Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233392e3139322e302f32322d3232203d3e2034383038.roa
File:                     3130332e3233392e3139322e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          vMSHtOzxPu3117LR4uNtGZu4s21BKCPeXBhgmL8fw6s=
Subject key identifier:   99:0A:6F:4A:21:56:32:9B:2B:58:B7:CD:6B:97:EE:E5:0B:E9:FE:15
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       4E01792A614D1CD1B4DD0A70BE1FA82DF4150B48
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233392e3139322e302f32322d3232203d3e2034383038.roa
Signing time:             Mon 13 Apr 2026 08:15:03 +0000
ROA not before:           Mon 13 Apr 2026 08:10:03 +0000
ROA not after:            Mon 12 Apr 2027 08:15:03 +0000
asID:                     4808
IP address blocks:        103.239.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:01:79:2a:61:4d:1c:d1:b4:dd:0a:70:be:1f:a8:2d:f4:15:0b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: Apr 13 08:10:03 2026 GMT
            Not After : Apr 12 08:15:03 2027 GMT
        Subject: CN=990A6F4A2156329B2B58B7CD6B97EEE50BE9FE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ac:a9:1f:da:2d:a4:f3:ff:45:a7:2f:3f:21:
                    49:e9:3b:7e:8a:9a:8c:4e:32:d8:45:e2:19:e5:42:
                    d1:4f:17:88:22:30:21:95:49:ce:e5:df:15:63:51:
                    50:fd:7c:d7:9a:63:cb:68:7d:39:9c:e0:07:b3:d1:
                    1f:65:27:dd:89:26:0e:ab:58:e5:5b:89:c3:c7:cd:
                    e0:68:5e:3c:cd:a2:d8:8f:e5:9b:f2:2b:9d:6c:cd:
                    78:fb:da:dd:25:a4:06:ee:62:b2:6b:7d:85:4f:b1:
                    eb:69:8f:0c:bf:e3:7b:d0:b8:f2:73:33:5c:09:39:
                    a8:a3:a5:de:30:98:0e:66:29:32:e8:cc:2e:a6:bd:
                    cd:a6:0f:4e:2d:ad:3b:62:cd:52:22:59:c4:e6:1c:
                    38:1a:fa:77:05:61:a9:59:da:9d:ed:7e:fa:a1:51:
                    60:a5:eb:c2:e5:4a:64:22:fc:4b:7f:76:1f:58:90:
                    a7:b4:cb:47:4c:7b:8c:4a:5a:dd:c0:c4:77:bf:15:
                    91:a9:5d:c0:64:1f:96:f4:0b:0f:61:29:e5:81:41:
                    e8:8b:16:6e:07:4d:3a:6b:61:19:e1:e7:0a:0e:6f:
                    34:66:fa:89:76:00:87:66:33:31:21:73:f7:3e:63:
                    72:08:52:4d:51:7e:95:18:3d:34:a3:2a:f3:c3:bd:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0A:6F:4A:21:56:32:9B:2B:58:B7:CD:6B:97:EE:E5:0B:E9:FE:15
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3233392e3139322e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:d9:40:6a:82:55:cf:90:0c:33:7a:7c:06:02:ba:9d:0c:e2:
         a5:1f:64:b8:49:9f:30:4b:15:c2:26:88:18:26:bd:16:57:f7:
         4e:f5:0b:db:fd:77:07:15:9a:03:50:9e:e9:60:2c:cf:ea:5f:
         c9:b7:3d:9d:b6:d6:89:4a:fc:6b:f8:e5:23:3a:ce:25:15:2b:
         70:69:4a:d3:39:6e:23:c9:85:b1:d4:2f:d7:98:92:09:2e:2f:
         41:30:55:2a:2f:94:ba:4d:71:45:37:aa:f0:64:ba:f7:fc:09:
         5a:50:0b:81:7a:24:85:2f:be:98:d6:2c:3a:b6:c9:dc:6a:9a:
         56:fd:d5:1e:15:cb:f3:c9:9d:79:7b:00:f8:21:d7:e9:c4:0b:
         97:28:b4:11:99:05:7e:28:fe:9e:dd:6f:1b:42:0b:32:ae:ef:
         d6:4d:32:79:c2:63:33:85:88:dd:97:f0:7a:c0:87:19:18:07:
         fb:0c:70:b2:af:10:be:31:09:a5:3a:c7:fe:c4:a3:85:97:bc:
         7a:eb:17:d9:34:18:f7:c6:c9:3f:d7:37:eb:64:8f:28:06:91:
         f1:10:01:7e:1a:f6:fd:89:c9:b6:78:76:5f:d2:3f:b9:eb:1f:
         9e:0d:0c:69:06:0f:48:b1:44:87:9e:d2:6a:b5:f9:14:bd:8b:
         2b:18:38:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:13:06 2026 by rpki-client