Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e32352e32302e302f32322d3232203d3e203633363437.roa
File:                     3130332e32352e32302e302f32322d3232203d3e203633363437.roa (raw, json)
Hash identifier:          7uY7CySOB9nghpRW6X7iz2EmNK83F0K6e4scBCMGaL4=
Subject key identifier:   A4:4F:50:B5:A8:91:8A:E0:57:38:BA:8B:3E:F9:A9:CF:62:B2:F0:36
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       4B577A5FED7699BD14D3045E411358698A383B02
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e32352e32302e302f32322d3232203d3e203633363437.roa
Signing time:             Mon 13 Apr 2026 08:15:04 +0000
ROA not before:           Mon 13 Apr 2026 08:10:04 +0000
ROA not after:            Mon 12 Apr 2027 08:15:04 +0000
asID:                     63647
IP address blocks:        103.25.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:57:7a:5f:ed:76:99:bd:14:d3:04:5e:41:13:58:69:8a:38:3b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: Apr 13 08:10:04 2026 GMT
            Not After : Apr 12 08:15:04 2027 GMT
        Subject: CN=A44F50B5A8918AE05738BA8B3EF9A9CF62B2F036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:eb:08:8b:ca:30:b9:9c:50:46:de:82:00:
                    ec:e9:9a:06:72:81:04:ce:5e:58:86:d8:2b:16:55:
                    f9:ae:e5:d4:15:a7:f8:02:ee:5b:ef:65:c1:1b:97:
                    86:de:fc:0e:46:73:6b:61:43:e6:50:48:10:17:5c:
                    4e:85:15:bd:52:86:f6:f2:19:13:04:7f:97:37:28:
                    d6:aa:75:be:9c:18:ee:d6:5e:24:a1:9f:2d:39:75:
                    4f:f8:d4:1e:93:6b:37:96:10:e0:2c:2f:83:b1:b1:
                    25:f5:35:16:b3:a4:df:7a:6d:b2:85:63:e0:e1:6a:
                    5b:7b:02:37:3a:ff:e1:29:bf:29:38:1e:e2:34:d0:
                    e7:83:a1:7d:dd:0f:df:13:ea:24:66:4f:24:a3:f5:
                    df:76:fa:f5:ab:31:d4:98:85:97:d0:bf:a6:d5:cb:
                    35:de:44:cd:7b:ba:5c:b5:28:6f:08:2a:20:7f:73:
                    65:8d:15:0a:f2:3a:56:76:b0:0a:92:18:13:97:db:
                    2e:70:44:4c:00:f6:a4:32:94:e1:b7:a3:64:ce:1d:
                    03:89:43:b2:3c:71:17:c3:58:63:3e:f6:7c:54:e5:
                    a1:90:96:6c:fc:26:9b:74:88:d9:a5:e7:15:f8:0d:
                    46:f7:db:c9:c3:c7:99:15:7f:58:7c:58:f8:32:44:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:4F:50:B5:A8:91:8A:E0:57:38:BA:8B:3E:F9:A9:CF:62:B2:F0:36
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e32352e32302e302f32322d3232203d3e203633363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:03:86:1e:41:94:f6:05:5e:5c:e6:21:67:ea:6a:95:fd:53:
         6d:5c:df:85:25:d8:7f:2c:5e:7b:44:81:6f:80:62:df:b2:23:
         fd:f5:5d:96:9c:62:15:31:85:25:b2:85:ff:41:99:99:12:7c:
         fe:b7:53:81:3b:cd:c4:a6:fb:6b:19:3c:2e:49:aa:9d:b2:4e:
         2a:5a:57:cc:c3:e8:b9:df:b8:38:72:67:4c:09:b2:8f:95:52:
         bd:fb:d0:31:af:25:2f:c8:ac:6e:5f:bd:c0:a8:24:30:d2:4e:
         5f:9b:88:b4:6f:d7:f4:4b:cd:cd:73:c3:6b:f4:47:c2:96:a5:
         f9:6d:ac:31:ce:9e:e9:9a:2f:28:25:f1:cb:ef:1d:d5:49:6c:
         fe:ec:7d:bb:d6:95:74:d0:0d:bb:65:2b:1a:7c:63:6e:5c:dd:
         3c:6b:14:08:0a:38:42:85:d1:6b:3b:57:22:fe:c7:1c:25:57:
         bc:a2:91:7f:5a:b9:65:cc:3a:21:7c:9d:8f:a0:58:5e:10:58:
         15:87:5a:d9:15:fa:3c:90:5c:68:97:a9:98:e4:62:9a:a2:cd:
         2a:2c:41:ef:9c:c7:b0:fc:f0:6e:dd:43:61:0d:a3:27:70:4c:
         f6:30:bd:45:54:50:37:c7:00:de:03:2f:f4:aa:b3:27:7c:42:
         b4:cc:d1:64
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUS1d6X+12mb0U0wReQRNYaYo4OwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1
QUQzRjM5ODAeFw0yNjA0MTMwODEwMDRaFw0yNzA0MTIwODE1MDRaMDMxMTAvBgNV
BAMTKEE0NEY1MEI1QTg5MThBRTA1NzM4QkE4QjNFRjlBOUNGNjJCMkYwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCabusIi8owuZxQRt6CAOzpmgZy
gQTOXliG2CsWVfmu5dQVp/gC7lvvZcEbl4be/A5Gc2thQ+ZQSBAXXE6FFb1Shvby
GRMEf5c3KNaqdb6cGO7WXiShny05dU/41B6TazeWEOAsL4OxsSX1NRazpN96bbKF
Y+Dhalt7Ajc6/+Epvyk4HuI00OeDoX3dD98T6iRmTySj9d92+vWrMdSYhZfQv6bV
yzXeRM17uly1KG8IKiB/c2WNFQryOlZ2sAqSGBOX2y5wREwA9qQylOG3o2TOHQOJ
Q7I8cRfDWGM+9nxU5aGQlmz8Jpt0iNml5xX4DUb328nDx5kVf1h8WPgyRFuXAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUpE9QtaiRiuBXOLqLPvmpz2Ky8DYwHwYDVR0j
BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB
NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1OTc4MzE2ODg1NjU1NTU1LzAvMzEzMDMzMmUzMjM1
MmUzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM2MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcZFDANBgkqhkiG9w0BAQsFAAOCAQEANAOGHkGU9gVeXOYhZ+pqlf1TbVzf
hSXYfyxee0SBb4Bi37Ij/fVdlpxiFTGFJbKF/0GZmRJ8/rdTgTvNxKb7axk8Lkmq
nbJOKlpXzMPoud+4OHJnTAmyj5VSvfvQMa8lL8isbl+9wKgkMNJOX5uItG/X9EvN
zXPDa/RHwpal+W2sMc6e6ZovKCXxy+8d1Uls/ux9u9aVdNANu2UrGnxjblzdPGsU
CAo4QoXRaztXIv7HHCVXvKKRf1q5Zcw6IXydj6BYXhBYFYda2RX6PJBcaJepmORi
mqLNKixB75zHsPzwbt1DYQ2jJ3BM9jC9RVRQN8cA3gMv9KqzJ3xCtMzRZA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:34 2026 by rpki-client