Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa
File:                     3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa (raw, json)
Hash identifier:          /mpCOOhcoifOGQlBxngziKNabqELudoz9rVsMBtpZeo=
Subject key identifier:   CA:69:2D:1A:C3:43:4F:63:01:D3:F2:83:67:70:45:6D:62:97:C7:A6
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       0D89D05236C92245DF91F542AD5BA75F55C0E2F4
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa
Signing time:             Mon 13 Apr 2026 08:25:42 +0000
ROA not before:           Mon 13 Apr 2026 08:20:42 +0000
ROA not after:            Mon 12 Apr 2027 08:25:42 +0000
asID:                     63647
IP address blocks:        103.233.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:89:d0:52:36:c9:22:45:df:91:f5:42:ad:5b:a7:5f:55:c0:e2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: Apr 13 08:20:42 2026 GMT
            Not After : Apr 12 08:25:42 2027 GMT
        Subject: CN=CA692D1AC3434F6301D3F2836770456D6297C7A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:ce:42:83:54:c2:29:c2:54:e6:b7:89:b6:
                    b0:96:42:ec:72:18:e8:e0:56:7d:0e:73:00:21:f0:
                    6b:80:15:29:17:ca:c0:f9:69:0b:6a:3a:e4:c0:68:
                    be:fa:2f:5f:f5:8c:2d:0f:62:b1:60:88:9a:76:c8:
                    79:f2:b0:1b:0f:49:fe:19:1d:fb:d4:d1:a2:04:6f:
                    31:05:6c:1c:58:9f:aa:a8:32:73:38:e2:e1:b5:57:
                    30:a8:70:92:c3:28:7b:67:15:dc:68:5a:2f:f9:08:
                    8f:5e:af:7d:71:2d:d4:2a:95:3e:61:28:f6:35:5c:
                    39:f2:3b:69:a4:c1:a1:ce:7e:05:bf:9a:c9:6e:8a:
                    99:c4:b1:00:8d:6b:12:6b:c2:fb:92:d0:55:8f:f6:
                    d5:98:90:4b:71:61:8b:11:69:ba:10:5e:e4:2c:73:
                    af:2f:1d:18:71:0a:c1:4b:8a:c0:cb:5b:a4:b9:da:
                    dc:e8:fc:f2:77:62:79:8b:53:4c:56:c5:f2:a5:78:
                    a2:71:b5:f6:b1:46:91:93:d4:87:22:8f:2d:14:0e:
                    47:57:a0:b9:05:d8:e4:59:ce:ec:a1:15:7d:fc:30:
                    a9:e8:ce:e1:7a:1b:df:af:4c:fd:7f:0b:ea:05:b0:
                    0e:d9:ef:f7:99:1a:cc:91:55:94:4d:b8:13:93:bb:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:69:2D:1A:C3:43:4F:63:01:D3:F2:83:67:70:45:6D:62:97:C7:A6
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233332e3136322e302f32332d3233203d3e203633363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:01:a1:08:9b:99:6d:4f:a6:40:64:c7:cc:e0:a4:89:dd:0a:
         6c:de:15:cb:14:78:ea:eb:22:96:30:59:88:ea:29:ed:91:61:
         ed:a3:9d:45:5a:ca:5c:8a:9e:4d:4c:d5:c6:ca:12:76:ce:9c:
         31:5e:b5:0e:f5:1a:b3:c7:0b:9c:0c:57:80:da:e8:81:ba:ed:
         b8:10:a5:9d:98:e5:75:4b:d4:30:e9:1a:be:ee:25:3b:12:d5:
         2f:30:e9:76:27:3e:b7:04:05:fa:0f:a8:cd:ee:41:51:8f:91:
         8e:6a:7d:80:3b:70:da:d7:6b:fb:27:f6:5a:e1:ef:16:8f:b6:
         00:18:62:f3:20:14:6d:50:4c:d6:a5:0d:0d:e1:5a:b6:1c:d2:
         a1:4d:76:16:41:36:2c:b0:f7:e9:38:42:4c:53:d7:d4:ec:54:
         69:0d:1b:03:ab:75:8f:39:c3:dc:f2:26:f9:fc:6e:49:78:2e:
         82:fd:f1:55:1e:63:55:68:ba:ad:8c:73:c1:47:15:cd:04:01:
         38:9f:a2:43:c5:53:25:2f:c6:9b:fb:97:8e:ad:7a:32:51:bc:
         6e:ab:66:8d:6b:12:cd:c3:4a:be:54:49:3a:49:cb:ab:f3:b8:
         60:68:96:67:7a:1f:fa:dd:91:6c:09:01:7c:4f:a9:02:21:34:
         ce:cf:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:10 2026 by rpki-client