Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130302e302f32322d3232203d3e20313337383037.roa
File:                     3130332e3131342e3130302e302f32322d3232203d3e20313337383037.roa (raw, json)
Hash identifier:          f4RyrjC0PS+6xsc4FziMI2Z0vvlWGTvgZVGfCTiaDM0=
Subject key identifier:   F7:D2:50:4F:A3:59:12:25:C7:34:D0:F9:C5:F4:F6:A3:26:6B:FC:92
Certificate issuer:       /CN=C7470BC41735EF04A8D35A523E87865C640FD17A
Certificate serial:       2072195DF54CEC0D0AB0EFD2D57D45FE04860A9E
Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130302e302f32322d3232203d3e20313337383037.roa
Signing time:             Tue 14 Apr 2026 07:07:07 +0000
ROA not before:           Tue 14 Apr 2026 07:02:07 +0000
ROA not after:            Tue 13 Apr 2027 07:07:07 +0000
asID:                     137807
IP address blocks:        103.114.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 08:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:72:19:5d:f5:4c:ec:0d:0a:b0:ef:d2:d5:7d:45:fe:04:86:0a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A
        Validity
            Not Before: Apr 14 07:02:07 2026 GMT
            Not After : Apr 13 07:07:07 2027 GMT
        Subject: CN=F7D2504FA3591225C734D0F9C5F4F6A3266BFC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:49:6e:d9:04:a9:8d:1e:9f:41:bd:e0:ea:
                    7a:3b:d1:36:15:e4:02:e1:bd:6b:9b:78:06:f8:ec:
                    fd:2a:1a:7a:b8:66:4f:a8:b5:91:83:24:e3:82:b8:
                    00:15:b6:19:e2:0f:67:9c:7a:ce:1c:71:ee:f4:b9:
                    8c:67:1b:32:60:11:42:ae:0d:f8:1b:55:89:29:fb:
                    20:55:0b:2d:ae:de:10:a0:3e:d5:b1:7b:83:88:f4:
                    fa:51:15:e4:5c:92:9f:4e:36:cf:87:54:11:93:c3:
                    e4:8b:c5:23:f3:de:28:2d:bb:48:35:65:31:34:f5:
                    24:55:ee:1a:de:23:e0:2f:8f:85:2e:f3:a7:d8:c7:
                    3a:bb:85:69:d4:9c:ba:f0:7c:cf:53:da:1f:ea:0c:
                    9c:ae:24:00:0c:a1:a7:5d:56:3c:fa:5e:a7:1f:1a:
                    c1:a3:bc:4b:b2:5c:c1:74:ac:ee:7a:96:fc:a3:35:
                    f2:49:68:b6:f0:2a:ce:5a:3e:e1:0d:f8:a3:ff:a6:
                    6a:ea:c1:fa:42:47:b1:22:d7:34:c1:9c:a2:0c:66:
                    4a:3e:a2:bc:6d:5b:67:a6:e8:76:b0:49:03:95:0f:
                    fc:0a:c6:51:e5:b8:6a:a4:1c:9b:bc:80:08:47:41:
                    84:e0:0f:0d:63:fc:05:22:e8:27:5b:31:4b:9e:8a:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D2:50:4F:A3:59:12:25:C7:34:D0:F9:C5:F4:F6:A3:26:6B:FC:92
            X509v3 Authority Key Identifier:
                keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130302e302f32322d3232203d3e20313337383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:f8:81:a3:e1:be:ad:71:19:b8:a2:6e:f2:0e:36:78:f6:
         29:5d:b3:63:0f:a3:e1:cf:3e:a4:7e:2c:a8:f6:ed:b7:1d:ee:
         e0:da:02:09:aa:56:23:43:0c:42:75:27:18:ad:02:64:ea:1d:
         dc:d6:53:26:c9:4c:15:7d:d3:83:8a:86:27:aa:fa:8e:7d:4c:
         38:63:d7:67:ae:b7:44:f4:37:70:e7:d3:15:28:ec:36:4f:5d:
         07:c8:23:2a:1a:76:aa:5e:8e:3b:4d:e2:70:8a:d7:14:9e:82:
         6c:27:41:74:31:61:fe:3c:ed:46:61:29:16:9d:fd:7b:22:5d:
         fd:f8:d2:fc:c0:ce:47:3d:2b:d0:48:a7:1e:09:52:50:5d:f0:
         33:20:19:8f:a4:0a:21:4e:6d:d2:db:d8:07:54:02:da:a6:d8:
         9d:6b:bf:ce:a7:38:af:3c:fc:61:c4:a7:9d:f5:99:ff:a8:5c:
         4b:7c:90:14:84:86:8f:f4:a6:8b:53:c6:be:9f:ee:ce:9a:5e:
         70:99:0a:ad:c8:4d:b5:d9:e3:cb:4a:b8:51:3b:23:a7:72:58:
         6b:42:4f:0c:de:b9:a9:b8:b5:57:29:96:63:f3:ba:a7:60:00:
         79:ff:03:13:1a:e2:71:a3:15:e7:ca:0b:ae:d8:fe:86:3b:b1:
         3f:4d:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:36 2026 by rpki-client