Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3131312e3137322e302f32322d3232203d3e203633363437.roa
File:                     3130332e3131312e3137322e302f32322d3232203d3e203633363437.roa (raw, json)
Hash identifier:          TiV4V34LVrnU6qvMBQ8FzoHgw6xT4uFtKDm2u9CALqs=
Subject key identifier:   78:3C:2E:E8:4C:FB:B9:50:F6:D8:3A:81:FA:80:67:EB:42:92:F9:55
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       141CE50EDA16907CA776CB47D41744989C47F08D
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3131312e3137322e302f32322d3232203d3e203633363437.roa
Signing time:             Mon 13 Apr 2026 08:25:42 +0000
ROA not before:           Mon 13 Apr 2026 08:20:42 +0000
ROA not after:            Mon 12 Apr 2027 08:25:42 +0000
asID:                     63647
IP address blocks:        103.111.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1c:e5:0e:da:16:90:7c:a7:76:cb:47:d4:17:44:98:9c:47:f0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: Apr 13 08:20:42 2026 GMT
            Not After : Apr 12 08:25:42 2027 GMT
        Subject: CN=783C2EE84CFBB950F6D83A81FA8067EB4292F955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:af:bf:1d:4e:f5:d9:18:df:0f:59:f1:ec:
                    1e:8d:42:cc:07:af:6c:de:cf:f0:ec:9e:2e:98:96:
                    b1:20:54:ca:c7:93:32:c5:26:9b:87:fc:4f:20:1c:
                    dc:f1:ce:91:d1:35:0a:fb:35:4d:0f:c9:25:6b:14:
                    f7:d7:3f:27:89:f5:e1:e1:c3:a7:fe:a4:0c:a3:fd:
                    0d:87:14:e1:f0:e4:a8:99:91:5c:81:3c:bb:bd:3b:
                    19:bd:5d:d8:91:9d:1f:db:fc:f0:0a:ba:3c:50:9b:
                    89:a5:80:a5:1a:68:a8:0d:e7:2f:1f:2b:b2:e1:da:
                    16:98:d7:59:9b:1e:5b:fc:80:82:99:9b:8e:d4:f4:
                    2a:02:ad:a5:e1:66:f6:a7:f1:ed:05:6d:71:69:82:
                    b1:56:70:ad:f4:e9:ab:10:9f:c1:48:7b:1f:fb:95:
                    6c:f2:ae:19:82:29:03:78:0a:f8:97:e4:3b:d2:86:
                    be:18:77:54:08:fc:aa:69:55:63:94:3a:76:52:6e:
                    c4:f0:b0:8d:9b:af:9b:b5:53:85:62:f5:e7:ce:3d:
                    b9:2c:ce:89:de:45:ed:fa:82:a2:78:8d:87:50:a9:
                    6b:53:17:80:da:8b:05:d6:7d:24:fb:f3:bf:6a:fd:
                    6c:15:f6:8f:26:9d:38:53:a8:be:c3:77:23:bd:14:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3C:2E:E8:4C:FB:B9:50:F6:D8:3A:81:FA:80:67:EB:42:92:F9:55
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3131312e3137322e302f32322d3232203d3e203633363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:22:ed:a2:ea:fe:ee:c6:65:3b:8d:54:30:9c:15:c5:28:33:
         c2:f9:10:7e:7e:4a:a9:01:d6:9c:8d:cb:ae:1c:2c:1a:4e:0e:
         40:c3:38:51:30:81:45:be:75:d4:dd:23:ce:b8:64:f0:17:f2:
         51:dc:9a:29:93:90:ca:0b:f8:d1:dc:8b:8c:10:c6:72:27:cb:
         84:48:3e:af:62:3d:e2:d9:81:19:08:2b:74:39:f0:f2:28:a1:
         75:22:c2:7e:df:bf:9f:e5:d2:d6:89:36:26:0b:7d:92:dd:1f:
         ad:1d:7f:e2:71:92:ad:70:9e:12:5b:ae:31:5a:91:dc:d7:1a:
         32:3e:4f:2a:31:69:e0:f1:90:82:d3:7e:c2:c7:0a:29:30:31:
         bb:b6:30:85:71:0c:13:5b:08:1f:34:cc:c6:bc:3f:7d:de:da:
         4c:57:1f:a0:82:a6:45:fb:a9:78:36:6d:6c:a6:9b:c1:e0:72:
         7f:df:1a:6d:16:6e:3c:0f:2b:f7:e7:96:57:e4:fc:1e:73:c8:
         cf:c4:9e:82:3d:9b:f8:5e:df:3f:f8:c6:b7:02:01:4c:9b:7e:
         a6:1e:d5:2c:78:48:1c:b4:b7:2e:92:35:94:e8:04:79:c9:87:
         e5:9c:24:1a:a5:81:aa:2c:aa:18:f3:4f:40:f8:1e:68:de:36:
         b0:4c:92:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:54 2026 by rpki-client