Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3235352e3230302e302f32322d3234203d3e20313430373136.roa
File:                     3130332e3235352e3230302e302f32322d3234203d3e20313430373136.roa (raw, json)
Hash identifier:          7DRrNy0ly8jqOlHzBf8BUeKoJY3H7Oc4IRuif84g95w=
Subject key identifier:   53:26:4A:A0:D1:49:BB:39:53:D5:01:A8:C7:EC:77:71:89:13:A0:75
Certificate issuer:       /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial:       25C057A9BFC90530C800795A6CE4C0B25647B1D2
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3235352e3230302e302f32322d3234203d3e20313430373136.roa
Signing time:             Thu 16 Apr 2026 02:18:14 +0000
ROA not before:           Thu 16 Apr 2026 02:13:14 +0000
ROA not after:            Thu 15 Apr 2027 02:18:14 +0000
asID:                     140716
IP address blocks:        103.255.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 16:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c0:57:a9:bf:c9:05:30:c8:00:79:5a:6c:e4:c0:b2:56:47:b1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
        Validity
            Not Before: Apr 16 02:13:14 2026 GMT
            Not After : Apr 15 02:18:14 2027 GMT
        Subject: CN=53264AA0D149BB3953D501A8C7EC77718913A075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:13:c1:34:15:68:63:87:26:bd:57:0f:d0:
                    b9:be:2c:e9:f3:d3:9c:3b:af:ad:da:82:a6:b1:b0:
                    bd:61:f2:e9:35:67:18:aa:d1:24:7c:5f:99:0a:68:
                    48:2d:06:3e:14:74:a0:47:79:ce:9c:83:6d:2e:d9:
                    bc:d9:4c:67:4f:24:4d:b2:f7:7a:f5:d9:49:b0:55:
                    27:d9:cd:a2:ab:35:5a:76:f8:8c:0d:f1:83:d6:00:
                    44:64:a0:1c:62:2c:57:ce:19:db:82:95:b3:66:cc:
                    f2:3e:5c:73:18:a9:b6:da:a8:c3:c3:ff:b7:a3:e6:
                    42:b9:e7:7e:1f:12:ac:09:84:c9:00:7c:7a:e3:fb:
                    38:9e:be:ab:69:8e:4b:1f:c5:c4:9d:16:e6:86:96:
                    65:a9:62:0f:3d:34:ab:63:2d:6c:c0:bd:55:8f:c7:
                    90:fb:38:cb:42:98:8e:0a:80:32:46:d6:10:9c:d3:
                    80:5a:14:13:a9:38:d7:75:bb:51:41:69:c6:e5:8f:
                    f4:82:ea:42:a8:ea:d6:24:ff:64:5d:93:9a:07:36:
                    3d:f8:16:0d:2f:1b:54:83:a4:cb:4a:47:8d:7c:41:
                    2e:4b:0d:86:b5:ce:c2:5a:49:41:bc:11:b1:7e:7a:
                    75:a8:67:02:e0:d8:ad:d2:2a:b8:38:4e:cb:12:63:
                    ec:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:26:4A:A0:D1:49:BB:39:53:D5:01:A8:C7:EC:77:71:89:13:A0:75
            X509v3 Authority Key Identifier:
                keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3235352e3230302e302f32322d3234203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:92:16:46:40:c0:0d:2e:08:b6:be:21:2f:19:7d:6f:08:8b:
         cb:7c:85:e9:63:bc:63:83:73:c2:aa:7a:9d:32:56:3e:4c:ea:
         cc:db:f0:ef:10:04:eb:a4:06:74:d7:39:64:35:59:71:9c:3c:
         d4:e0:1f:4c:a5:2a:d2:f3:86:a0:df:fe:cd:96:b9:5a:02:34:
         9c:5b:01:6a:fc:e2:17:41:81:83:b0:ab:0b:4c:54:d0:33:fc:
         43:4d:59:28:83:8f:69:19:10:69:87:22:bc:25:d3:63:77:52:
         20:5e:78:52:94:14:4e:9b:82:f8:2d:b4:8e:d2:04:22:b5:7a:
         bd:25:ee:59:b8:24:0f:60:f0:d3:0a:ca:1e:ff:5e:46:fc:30:
         90:ed:fc:c3:fb:59:a0:40:f3:d6:ce:5a:d8:fc:6e:fe:a0:54:
         aa:c4:78:36:3c:c0:68:73:21:10:af:03:04:06:50:46:9f:eb:
         ea:dc:db:f7:a0:bd:0c:1a:d4:2b:1b:a0:78:6c:e5:1c:5c:70:
         c5:0c:c4:67:27:81:03:93:f6:54:7e:42:2a:5f:13:28:99:6e:
         75:af:5f:25:64:28:dd:a6:87:54:10:ae:99:81:c6:93:01:cc:
         c8:f4:81:c9:65:17:04:9b:da:97:c3:e4:e9:bc:b3:09:54:72:
         aa:ac:b4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:15 2026 by rpki-client