Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33382e302f32342d3234203d3e203536303436.roa
File:                     3130332e3231352e33382e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier:          Lv4hC/NesYzJIGGXIiM1AVp8YRdjcsAhRz5NyV3gjzw=
Subject key identifier:   74:D6:06:08:20:7B:A9:60:B3:8E:21:22:6A:52:F3:D1:A8:AE:F5:27
Certificate issuer:       /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
Certificate serial:       6F48D389C430E1F6FAB2FB426A495F5655991CAC
Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33382e302f32342d3234203d3e203536303436.roa
Signing time:             Tue 14 Apr 2026 02:00:12 +0000
ROA not before:           Tue 14 Apr 2026 01:55:12 +0000
ROA not after:            Tue 13 Apr 2027 02:00:12 +0000
asID:                     56046
IP address blocks:        103.215.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:48:d3:89:c4:30:e1:f6:fa:b2:fb:42:6a:49:5f:56:55:99:1c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D
        Validity
            Not Before: Apr 14 01:55:12 2026 GMT
            Not After : Apr 13 02:00:12 2027 GMT
        Subject: CN=74D60608207BA960B38E21226A52F3D1A8AEF527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:58:83:31:fd:51:69:a3:0d:26:eb:c2:b8:
                    0a:36:68:6b:9a:57:25:eb:e0:e9:c1:32:65:2f:0f:
                    c3:8f:10:9d:09:e1:4f:40:22:eb:26:7b:e8:6f:3b:
                    63:a5:35:b1:e4:5d:ce:4e:71:ca:cf:a3:04:f8:e5:
                    85:2c:10:19:48:1b:df:a4:e3:ef:06:48:85:09:df:
                    6d:8e:e4:2b:62:36:66:55:96:ad:c9:bd:31:3b:07:
                    57:28:29:6d:93:91:44:41:9a:9a:38:5e:55:ef:d9:
                    01:d9:7c:65:76:34:08:64:ab:50:a3:a6:5a:ad:b0:
                    4d:8f:0a:c7:7b:a2:d1:e3:ac:4c:f6:92:42:ad:80:
                    bf:88:b7:db:b3:bb:47:2f:ac:e7:28:a0:ab:fd:6f:
                    89:64:dc:d2:f3:0d:86:10:9e:f1:0c:89:9e:84:2d:
                    d0:03:c3:fe:60:37:26:d8:64:1f:39:18:5b:71:4d:
                    4d:45:29:db:79:bd:f6:81:73:35:4b:e8:3f:cc:76:
                    96:4a:e9:aa:1c:a7:09:10:2f:8c:8a:24:c2:3e:08:
                    b6:76:a0:ee:a0:92:87:9b:69:92:e5:17:5c:17:af:
                    19:dd:60:98:bb:6b:e8:7e:55:2e:0c:7e:94:e1:6e:
                    31:1b:e7:64:40:d6:81:23:38:6c:70:e7:0a:67:bf:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D6:06:08:20:7B:A9:60:B3:8E:21:22:6A:52:F3:D1:A8:AE:F5:27
            X509v3 Authority Key Identifier:
                keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/3130332e3231352e33382e302f32342d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:b3:a2:8c:c4:81:52:ee:7d:fe:66:7b:c7:68:0d:6a:86:eb:
         77:11:1e:19:89:e9:42:87:e5:b5:a4:7d:2c:81:2a:93:71:6a:
         f2:bf:2e:eb:cb:f3:fa:ec:7c:47:c5:93:ef:37:3e:e3:6b:39:
         d2:d1:74:e0:f1:44:c6:01:2b:a7:9b:f0:e9:c4:05:f2:ef:4e:
         be:2a:62:42:3e:82:67:f5:f0:45:96:de:29:f7:df:7e:58:0f:
         66:80:5e:51:4b:dd:af:8e:fc:f1:5b:93:37:d2:50:80:dd:77:
         d0:93:13:96:36:5f:6c:1f:b2:8b:77:91:04:cd:4b:e3:56:9f:
         b8:6c:4e:e4:cd:bc:cf:e5:26:dc:74:49:cf:1b:70:c0:9f:1a:
         0b:49:42:24:53:b0:e4:c1:a5:58:1c:35:9a:6c:61:e9:bd:2a:
         d7:4d:b9:03:bf:3e:1e:07:9b:64:43:31:c0:12:6d:68:68:b3:
         18:f4:d9:c7:90:04:33:11:94:27:f0:90:4e:55:91:0d:19:95:
         a7:ad:2b:f1:5e:d7:84:27:1f:d0:93:e5:b1:ec:81:4c:62:a0:
         7d:7f:cc:fe:35:a7:19:0c:06:b7:0e:35:2b:d9:7b:b5:d2:8b:
         ac:da:01:c2:46:af:91:8d:93:8f:c5:b3:05:6f:02:41:8e:5a:
         18:80:97:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:36 2026 by rpki-client