Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33362e302f32342d3234203d3e203536303436.roa
File:                     3130332e3231352e33362e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          ogDWhnBIhkB09M/TQsA8FF20Jhv6hE4UaPKuvM/ONSE=
Subject key identifier:   73:9B:B5:FF:94:69:D9:81:7E:18:FD:17:08:EE:9C:8B:AB:7D:87:03
Certificate issuer:       /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial:       3583281A71D8240214C7C979A1FFB2F0BAA729EE
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33362e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 14 Apr 2026 02:00:12 +0000
ROA not before:           Tue 14 Apr 2026 01:55:12 +0000
ROA not after:            Tue 13 Apr 2027 02:00:12 +0000
asID:                     56046
IP address blocks:        103.215.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:83:28:1a:71:d8:24:02:14:c7:c9:79:a1:ff:b2:f0:ba:a7:29:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
        Validity
            Not Before: Apr 14 01:55:12 2026 GMT
            Not After : Apr 13 02:00:12 2027 GMT
        Subject: CN=739BB5FF9469D9817E18FD1708EE9C8BAB7D8703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:a6:f4:11:e2:9e:79:df:f1:14:bd:fb:52:
                    e5:0c:4b:10:45:0d:31:8d:a6:40:e0:15:c3:17:b3:
                    3f:ba:bc:ce:07:d5:3e:b5:ef:52:ba:0c:bc:4f:a2:
                    4d:b4:8d:b5:96:4b:f4:2a:f9:5e:a2:cf:82:11:8b:
                    4b:8d:8c:c1:84:d7:ee:d5:64:f7:bc:ab:d0:a6:b9:
                    d6:db:0b:a9:68:dd:7e:28:94:12:b1:63:4c:9b:57:
                    ad:ed:ae:0d:43:b9:f2:33:c0:b2:67:1e:5b:6a:54:
                    89:6e:7b:64:02:5f:aa:6d:41:1c:61:8c:70:5d:48:
                    01:ac:5a:f5:17:d3:16:d7:d9:71:42:c0:94:97:0a:
                    6e:3b:6c:14:7d:57:ed:35:55:28:c5:7a:0d:88:e5:
                    c4:74:71:ce:7a:46:72:93:82:d3:47:e5:ad:be:2f:
                    81:24:14:ac:e7:21:38:5f:da:26:f2:86:51:b0:fd:
                    10:80:f7:82:24:1a:1d:55:92:f2:f1:46:bb:2b:3a:
                    ec:b9:cd:b1:60:6a:92:7b:16:53:62:4e:71:34:c9:
                    3e:c1:79:aa:fb:17:80:08:45:ff:73:04:57:0a:24:
                    a2:61:ed:18:e8:54:bf:69:d6:69:aa:0d:f0:ed:dd:
                    c9:59:05:d0:50:7f:c4:4e:5d:86:7e:cf:df:ac:74:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9B:B5:FF:94:69:D9:81:7E:18:FD:17:08:EE:9C:8B:AB:7D:87:03
            X509v3 Authority Key Identifier:
                keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33362e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:12:98:44:ae:9c:0c:b5:e1:4f:86:ae:39:04:ed:0f:72:55:
         ee:69:2e:6a:a8:c0:f6:19:cc:59:a7:a7:48:fb:98:f7:ec:53:
         bc:74:d3:46:9a:99:74:8c:56:33:34:81:79:aa:d4:ac:04:b1:
         e5:94:d3:c3:24:e6:5e:d9:07:d6:fa:ae:ec:55:83:f9:a9:91:
         a8:da:f3:c8:10:c5:2d:9d:f2:56:8d:e1:e1:3f:74:2a:7d:cd:
         4c:70:57:fe:97:b3:22:78:4f:cd:9e:cd:19:fa:f2:e0:d0:a1:
         6b:4a:ba:f2:cd:11:44:52:94:cf:4e:c2:20:bf:c0:a7:fb:55:
         01:df:08:93:17:41:fc:df:b2:52:a3:7f:d6:ce:9b:0e:e8:93:
         50:da:b0:73:fb:c1:06:11:40:b5:4b:0c:83:48:84:5b:bb:b4:
         68:25:cb:41:07:71:b3:46:64:df:51:14:49:61:78:a2:95:fe:
         d6:cd:d4:67:00:91:df:ca:b6:1d:36:c8:d5:c4:e1:9c:02:d2:
         bc:97:6d:38:6e:e9:f9:43:0e:01:95:03:3b:b8:10:93:18:42:
         24:3e:7c:73:bd:46:32:d6:01:b7:49:a8:b3:e2:79:6e:1e:01:
         a7:ba:10:7c:e8:db:9c:9e:e4:be:9f:49:25:a6:01:ba:a7:86:
         48:a9:07:79
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUNYMoGnHYJAIUx8l5of+y8LqnKe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1
NEI5MTQ5RDAeFw0yNjA0MTQwMTU1MTJaFw0yNzA0MTMwMjAwMTJaMDMxMTAvBgNV
BAMTKDczOUJCNUZGOTQ2OUQ5ODE3RTE4RkQxNzA4RUU5QzhCQUI3RDg3MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJT6b0EeKeed/xFL37UuUMSxBF
DTGNpkDgFcMXsz+6vM4H1T6171K6DLxPok20jbWWS/Qq+V6iz4IRi0uNjMGE1+7V
ZPe8q9CmudbbC6lo3X4olBKxY0ybV63trg1DufIzwLJnHltqVIlue2QCX6ptQRxh
jHBdSAGsWvUX0xbX2XFCwJSXCm47bBR9V+01VSjFeg2I5cR0cc56RnKTgtNH5a2+
L4EkFKznIThf2ibyhlGw/RCA94IkGh1VkvLxRrsrOuy5zbFgapJ7FlNiTnE0yT7B
ear7F4AIRf9zBFcKJKJh7RjoVL9p1mmqDfDt3clZBdBQf8ROXYZ+z9+sdGmrAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUc5u1/5Rp2YF+GP0XCO6ci6t9hwMwHwYDVR0j
BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC
QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjI1MTIxNTUxNzM4NDcwNS8wLzMxMzAzMzJlMzIz
MTM1MmUzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGfXJDANBgkqhkiG9w0BAQsFAAOCAQEAkBKYRK6cDLXhT4auOQTtD3JV
7mkuaqjA9hnMWaenSPuY9+xTvHTTRpqZdIxWMzSBearUrASx5ZTTwyTmXtkH1vqu
7FWD+amRqNrzyBDFLZ3yVo3h4T90Kn3NTHBX/pezInhPzZ7NGfry4NCha0q68s0R
RFKUz07CIL/Ap/tVAd8IkxdB/N+yUqN/1s6bDuiTUNqwc/vBBhFAtUsMg0iEW7u0
aCXLQQdxs0Zk31EUSWF4opX+1s3UZwCR38q2HTbI1cThnALSvJdtOG7p+UMOAZUD
O7gQkxhCJD58c71GMtYBt0mos+J5bh4Bp7oQfOjbnJ7kvp9JJaYBuqeGSKkHeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:54 2026 by rpki-client