b:86:ae:d3:64:8b:93:f5:c4:ca:
         28:85:82:1f:6e:ef:45:fe:42:24:95:9c:88:65:47:82:80:49:
         b8:37:3c:29:b7:d8:af:1b:fa:15:a3:bb:28:4e:ed:8d:7d:ac:
         05:14:0f:c2:4e:8a:01:c4:70:7a:64:fc:c8:af:6e:c6:1a:2a:
         b2:57:71:96:14:c8:19:c4:cb:46:a0:4e:9e:c0:a1:ef:02:a5:
         c9:cb:e9:63:8e:54:12:83:db:77:e1:9f:2c:f7:81:08:ed:8b:
         e1:6a:db:f0:90:b1:0b:b3:b2:11:b5:b9:5e:c4:9a:34:bc:a0:
         09:11:94:5a:38:0d:72:64:e1:ac:d3:34:0f:aa:83:09:90:67:
         9f:0c:35:eb:ec:f9:0a:b8:be:41:ba:06:3b:3a:d9:9b:7a:35:
         44:9b:a0:a1:04:b1:e4:24:5d:2d:c2:ef:fd:cc:f2:04:6c:28:
         e0:9c:50:c6:e9:73:a0:67:38:9c:a9:e3:f4:cd:97:65:c4:21:
         20:91:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:25 2026 by rpki-client