Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32342d3234203d3e20313335333931.roa
File:                     3130332e3235312e3133302e302f32342d3234203d3e20313335333931.roa (raw, json)
Hash identifier:          rSph6E0PNqIRhfXroTq2yxnhRw7/dJYDmf4ML0dmKlc=
Subject key identifier:   31:99:CE:E5:3B:A9:B7:6C:AD:3F:FA:31:DC:CE:7A:FD:36:97:AE:A8
Certificate issuer:       /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial:       3AFD547C965317B639D545C5481FC511FCEE5504
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32342d3234203d3e20313335333931.roa
Signing time:             Fri 17 Apr 2026 09:05:28 +0000
ROA not before:           Fri 17 Apr 2026 09:00:28 +0000
ROA not after:            Fri 16 Apr 2027 09:05:28 +0000
asID:                     135391
IP address blocks:        103.251.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fd:54:7c:96:53:17:b6:39:d5:45:c5:48:1f:c5:11:fc:ee:55:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
        Validity
            Not Before: Apr 17 09:00:28 2026 GMT
            Not After : Apr 16 09:05:28 2027 GMT
        Subject: CN=3199CEE53BA9B76CAD3FFA31DCCE7AFD3697AEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:68:89:34:fd:e6:74:89:bd:d9:cb:dd:91:
                    19:7d:eb:e8:d0:bb:74:60:94:28:25:8d:17:cf:16:
                    90:b6:d0:d4:f5:31:81:94:7c:03:8e:ca:86:d4:53:
                    c7:46:65:cb:ad:07:ee:cf:90:cd:48:01:f6:01:dd:
                    1f:3e:da:f2:07:1a:8d:f9:bb:3f:c6:a4:69:23:7b:
                    ac:b9:a8:51:7e:ee:f4:6b:6c:8e:40:e9:ff:73:de:
                    e2:00:0a:83:40:2e:7f:fe:9f:f6:b7:9f:dc:85:82:
                    48:f2:3e:7e:fd:48:66:3f:95:77:38:3b:78:2d:54:
                    7a:b5:c2:30:37:f7:bb:91:63:c1:7f:f5:9b:dd:29:
                    f8:aa:4e:23:2c:d3:c5:a7:2a:ea:ed:dd:5e:00:24:
                    d7:f6:19:09:69:47:d4:df:88:3a:de:b8:2c:0c:b0:
                    ff:96:4c:24:46:f2:e2:34:90:32:a7:d7:76:44:33:
                    6c:48:9b:52:2d:d3:8d:f0:b9:81:22:55:5c:0a:a1:
                    da:d8:d0:97:6d:46:2c:61:7b:f9:84:ae:63:ff:23:
                    36:16:fe:e1:65:9f:4f:b0:24:42:20:15:a5:4b:0c:
                    b8:fb:cc:f5:34:a1:0b:de:79:63:11:d8:1f:31:1b:
                    07:3e:53:16:6f:1e:8e:15:4f:21:39:89:e7:3d:55:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:99:CE:E5:3B:A9:B7:6C:AD:3F:FA:31:DC:CE:7A:FD:36:97:AE:A8
            X509v3 Authority Key Identifier:
                keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3133302e302f32342d3234203d3e20313335333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:47:81:33:0b:18:c8:0a:a6:52:a5:11:f0:c1:e1:20:71:e7:
         5a:3c:09:02:3a:cc:99:fb:3c:8c:b5:8c:1f:1e:fb:a4:e6:de:
         9f:3e:26:1e:84:41:bf:e4:7f:15:c0:b0:47:82:73:f4:ff:a6:
         6f:0c:e6:1a:40:5b:7c:41:53:53:c1:a8:af:b5:9a:94:67:02:
         f0:f6:c6:64:6c:4d:c5:c2:ec:dd:08:17:a3:c6:e1:23:bb:da:
         d9:3e:53:34:c2:76:83:73:7a:17:a4:bd:ee:ba:34:cd:e7:15:
         d6:ba:8f:1b:4c:9c:cc:c0:89:ab:fd:b8:19:ab:34:e2:8d:bf:
         a6:de:53:ac:64:e5:45:dc:eb:17:c2:9e:2a:4b:9d:a3:99:3e:
         26:77:0b:21:a9:3a:86:ce:ab:95:e5:42:74:85:5e:4a:21:ce:
         7d:7f:08:24:2f:96:b9:55:9d:bb:df:fa:b3:1e:87:94:37:1b:
         e5:0e:2c:50:6c:9a:e2:60:14:e3:39:c1:6d:f4:25:ee:a2:9f:
         f3:72:16:1a:bc:c8:6f:e9:db:a0:25:bb:5c:1b:0f:1e:74:35:
         e9:a7:9d:05:a4:f8:00:43:e9:d6:78:dd:0c:4d:9a:40:b0:87:
         39:24:3f:02:14:74:00:b4:29:cd:1e:f9:f7:cc:a5:66:b2:e8:
         79:3e:31:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:20 2026 by rpki-client