Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095917566238392322/0/3130332e3139382e3138302e302f32322d3232203d3e2030.roa
File:                     3130332e3139382e3138302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          KxBWRAVF66qFC0BfPN9u/Sa8XiQv0rS+EtC+Eg7/Lcw=
Subject key identifier:   A9:49:21:18:4F:CB:32:99:E3:37:91:90:93:19:EE:73:2A:65:C1:E4
Certificate issuer:       /CN=55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894
Certificate serial:       02457C2F9D0E5BDBC64CC665C1769BC2C6F0156A
Authority key identifier: 55:98:3C:77:C9:5B:9F:0B:7F:1F:AE:23:1E:BB:1C:BC:CD:C3:68:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/3130332e3139382e3138302e302f32322d3232203d3e2030.roa
Signing time:             Thu 16 Apr 2026 01:36:25 +0000
ROA not before:           Thu 16 Apr 2026 01:31:25 +0000
ROA not after:            Thu 15 Apr 2027 01:36:25 +0000
asID:                     0
IP address blocks:        103.198.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:45:7c:2f:9d:0e:5b:db:c6:4c:c6:65:c1:76:9b:c2:c6:f0:15:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894
        Validity
            Not Before: Apr 16 01:31:25 2026 GMT
            Not After : Apr 15 01:36:25 2027 GMT
        Subject: CN=A94921184FCB3299E33791909319EE732A65C1E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:c0:69:9f:66:37:e2:9f:14:c8:a7:c1:76:
                    4b:a9:08:46:c1:5a:15:a1:5d:7e:68:4a:23:3e:0d:
                    8e:69:89:1a:ab:01:40:d1:58:72:39:29:ff:8c:e7:
                    25:1c:4d:be:3e:d4:c1:6d:11:8e:a2:2a:87:ea:90:
                    ab:43:b0:42:d6:c0:20:30:b5:2b:8e:27:62:81:4a:
                    10:0a:a3:9e:f7:ba:5f:46:17:d0:d0:43:68:4f:fb:
                    c1:97:9f:17:4c:2c:82:94:f2:11:2e:d5:eb:99:40:
                    7c:8a:bc:65:ac:a3:a4:70:0d:cd:db:c1:c1:78:99:
                    10:c0:86:54:13:61:b0:71:53:9f:7a:9b:f0:2b:e9:
                    96:95:81:80:e0:04:62:89:9c:b0:ff:d0:24:59:77:
                    25:2e:47:f1:d4:17:94:0b:85:ec:a9:63:54:80:57:
                    a0:9f:f3:75:26:35:b3:98:b7:87:21:69:5e:63:2b:
                    3f:31:1b:a6:fb:ef:78:8c:df:92:d2:55:63:0c:fe:
                    9a:00:3c:05:85:02:29:44:44:0b:33:b5:c8:38:d9:
                    07:9a:a4:ef:b1:6e:c2:68:52:ee:c7:a1:f6:b0:d4:
                    a1:cd:46:89:d7:96:07:f6:5a:40:5d:79:eb:3c:e2:
                    bf:e6:eb:e7:59:08:7c:b2:9d:22:80:55:0e:66:04:
                    71:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:49:21:18:4F:CB:32:99:E3:37:91:90:93:19:EE:73:2A:65:C1:E4
            X509v3 Authority Key Identifier:
