Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3235352e3230302e302f32322d3234203d3e20313338393530.roa
File:                     3130332e3235352e3230302e302f32322d3234203d3e20313338393530.roa (raw, json)
Hash identifier:          /77yHLTvOVF7ETXvim5g76++7Vwhk5vnSL2FrN2h/uo=
Subject key identifier:   04:43:54:92:41:42:6F:64:A3:92:65:DF:2F:9D:77:EC:20:D0:2F:5F
Certificate issuer:       /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial:       276F00B7AE1B74454A02BA6A897493453F532E95
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3235352e3230302e302f32322d3234203d3e20313338393530.roa
Signing time:             Thu 16 Apr 2026 02:18:15 +0000
ROA not before:           Thu 16 Apr 2026 02:13:15 +0000
ROA not after:            Thu 15 Apr 2027 02:18:15 +0000
asID:                     138950
IP address blocks:        103.255.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 16:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6f:00:b7:ae:1b:74:45:4a:02:ba:6a:89:74:93:45:3f:53:2e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
        Validity
            Not Before: Apr 16 02:13:15 2026 GMT
            Not After : Apr 15 02:18:15 2027 GMT
        Subject: CN=0443549241426F64A39265DF2F9D77EC20D02F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:3d:53:02:93:93:b9:c8:27:ca:79:c9:21:
                    43:07:98:49:9e:ab:a5:48:99:62:06:9b:db:7b:9c:
                    f8:e7:b0:c6:bf:7e:1f:95:7e:62:c7:75:85:6c:04:
                    41:22:31:14:50:e3:fe:6d:af:04:bd:ee:07:fc:b4:
                    78:ce:38:9c:85:1c:a1:48:ca:35:d2:34:51:9a:d4:
                    a0:04:cd:fd:19:e0:e6:8c:5a:d2:25:31:00:8f:d3:
                    95:64:18:1a:35:f6:61:3b:78:88:57:b5:64:b0:6d:
                    03:4e:54:fb:54:f6:14:96:29:1a:a6:62:90:68:22:
                    ac:d3:69:fc:01:c6:3a:1c:27:4d:2d:c0:7f:c1:25:
                    d2:a6:e8:3b:97:ce:b7:39:08:fb:ab:cd:cc:bd:49:
                    73:a7:36:b9:93:2b:6f:ea:75:99:17:20:6e:07:e1:
                    60:9b:f4:28:83:62:72:79:48:64:6c:e4:79:c3:c5:
                    e2:52:c9:6b:00:7d:7f:43:f7:53:94:55:3b:da:d1:
                    9c:67:7f:57:42:2c:26:ab:95:41:d0:49:4b:aa:74:
                    ca:e0:60:b9:42:49:d2:b3:c0:d0:54:2b:74:b8:dd:
                    e9:b8:6c:f4:a8:23:dc:50:66:f4:c7:34:09:d2:01:
                    de:4a:11:71:27:0e:46:63:6f:e6:74:ce:dd:8a:35:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:43:54:92:41:42:6F:64:A3:92:65:DF:2F:9D:77:EC:20:D0:2F:5F
            X509v3 Authority Key Identifier:
                keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3235352e3230302e302f32322d3234203d3e20313338393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:b5:79:c3:9f:2a:22:a2:2a:1a:b2:71:5a:a6:7a:94:ba:9e:
         9d:26:47:9b:af:05:59:24:3f:69:21:ca:4a:b0:fe:74:2f:45:
         8a:19:1e:d5:c6:52:e8:b1:06:8b:0f:a2:98:c0:d7:59:18:fa:
         ae:fd:0b:54:2f:a2:92:a8:be:ec:23:45:b2:00:2e:3a:ad:c4:
         ca:e1:59:2e:7e:8c:39:4d:c1:bb:aa:4e:70:21:e7:f6:c0:be:
         33:b6:54:38:27:4f:27:9b:e3:59:cf:75:bb:08:f1:3a:38:ca:
         51:7d:49:4f:18:9e:d2:75:bc:3f:b6:79:cd:74:f2:4b:59:23:
         d8:0d:b0:2d:a3:20:5c:3e:3e:3e:55:d2:66:17:45:8d:63:6c:
         84:62:7b:57:05:84:72:f4:73:55:53:3c:1d:35:8d:cc:26:16:
         5c:23:00:29:f7:c8:24:9f:e3:f6:06:11:30:d4:b8:2c:38:9a:
         be:6c:41:a3:f4:39:5b:87:6a:61:18:63:db:4a:d9:46:46:37:
         26:61:59:da:6f:7a:87:fe:8e:1d:62:3e:d1:bf:c6:41:96:18:
         cc:79:24:5d:45:be:89:9c:71:4c:29:0d:b5:e4:fc:e4:ff:8c:
         ee:bd:b7:b2:54:c1:cb:fe:af:ea:e4:77:67:cf:b3:e8:59:e7:
         cf:0e:c9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:55 2026 by rpki-client