Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa
File:                     3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier:          9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=
Subject key identifier:   DC:39:72:B8:1F:EA:A2:98:0E:6D:B5:6E:81:7B:6B:C4:A7:7A:27:30
Certificate issuer:       /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Certificate serial:       04C7509687667C6A5C00C0E684F0AB42F4BB44AF
Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa
Signing time:             Thu 16 Apr 2026 09:19:27 +0000
ROA not before:           Thu 16 Apr 2026 09:14:27 +0000
ROA not after:            Thu 15 Apr 2027 09:19:27 +0000
asID:                     9808
IP address blocks:        103.110.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:40:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c7:50:96:87:66:7c:6a:5c:00:c0:e6:84:f0:ab:42:f4:bb:44:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
        Validity
            Not Before: Apr 16 09:14:27 2026 GMT
            Not After : Apr 15 09:19:27 2027 GMT
        Subject: CN=DC3972B81FEAA2980E6DB56E817B6BC4A77A2730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:51:af:9e:af:59:af:52:a5:19:5b:10:a1:
                    b8:fd:12:b8:f0:dc:9d:f3:e6:ae:51:4c:9e:1a:77:
                    6a:f7:2e:78:45:ed:9b:a4:0b:6b:23:4e:20:65:2d:
                    1d:f0:4a:83:4a:fc:37:ea:92:9c:fe:91:84:a4:95:
                    28:b7:eb:09:16:38:76:20:29:12:00:de:e6:9f:21:
                    57:fe:f1:8c:96:1f:ab:93:0a:76:7c:8b:50:5e:99:
                    e1:93:a1:b2:b1:c8:59:34:83:cf:99:7b:2e:e6:3c:
                    9d:ea:fb:87:32:71:99:af:8e:aa:7a:3e:95:90:04:
                    98:da:8a:42:aa:ed:b9:0e:f4:76:81:c5:a0:c2:a6:
                    9e:2c:9a:8d:0c:7a:94:35:29:8c:e1:df:19:db:c4:
                    10:40:5e:76:28:e2:01:a5:f5:a2:b3:ba:c5:b8:d2:
                    96:f6:7c:e0:fc:01:76:69:21:3d:5d:81:95:74:e6:
                    99:41:96:04:5e:f3:c0:9a:de:16:8b:0c:ad:9a:be:
                    93:88:0a:f7:d4:50:a0:77:81:27:a8:04:96:c7:fb:
                    1f:34:f3:3e:c5:04:52:03:d8:3c:a1:03:86:7b:e2:
                    5c:69:d3:14:96:d2:42:3c:0b:d2:d3:98:24:02:a6:
                    20:0f:07:b6:60:28:04:a8:b2:a0:bb:b5:15:ea:8c:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:39:72:B8:1F:EA:A2:98:0E:6D:B5:6E:81:7B:6B:C4:A7:7A:27:30
            X509v3 Authority Key Identifier:
                keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:aa:cc:95:7a:f5:d7:50:5f:d9:e6:51:43:6b:6e:d1:b4:dc:
         92:fc:8f:f3:93:32:0f:17:a4:7f:01:ff:e9:78:54:f4:92:d4:
         8c:db:fb:6e:30:11:8f:64:8a:e6:6e:c0:15:77:c9:c8:23:aa:
         3d:5c:8d:5c:33:ee:37:af:e1:e5:d4:40:98:a9:15:c6:c1:6c:
         c6:0d:6f:e3:9c:1d:fc:15:cf:75:25:8e:5d:41:18:9f:20:20:
         1c:11:6b:86:e7:02:a0:5a:39:d7:69:99:8d:77:dd:fc:a7:2d:
         ec:e9:7d:56:46:1a:e4:1a:ac:7b:07:eb:ff:5c:a8:ce:40:dc:
         a6:e5:78:d7:78:92:a2:22:7d:fa:d5:0a:ec:2f:8b:c8:c5:3a:
         90:aa:10:82:a8:4a:9b:9c:83:52:f1:2c:57:db:1e:fa:b8:38:
         b3:b6:41:a2:65:2f:e7:f2:74:90:f1:4e:1f:82:a2:ff:2d:2c:
         f9:66:e6:1d:9c:63:a9:a5:0c:1a:81:1e:be:ed:75:34:69:53:
         dd:d7:91:1a:e6:81:93:7e:58:54:88:d2:59:0a:5b:2b:70:07:
         0d:47:68:b4:cc:67:69:51:31:7a:3f:83:04:05:5d:fe:2b:a5:
         49:95:9f:01:d7:ad:dd:6f:cd:f8:93:54:fc:d4:20:87:9a:d0:
         70:ca:96:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:41 2026 by rpki-client