                keyid:55:98:3C:77:C9:5B:9F:0B:7F:1F:AE:23:1E:BB:1C:BC:CD:C3:68:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/55983C77C95B9F0B7F1FAE231EBB1CBCCDC36894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095917566238392322/0/3130332e3139382e3138302e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:92:0c:4a:3a:f2:0e:d6:41:8c:86:b6:74:d1:90:fb:a4:b3:
         d7:28:99:85:e8:25:d4:d6:9d:45:e1:50:b3:1a:a2:d0:0d:0e:
         bb:b1:56:75:bf:85:63:15:4f:f6:de:bb:4d:bc:19:d0:f6:38:
         b5:a8:50:e0:bf:39:f3:68:48:0d:c1:13:79:65:c8:5f:5f:16:
         2d:4d:81:3f:70:2b:67:6d:80:93:f1:46:17:3b:c8:9c:2e:2e:
         49:e9:b3:8e:cc:60:7c:ae:56:65:1d:92:89:60:35:fb:a5:c6:
         57:77:50:f8:f8:ad:84:0e:b4:ce:25:1b:42:e5:47:e1:b4:f2:
         09:07:ea:fe:57:d7:29:40:fb:c3:fe:4b:bf:3d:6f:e8:1e:3b:
         28:ef:e4:8f:b0:72:b2:be:6e:e7:0e:9b:1f:ae:66:01:29:99:
         b1:ed:95:51:d5:b9:01:9c:78:8d:b0:20:1b:0b:00:6e:a9:2b:
         f5:2b:d9:23:38:c1:e3:b3:e5:72:00:68:e4:6e:f9:59:c8:22:
         60:f1:c1:a8:cf:84:11:a8:f4:45:04:6b:d6:2e:e1:91:64:f0:
         8c:82:23:e5:06:e1:17:db:49:04:3d:04:69:9f:18:37:9a:48:
         63:a6:57:b6:35:f0:70:2d:71:71:27:1a:9d:74:ea:ad:d7:78:
         e7:34:e0:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUAkV8L50OW9vGTMZlwXabwsbwFWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU5ODNDNzdDOTVCOUYwQjdGMUZBRTIzMUVCQjFDQkND
REMzNjg5NDAeFw0yNjA0MTYwMTMxMjVaFw0yNzA0MTUwMTM2MjVaMDMxMTAvBgNV
BAMTKEE5NDkyMTE4NEZDQjMyOTlFMzM3OTE5MDkzMTlFRTczMkE2NUMxRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2sBpn2Y34p8UyKfBdkupCEbB
WhWhXX5oSiM+DY5piRqrAUDRWHI5Kf+M5yUcTb4+1MFtEY6iKofqkKtDsELWwCAw
tSuOJ2KBShAKo573ul9GF9DQQ2hP+8GXnxdMLIKU8hEu1euZQHyKvGWso6RwDc3b
wcF4mRDAhlQTYbBxU596m/Ar6ZaVgYDgBGKJnLD/0CRZdyUuR/HUF5QLheypY1SA
V6Cf83UmNbOYt4chaV5jKz8xG6b773iM35LSVWMM/poAPAWFAilERAsztcg42Qea
pO+xbsJoUu7Hofaw1KHNRonXlgf2WkBdees84r/m6+dZCHyynSKAVQ5mBHFLAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUqUkhGE/LMpnjN5GQkxnucyplweQwHwYDVR0j
BBgwFoAUVZg8d8lbnwt/H64jHrscvM3DaJQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTkxNzU2NjIzODM5MjMyMi8wLzU1OTgzQzc3Qzk1QjlGMEI3RjFGQUUyMzFFQkIx
Q0JDQ0RDMzY4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTU5ODNDNzdDOTVCOUYwQjdGMUZBRTIzMUVCQjFDQkNDREMzNjg5NC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTE3NTY2MjM4MzkyMzIyLzAvMzEzMDMzMmUzMTM5
MzgyZTMxMzgzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
Z8a0MA0GCSqGSIb3DQEBCwUAA4IBAQBnkgxKOvIO1kGMhrZ00ZD7pLPXKJmF6CXU
1p1F4VCzGqLQDQ67sVZ1v4VjFU/23rtNvBnQ9ji1qFDgvznzaEgNwRN5ZchfXxYt
TYE/cCtnbYCT8UYXO8icLi5J6bOOzGB8rlZlHZKJYDX7pcZXd1D4+K2EDrTOJRtC
5UfhtPIJB+r+V9cpQPvD/ku/PW/oHjso7+SPsHKyvm7nDpsfrmYBKZmx7ZVR1bkB
nHiNsCAbCwBuqSv1K9kjOMHjs+VyAGjkbvlZyCJg8cGoz4QRqPRFBGvWLuGRZPCM
giPlBuEX20kEPQRpnxg3mkhjple2NfBwLXFxJxqddOqt13jnNOB5
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:36:04 2026 by rpki-client