Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa
File:                     3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa (raw, json)
Hash identifier:          UoMxgKtAhyszzVVZnBqAdDpPta7+jHjGEznfu4FR8Iw=
Subject key identifier:   62:76:9D:B6:2C:DB:7C:C2:80:CB:1F:5E:22:B4:2C:08:A1:2A:CE:8F
Certificate issuer:       /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B
Certificate serial:       35F036106490DBC30AC1AE07A08E94CEFCF0A258
Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa
Signing time:             Wed 15 Apr 2026 06:51:42 +0000
ROA not before:           Wed 15 Apr 2026 06:46:42 +0000
ROA not after:            Wed 14 Apr 2027 06:51:42 +0000
asID:                     63718
IP address blocks:        103.105.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:f0:36:10:64:90:db:c3:0a:c1:ae:07:a0:8e:94:ce:fc:f0:a2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B
        Validity
            Not Before: Apr 15 06:46:42 2026 GMT
            Not After : Apr 14 06:51:42 2027 GMT
        Subject: CN=62769DB62CDB7CC280CB1F5E22B42C08A12ACE8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:99:92:cb:dd:30:2f:33:9b:a1:fe:47:6a:6b:
                    65:b6:41:d3:e9:a6:da:95:7e:02:ce:57:2f:b5:16:
                    38:a1:0e:39:92:cb:5a:d9:28:13:a4:aa:2e:23:ee:
                    85:d0:9d:15:dd:87:74:e7:79:57:c6:95:6a:bc:92:
                    d2:08:4a:dc:c3:18:88:e8:bc:5a:77:5f:38:07:22:
                    38:bb:3b:84:77:92:d2:a9:72:bd:53:c8:38:f3:1d:
                    5b:8b:80:7f:01:c6:3e:a4:0c:00:ae:ac:4d:77:33:
                    81:f5:cf:a1:7a:2b:41:62:66:c9:aa:0c:56:15:36:
                    28:8e:ee:3b:dd:fb:d7:79:6e:0a:84:e7:9c:35:28:
                    f0:55:1f:2b:4b:d5:c9:a9:7c:ef:35:77:9d:c2:0c:
                    15:24:a3:24:2e:b3:8f:3f:dc:d2:96:01:9a:3a:45:
                    6e:40:49:88:09:da:09:81:d3:e0:13:ed:b4:34:58:
                    18:32:c8:05:4b:e1:08:ba:e6:4c:22:f7:52:a7:6a:
                    10:6a:3c:99:35:ce:8e:cf:5e:cb:13:8b:0d:f6:7f:
                    99:0c:77:91:ea:ca:53:1c:e7:64:be:99:24:71:1e:
                    6c:4f:39:88:02:03:34:37:10:9c:f2:c1:21:a1:39:
                    12:1d:eb:49:84:ca:35:50:af:d1:89:6c:c2:e1:7d:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:76:9D:B6:2C:DB:7C:C2:80:CB:1F:5E:22:B4:2C:08:A1:2A:CE:8F
            X509v3 Authority Key Identifier:
                keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:0e:dd:8a:22:ca:aa:52:a3:5f:e8:06:24:f7:68:10:e8:90:
         a0:2e:20:dc:4c:b7:26:45:ff:cc:e5:2d:6f:0a:9b:97:db:e5:
         ec:e5:82:4b:af:df:ac:cd:ca:c0:2e:67:31:56:ab:49:55:2d:
         7f:7a:0a:b6:c7:38:5d:be:f2:58:97:b9:83:fd:00:0a:c1:5c:
         12:ca:dd:07:f2:c4:1c:70:10:9d:68:1a:0b:f1:21:a9:ab:f5:
         b3:f1:bf:43:a9:46:4b:34:f2:10:40:96:bb:20:bc:8a:23:11:
         ba:e0:2b:f6:d6:79:24:c2:f0:d7:c5:92:98:23:f2:42:8a:e0:
         a8:fc:9e:4d:13:ee:99:26:f8:b7:30:fa:43:ee:af:5a:00:64:
         c3:c0:4e:f4:97:bb:0c:8b:27:1f:2d:53:36:3d:aa:a7:02:1f:
         df:8c:f2:e1:c6:2a:4d:27:1d:dc:5a:6e:64:7b:b5:db:1c:64:
         d3:9a:cc:3f:b8:d9:f7:6f:de:6f:b0:0d:55:22:ef:0f:61:66:
         42:25:28:94:72:ca:c4:6f:67:07:91:81:01:e3:52:64:d1:6b:
         22:02:42:79:f4:36:3d:8c:c8:20:53:50:c1:74:b2:24:37:84:
         8d:ea:e8:7d:88:6e:49:95:e3:90:86:cb:23:03:37:10:69:e9:
         8a:e9:84:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:51 2026 by rpki-client