Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231352e302f32342d3234203d3e20313337373539.roa
File:                     3130332e3133322e3231352e302f32342d3234203d3e20313337373539.roa (raw, json)
Hash identifier:          hBscGvJr4AnNB3Ne2DqjxOugixWWQhpfuAEh32znKV0=
Subject key identifier:   F8:86:3D:B5:D6:04:FD:B8:62:05:EE:C0:2F:8F:E7:DB:A9:C6:76:F0
Certificate issuer:       /CN=5F00140F672D031D0607493A021A46F1A9475AE8
Certificate serial:       6CC0B02FCB56F2919545BB04812966A574C2D298
Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231352e302f32342d3234203d3e20313337373539.roa
Signing time:             Tue 14 Apr 2026 01:15:23 +0000
ROA not before:           Tue 14 Apr 2026 01:10:23 +0000
ROA not after:            Tue 13 Apr 2027 01:15:23 +0000
asID:                     137759
IP address blocks:        103.132.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c0:b0:2f:cb:56:f2:91:95:45:bb:04:81:29:66:a5:74:c2:d2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8
        Validity
            Not Before: Apr 14 01:10:23 2026 GMT
            Not After : Apr 13 01:15:23 2027 GMT
        Subject: CN=F8863DB5D604FDB86205EEC02F8FE7DBA9C676F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:36:ea:df:4a:28:86:60:f3:ad:81:61:8c:
                    3b:43:e1:e1:70:a6:25:59:e8:cf:e3:22:3b:c1:b9:
                    d3:f7:58:b9:5e:b0:0b:0c:1f:73:32:83:97:42:46:
                    83:92:90:7b:51:71:a5:fb:54:cf:5f:27:1c:72:d6:
                    c3:a4:89:09:91:1c:9e:67:31:f8:d0:25:e3:bf:ae:
                    ff:03:db:cc:51:16:4a:74:f2:5d:7b:77:6d:57:16:
                    01:01:30:dc:64:fd:47:3e:9a:26:fc:7c:ab:db:c3:
                    2b:43:5b:82:a8:3e:07:5a:83:2b:85:ff:bf:67:b7:
                    32:89:46:d4:50:7c:55:a5:7a:5c:b1:e4:c1:f2:00:
                    e3:a0:1d:c7:52:d5:22:86:59:07:b0:c9:75:16:2c:
                    8d:3e:2f:65:77:e8:28:83:7e:c4:df:1b:86:d5:f6:
                    d8:87:f4:65:11:78:ec:a1:d2:6c:4b:a0:ce:74:e8:
                    3f:59:c9:c6:4b:1b:20:09:03:4e:9a:27:d0:d7:e3:
                    d0:9c:a4:e2:5f:03:eb:61:09:00:a7:f4:cd:f7:e7:
                    df:5c:e6:68:a9:8c:39:de:4d:f7:5f:66:34:28:0b:
                    33:a1:05:1c:db:05:fb:17:6d:74:27:1f:9f:45:0b:
                    bd:37:72:e6:b9:35:dc:30:96:b2:84:10:2e:cb:a1:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:86:3D:B5:D6:04:FD:B8:62:05:EE:C0:2F:8F:E7:DB:A9:C6:76:F0
            X509v3 Authority Key Identifier:
                keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/3130332e3133322e3231352e302f32342d3234203d3e20313337373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:71:da:31:4e:2a:13:83:69:26:4b:b5:d7:13:10:b4:2a:af:
         06:d5:27:9f:af:9c:bb:c8:5b:2e:cb:1b:c1:7b:eb:0b:91:a8:
         d5:d0:03:b7:33:ca:66:23:0e:51:3b:7f:e8:82:17:e6:35:c0:
         fe:4e:a5:e2:b5:5a:c9:2a:4e:b3:6e:74:50:81:bb:d1:d7:a4:
         0a:d9:72:b2:04:5e:6e:94:0e:3b:5c:21:8c:f3:27:50:9d:c2:
         3e:83:c3:62:a7:48:9c:08:bd:be:2c:5b:22:d1:ba:f2:43:4f:
         5d:f3:6a:3a:d8:9c:a5:40:21:a9:4e:01:0c:89:eb:a1:4e:90:
         bb:d4:e4:73:e5:0f:ea:2c:7c:ac:56:06:e1:82:c3:17:f3:bc:
         c9:28:aa:d6:ea:e4:c0:a4:cf:37:c8:c8:ab:ce:00:f9:75:bf:
         27:40:a0:40:96:9a:47:af:9a:26:8c:44:75:77:f9:8f:c8:9e:
         12:ad:d3:b2:f4:ab:e1:05:40:86:3d:16:bc:70:d4:2b:3b:76:
         d9:0c:af:4a:a9:58:45:d3:c2:af:21:86:ca:1e:3f:fb:21:2f:
         d1:bd:3f:21:3a:9e:03:e3:fb:94:6d:4e:46:f3:fc:00:52:2e:
         17:28:79:86:32:a2:db:8d:77:c2:bc:0f:85:ac:ca:a7:15:80:
         0b:dd:bb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:54:45 2026 by rpki-client