Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa
File:                     3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (raw, json)
Hash identifier:          qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=
Subject key identifier:   B7:85:93:6C:25:2C:1E:5E:F7:32:EC:7D:73:EC:E7:50:10:B5:EC:63
Certificate issuer:       /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Certificate serial:       24099FED8DFBCD34D1B597F37077B6A91596BC9B
Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa
Signing time:             Thu 16 Apr 2026 09:21:45 +0000
ROA not before:           Thu 16 Apr 2026 09:16:45 +0000
ROA not after:            Thu 15 Apr 2027 09:21:45 +0000
asID:                     38019
IP address blocks:        103.110.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:09:9f:ed:8d:fb:cd:34:d1:b5:97:f3:70:77:b6:a9:15:96:bc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
        Validity
            Not Before: Apr 16 09:16:45 2026 GMT
            Not After : Apr 15 09:21:45 2027 GMT
        Subject: CN=B785936C252C1E5EF732EC7D73ECE75010B5EC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0e:29:c8:84:17:f6:75:1b:7c:00:0c:b4:02:
                    d3:07:cd:bc:b2:71:29:9d:6b:a9:ad:93:83:34:1b:
                    66:88:15:35:e0:34:5f:c9:8f:06:96:c1:7d:f1:47:
                    44:ee:ee:cc:77:d7:04:85:1a:7f:b2:88:52:ef:4a:
                    1f:3c:5c:65:b7:94:b3:bc:58:71:a7:4d:b9:9c:63:
                    f3:fd:b1:90:e0:1d:52:ef:61:e8:de:6a:7f:67:a2:
                    d4:e6:9e:f2:3d:4b:10:4e:53:91:be:98:9e:4d:e0:
                    86:22:35:b3:94:e3:84:c1:c1:99:4f:4a:ca:63:da:
                    88:06:c3:4f:ad:a4:b3:a4:eb:b7:fa:c6:95:b6:86:
                    21:28:20:a7:4c:4c:86:cb:42:1b:10:e6:d5:41:75:
                    85:2d:6d:b7:38:82:2e:e1:9f:0a:bb:3a:da:c0:d3:
                    b7:a4:b0:e1:61:80:5e:c4:97:fa:42:7d:a7:c7:ea:
                    1a:e1:7d:87:3f:77:b1:1a:2d:c2:3b:aa:d0:5f:c4:
                    a7:b1:75:b4:c0:27:f4:65:cb:42:9f:7d:b9:27:e8:
                    71:fa:df:09:02:5b:30:98:38:3a:41:8c:c4:ee:44:
                    35:1c:79:95:9e:c9:e1:e8:ac:5b:df:64:fa:51:7c:
                    de:00:14:29:7e:0b:9c:f7:73:6d:96:a7:e9:9e:75:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:85:93:6C:25:2C:1E:5E:F7:32:EC:7D:73:EC:E7:50:10:B5:EC:63
            X509v3 Authority Key Identifier:
                keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:f9:59:26:f2:45:ee:a7:49:6f:44:e6:0d:ec:a8:2f:a1:12:
         ff:3a:a8:5c:3a:d3:c3:a5:77:27:4c:72:23:04:72:55:77:dc:
         6b:63:e1:0d:c0:d0:63:32:c7:67:46:1b:66:c0:43:34:1d:7b:
         d0:3f:e2:87:36:ec:e7:1c:82:63:3d:cb:3b:10:73:9b:0c:27:
         3f:3c:41:73:03:3a:21:24:00:1f:49:69:eb:b5:99:10:4d:4e:
         79:9e:9e:55:7b:eb:57:79:76:23:d8:de:7d:b3:1b:a4:8a:7e:
         f5:d5:64:f5:9b:ab:e6:f7:df:4b:e3:3a:95:c6:cb:03:07:97:
         56:a6:fe:5b:82:c9:f0:e2:f6:44:a1:aa:33:a5:52:ce:80:48:
         d2:ce:b5:6b:a9:3c:36:18:e9:d7:37:9b:a2:3c:27:75:d4:03:
         7c:78:83:53:b1:33:bb:3a:f7:12:58:c7:d7:57:f1:77:6c:56:
         bb:88:07:97:d7:7d:08:81:49:0c:05:fc:14:38:6e:8f:52:14:
         4f:b4:2b:3e:5b:07:ce:07:5f:3d:d4:74:f0:33:14:a6:e8:45:
         f4:17:87:de:eb:c9:b0:8e:38:98:4c:d9:20:cd:a2:97:35:70:
         8f:56:c0:bd:5e:28:c4:22:08:c3:ed:62:18:e2:5b:1c:9d:3f:
         6e:7c:e5:9d
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUJAmf7Y37zTTRtZfzcHe2qRWWvJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1
Njk3M0UwQzAeFw0yNjA0MTYwOTE2NDVaFw0yNzA0MTUwOTIxNDVaMDMxMTAvBgNV
BAMTKEI3ODU5MzZDMjUyQzFFNUVGNzMyRUM3RDczRUNFNzUwMTBCNUVDNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZDinIhBf2dRt8AAy0AtMHzbyy
cSmda6mtk4M0G2aIFTXgNF/JjwaWwX3xR0Tu7sx31wSFGn+yiFLvSh88XGW3lLO8
WHGnTbmcY/P9sZDgHVLvYejean9notTmnvI9SxBOU5G+mJ5N4IYiNbOU44TBwZlP
Sspj2ogGw0+tpLOk67f6xpW2hiEoIKdMTIbLQhsQ5tVBdYUtbbc4gi7hnwq7OtrA
07eksOFhgF7El/pCfafH6hrhfYc/d7EaLcI7qtBfxKexdbTAJ/Rly0Kffbkn6HH6
3wkCWzCYODpBjMTuRDUceZWeyeHorFvfZPpRfN4AFCl+C5z3c22Wp+medbZJAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUt4WTbCUsHl73Mux9c+znUBC17GMwHwYDVR0j
BBgwFoAUpaeiK3c1V7r5EH9SBx5Dy1aXPgwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg1NTMzMzQ4MzkwNTAyNi8wL0E1QTdBMjJCNzczNTU3QkFGOTEwN0Y1MjA3MUU0
M0NCNTY5NzNFMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1Njk3M0UwQy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTQ4NTUzMzM0ODM5MDUwMjYvMC8zMTMwMzMyZTMx
MzEzMDJlMzEzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzODMwMzEzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmduhDANBgkqhkiG9w0BAQsFAAOCAQEANflZJvJF7qdJb0TmDeyo
L6ES/zqoXDrTw6V3J0xyIwRyVXfca2PhDcDQYzLHZ0YbZsBDNB170D/ihzbs5xyC
Yz3LOxBzmwwnPzxBcwM6ISQAH0lp67WZEE1OeZ6eVXvrV3l2I9jefbMbpIp+9dVk
9Zur5vffS+M6lcbLAweXVqb+W4LJ8OL2RKGqM6VSzoBI0s61a6k8Nhjp1zebojwn
ddQDfHiDU7Ezuzr3EljH11fxd2xWu4gHl9d9CIFJDAX8FDhuj1IUT7QrPlsHzgdf
PdR08DMUpuhF9BeH3uvJsI44mEzZIM2ilzVwj1bAvV4oxCIIw+1iGOJbHJ0/bnzl
nQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:28:08 2026 by rpki-client