Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32332d3233203d3e20313335333931.roa
File:                     3130332e3235312e3133302e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier:          KIqbfurXReKBMLuhCh4GDhIOCsAlKou1GyJkZX2TrlU=
Subject key identifier:   EC:B1:F0:AC:F3:AB:01:F7:80:50:F8:69:D1:23:EA:02:05:CA:CD:24
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       274308CFED6D84A23F80CEA7471249AAB1EF1D08
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32332d3233203d3e20313335333931.roa
Signing time:             Fri 17 Apr 2026 09:05:29 +0000
ROA not before:           Fri 17 Apr 2026 09:00:29 +0000
ROA not after:            Fri 16 Apr 2027 09:05:29 +0000
asID:                     135391
IP address blocks:        103.251.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:43:08:cf:ed:6d:84:a2:3f:80:ce:a7:47:12:49:aa:b1:ef:1d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 17 09:00:29 2026 GMT
            Not After : Apr 16 09:05:29 2027 GMT
        Subject: CN=ECB1F0ACF3AB01F78050F869D123EA0205CACD24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:60:56:5c:d4:26:74:48:f3:6b:7d:d2:11:
                    bd:ad:26:71:80:dc:f1:90:8e:47:5d:ac:56:3d:7f:
                    b8:62:ad:6f:cb:26:da:33:f9:44:0e:cc:e4:98:7c:
                    eb:55:a3:fa:54:a9:ca:57:00:33:f0:ac:ac:4d:22:
                    90:1e:40:8c:de:0a:f6:fb:61:a1:c7:06:94:d2:bf:
                    04:50:f0:4d:a7:41:b1:d6:fb:17:45:d6:56:ea:b2:
                    72:30:d6:d7:13:94:f4:ee:5e:d2:4c:6f:b2:53:26:
                    b7:db:ef:a7:d5:1d:ce:70:40:c2:93:ca:5d:eb:29:
                    23:f2:74:31:35:92:c8:b6:03:e6:b9:d1:12:a4:b8:
                    08:7d:05:5b:a0:ea:e6:90:25:c9:95:92:8a:f0:de:
                    c8:44:e4:46:b9:81:f1:50:9a:e4:c0:93:33:6a:f2:
                    b5:f0:b6:f7:f2:8d:ce:05:49:7e:b9:74:ac:a1:3f:
                    e7:ee:1a:4c:2c:b6:5e:14:99:6c:a9:52:cb:33:84:
                    fd:25:12:f3:97:b0:c1:b1:f5:9d:96:2d:a6:20:c3:
                    8e:df:79:fc:c3:77:7d:6b:69:95:82:4c:db:1d:c2:
                    8c:b4:a5:2d:e7:65:c7:af:d7:0b:ee:43:72:bd:cb:
                    07:8e:52:25:93:a3:26:49:c6:6d:ef:96:91:32:cf:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B1:F0:AC:F3:AB:01:F7:80:50:F8:69:D1:23:EA:02:05:CA:CD:24
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32332d3233203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:78:bc:b1:49:85:b8:30:c3:dd:e9:9c:b9:8d:5b:0b:ff:e0:
         8d:1c:18:45:a5:c2:d7:f7:79:8b:b6:82:c1:59:b0:dc:e1:46:
         bb:bf:cd:64:d0:88:c0:b9:5f:53:8e:dd:62:3e:15:89:48:07:
         ce:ce:f3:8a:6d:37:9a:86:8c:64:d4:5a:62:bb:47:26:60:8f:
         17:54:6c:a4:c8:c0:47:fc:22:39:79:a6:6a:ee:a6:6e:83:f6:
         58:ed:cc:07:26:a3:58:23:2d:25:4e:a8:41:d8:ec:6f:0c:21:
         e5:b2:4f:4c:54:e8:d5:1d:6f:c9:c4:b6:97:f4:71:6e:0f:df:
         46:d2:b6:0a:48:94:05:ee:af:b3:c9:7e:1d:2f:51:da:32:3f:
         78:11:a5:db:45:e8:55:bd:a0:d0:49:77:db:d6:66:5a:de:cb:
         e6:87:ef:73:e9:78:73:73:3d:e9:eb:26:2a:97:c3:04:f0:ad:
         8e:21:bc:68:1a:b7:eb:5c:21:26:e8:00:d5:47:21:9d:a3:09:
         72:43:9c:d2:f9:ed:74:f3:66:dc:22:cb:6e:f8:f2:ba:9f:d3:
         e4:db:88:5e:fa:c1:e7:b0:c3:b9:d6:59:77:a0:ed:35:8b:b6:
         15:7d:53:30:f3:15:f6:0d:1d:a6:ca:f4:05:38:d5:1f:e3:0d:
         0d:a4:33:42
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUJ0MIz+1thKI/gM6nRxJJqrHvHQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD
MUE4NjlFNjAeFw0yNjA0MTcwOTAwMjlaFw0yNzA0MTYwOTA1MjlaMDMxMTAvBgNV
BAMTKEVDQjFGMEFDRjNBQjAxRjc4MDUwRjg2OUQxMjNFQTAyMDVDQUNEMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06GBWXNQmdEjza33SEb2tJnGA
3PGQjkddrFY9f7hirW/LJtoz+UQOzOSYfOtVo/pUqcpXADPwrKxNIpAeQIzeCvb7
YaHHBpTSvwRQ8E2nQbHW+xdF1lbqsnIw1tcTlPTuXtJMb7JTJrfb76fVHc5wQMKT
yl3rKSPydDE1ksi2A+a50RKkuAh9BVug6uaQJcmVkorw3shE5Ea5gfFQmuTAkzNq
8rXwtvfyjc4FSX65dKyhP+fuGkwstl4UmWypUsszhP0lEvOXsMGx9Z2WLaYgw47f
efzDd31raZWCTNsdwoy0pS3nZcev1wvuQ3K9yweOUiWToyZJxm3vlpEyz2unAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU7LHwrPOrAfeAUPhp0SPqAgXKzSQwHwYDVR0j
BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0
MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk2Mjc1MzMwNzc3MzUwMTQ2LzAvMzEzMDMzMmUz
MjM1MzEyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNTMzMzkz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWf7gjANBgkqhkiG9w0BAQsFAAOCAQEASHi8sUmFuDDD3emc
uY1bC//gjRwYRaXC1/d5i7aCwVmw3OFGu7/NZNCIwLlfU47dYj4ViUgHzs7zim03
moaMZNRaYrtHJmCPF1RspMjAR/wiOXmmau6mboP2WO3MByajWCMtJU6oQdjsbwwh
5bJPTFTo1R1vycS2l/Rxbg/fRtK2CkiUBe6vs8l+HS9R2jI/eBGl20XoVb2g0El3
29ZmWt7L5ofvc+l4c3M96esmKpfDBPCtjiG8aBq361whJugA1UchnaMJckOc0vnt
dPNm3CLLbvjyup/T5NuIXvrB57DDudZZd6DtNYu2FX1TMPMV9g0dpsr0BTjVH+MN
DaQzQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:31 2026 by rpki-client