Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3132382e302f32322d3232203d3e20313335333931.roa
File:                     3130332e3235312e3132382e302f32322d3232203d3e20313335333931.roa (raw, json)
Hash identifier:          5xBAWmhbFmnEJhIN/QRTh95aaOBR8BI1ojffz2g8fo8=
Subject key identifier:   D3:7B:53:28:1A:AC:57:27:AF:ED:13:73:5F:69:5A:8E:15:45:BE:FA
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       386EB6945D3BD11F69D22B498A2BB3DEF514B2F5
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3132382e302f32322d3232203d3e20313335333931.roa
Signing time:             Fri 17 Apr 2026 09:05:29 +0000
ROA not before:           Fri 17 Apr 2026 09:00:29 +0000
ROA not after:            Fri 16 Apr 2027 09:05:29 +0000
asID:                     135391
IP address blocks:        103.251.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6e:b6:94:5d:3b:d1:1f:69:d2:2b:49:8a:2b:b3:de:f5:14:b2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 17 09:00:29 2026 GMT
            Not After : Apr 16 09:05:29 2027 GMT
        Subject: CN=D37B53281AAC5727AFED13735F695A8E1545BEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:80:81:0f:a7:dd:4a:ec:11:52:96:14:a5:a6:
                    07:a4:79:39:1b:d6:7b:79:7f:63:8c:50:43:7c:78:
                    50:d9:3f:d7:79:71:7b:3d:66:9f:03:a8:3a:b8:b2:
                    c8:15:70:4d:4f:49:7c:b8:9e:89:f0:03:1a:c8:69:
                    e7:be:3b:17:74:30:cc:05:fc:b4:2d:a0:db:6d:a5:
                    e1:d1:1d:f2:66:0e:a2:92:94:77:88:8a:ba:f0:62:
                    94:07:e4:c0:ca:6f:b1:33:af:29:48:0b:9f:80:25:
                    4e:1f:16:7d:74:d3:d6:8f:33:93:d4:c7:ee:80:5e:
                    a7:8d:44:ec:7e:9e:13:64:a8:54:23:40:0b:2c:15:
                    c8:c8:f7:f0:e4:75:bd:fa:52:9a:6e:52:3f:5e:49:
                    5a:90:ab:2f:38:14:6f:8f:58:4d:8f:25:14:01:e3:
                    19:b4:a5:c9:fb:51:8c:30:ec:3f:5c:6f:11:3e:b5:
                    51:0f:c1:48:5c:02:aa:20:c8:ca:06:3b:21:2a:b0:
                    8c:ae:0b:2d:a6:1d:8b:d9:e5:cd:23:63:ee:e4:d1:
                    b1:08:e5:3b:bb:ef:b7:d5:2b:f7:89:61:48:5e:05:
                    8b:77:28:99:e8:0f:f1:1d:20:63:ef:16:fd:c0:9b:
                    e4:5a:68:71:d0:2d:fe:18:cc:57:3f:cf:9d:df:91:
                    26:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7B:53:28:1A:AC:57:27:AF:ED:13:73:5F:69:5A:8E:15:45:BE:FA
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3132382e302f32322d3232203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:a0:3c:a1:09:c1:ab:46:3c:98:21:e8:95:26:63:9d:e6:
         ba:f3:b1:9e:ec:fd:15:17:72:ad:02:24:55:12:24:e7:48:1f:
         db:e8:28:51:79:6f:4b:a6:21:d2:7b:a4:d1:a7:d2:63:90:1d:
         d5:ea:02:95:d7:72:b5:dd:56:0a:ef:cf:59:7a:3c:93:06:eb:
         4f:eb:8d:b0:01:a8:c4:ee:5a:bd:bf:c7:2c:54:71:de:05:0b:
         75:94:21:f3:8a:5c:f4:a5:5b:61:02:d6:6b:00:5b:1d:a8:c5:
         d4:27:b9:30:0f:cb:d3:7d:93:5f:b4:fd:b0:83:8a:a6:1e:3e:
         82:0d:11:9d:67:c0:69:ff:0a:f6:9a:13:37:3f:6c:ad:eb:ca:
         ad:cc:e1:7a:5b:ef:84:26:58:f5:40:09:e8:c7:95:07:e5:63:
         29:51:a1:dc:f2:d1:a9:45:55:97:ee:99:f2:59:50:46:6f:a2:
         97:86:be:28:5c:fc:29:43:42:dc:f4:33:48:37:d3:92:2c:d7:
         c7:2a:6f:9f:b9:21:1b:49:6e:f4:ec:9d:eb:b1:21:71:8b:7f:
         9a:83:96:d7:9a:e3:54:c4:15:41:69:d2:a7:88:03:a4:25:af:
         54:7e:d1:71:8c:c5:af:51:d6:fe:7c:71:55:9b:80:b5:b6:08:
         ca:53:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:24 2026 by rpki-client