Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139322e302f32332d3233203d3e203536303436.roa
File:                     3130332e34302e3139322e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          wGbsi022wm6O1TbyE8nF1PCQ4Pn6oYgZHEf6gWjDQPo=
Subject key identifier:   8B:7D:B0:C4:29:87:3C:A9:A4:09:EF:B1:D9:CE:5F:61:A4:74:B7:12
Certificate issuer:       /CN=B8D245B2C5B99498F3D8E0632643FF2259597775
Certificate serial:       20C43FFEF9EDDE050EA42B2C32AA508D2A07E8AF
Authority key identifier: B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139322e302f32332d3233203d3e203536303436.roa
Signing time:             Thu 16 Apr 2026 02:45:24 +0000
ROA not before:           Thu 16 Apr 2026 02:40:24 +0000
ROA not after:            Thu 15 Apr 2027 02:45:24 +0000
asID:                     56046
IP address blocks:        103.40.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c4:3f:fe:f9:ed:de:05:0e:a4:2b:2c:32:aa:50:8d:2a:07:e8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D245B2C5B99498F3D8E0632643FF2259597775
        Validity
            Not Before: Apr 16 02:40:24 2026 GMT
            Not After : Apr 15 02:45:24 2027 GMT
        Subject: CN=8B7DB0C429873CA9A409EFB1D9CE5F61A474B712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:24:35:23:7e:e0:56:01:13:d4:b5:b4:0a:
                    d2:a9:bf:fa:e7:60:c6:0a:6c:f6:0c:6e:50:00:5b:
                    03:eb:1c:10:b3:2b:4f:4d:ac:9f:81:43:71:34:35:
                    35:7f:02:9b:c4:c2:52:8e:d5:b5:d3:2e:c6:bb:31:
                    7c:80:d8:1b:f3:91:40:e7:a9:8a:46:94:ce:f7:74:
                    30:b7:e8:4f:10:a5:5a:34:6c:34:ec:8d:8d:b0:12:
                    da:a0:2d:12:c8:be:f1:1e:7b:22:fd:01:ca:7e:58:
                    22:37:2d:d1:b3:05:1e:ca:18:d4:76:97:a8:ac:e5:
                    78:6c:34:9c:81:93:ae:c5:98:e9:bb:2f:e0:15:d9:
                    07:61:50:c3:49:05:2e:2b:39:3d:4a:f1:0d:d7:76:
                    f9:4e:24:b7:ac:c4:b0:3a:b7:79:28:8d:29:9c:6b:
                    15:3c:3b:33:b8:f7:12:94:b8:97:fd:19:e2:7c:db:
                    a4:2a:06:8d:37:68:82:95:24:18:24:c7:96:36:39:
                    4f:14:8f:61:28:43:66:3e:ab:93:23:e7:2d:43:51:
                    5f:90:4a:1f:9b:d9:06:96:db:94:52:c0:23:15:95:
                    50:84:d5:7c:0f:63:52:f0:d7:a9:e4:66:13:27:9d:
                    fa:3c:eb:ef:b8:41:ab:ec:f0:7c:77:73:ae:3e:c3:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7D:B0:C4:29:87:3C:A9:A4:09:EF:B1:D9:CE:5F:61:A4:74:B7:12
            X509v3 Authority Key Identifier:
                keyid:B8:D2:45:B2:C5:B9:94:98:F3:D8:E0:63:26:43:FF:22:59:59:77:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/B8D245B2C5B99498F3D8E0632643FF2259597775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8D245B2C5B99498F3D8E0632643FF2259597775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094811409537040386/0/3130332e34302e3139322e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:9c:07:b6:ff:3c:62:a4:b4:0b:25:cb:0c:05:71:d3:11:21:
         4b:25:88:b6:8f:8f:38:06:bb:16:fd:52:c8:83:c6:a2:45:56:
         2e:c0:dd:e5:23:28:52:d9:81:43:ce:5e:20:44:c1:72:8a:c5:
         f9:35:de:42:c2:b6:80:00:ee:d7:93:11:42:38:cf:c6:97:fd:
         62:2a:09:76:94:ab:a4:65:8b:28:17:d1:19:ce:76:73:95:01:
         4b:47:4e:1a:05:f0:f0:2e:a0:1a:59:52:c8:b1:c9:32:11:2e:
         37:de:9b:48:47:d1:a9:21:51:58:c4:be:25:a9:eb:c5:76:78:
         0a:50:36:2a:fd:59:ac:31:a3:db:ef:cc:38:0d:95:15:9b:ce:
         39:5f:ec:cb:1b:4b:77:d2:82:83:6e:5a:dc:a6:3f:d8:b1:31:
         63:82:e4:ac:6e:37:06:a0:a6:1b:b2:96:ea:f5:7b:d1:49:db:
         f6:1d:30:ef:28:a4:05:92:64:67:b1:20:73:46:e4:79:d6:1b:
         b1:84:50:d8:34:c0:5b:75:32:c9:3f:e5:31:89:e3:59:8e:0b:
         36:0c:2e:61:9b:54:10:42:a0:eb:c4:79:7a:9b:a2:ce:89:58:
         1b:ae:03:68:b9:6d:ee:93:66:64:93:49:1b:89:00:85:53:66:
         ae:10:eb:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:06 2026 by rpki-client