Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/3130332e38312e34382e302f32322d3232203d3e203538353431.roa
File:                     3130332e38312e34382e302f32322d3232203d3e203538353431.roa (raw, json)
Hash identifier:          q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=
Subject key identifier:   19:E3:B3:DE:7E:5D:54:5C:45:73:5E:52:14:42:F2:9C:40:05:10:3A
Certificate issuer:       /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E
Certificate serial:       78CD9E40BDC772D7C0CC50198E19D32FFA6427E3
Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/3130332e38312e34382e302f32322d3232203d3e203538353431.roa
Signing time:             Wed 15 Apr 2026 02:56:39 +0000
ROA not before:           Wed 15 Apr 2026 02:51:39 +0000
ROA not after:            Wed 14 Apr 2027 02:56:39 +0000
asID:                     58541
IP address blocks:        103.81.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cd:9e:40:bd:c7:72:d7:c0:cc:50:19:8e:19:d3:2f:fa:64:27:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E
        Validity
            Not Before: Apr 15 02:51:39 2026 GMT
            Not After : Apr 14 02:56:39 2027 GMT
        Subject: CN=19E3B3DE7E5D545C45735E521442F29C4005103A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7f:21:0b:9d:2e:fd:6c:cd:7d:4a:79:c6:ed:
                    20:2d:d7:46:9b:d6:b6:7b:0f:72:49:1a:e0:de:22:
                    99:7a:1e:46:7d:c6:52:a9:c7:02:3f:13:61:74:32:
                    94:7b:30:71:15:d3:90:6d:7c:bc:4b:6d:d1:cd:9d:
                    66:f7:dd:19:1a:fa:f2:bc:d9:90:38:4e:9a:57:08:
                    5e:60:dc:5f:70:f9:35:a8:e6:85:cc:22:20:b0:9f:
                    f4:41:99:18:61:d5:a8:16:4e:17:36:aa:05:35:64:
                    79:3c:3c:0c:98:ff:b5:5c:89:c9:eb:d6:8c:f8:9d:
                    11:0d:a3:59:37:11:13:1b:66:91:af:97:42:ac:02:
                    8a:0f:4d:f4:8c:36:28:15:63:63:fb:64:5d:ef:df:
                    b6:35:68:94:bf:39:b1:4f:ff:5c:ce:bc:5f:c1:0e:
                    67:7f:c9:77:dd:89:1e:0c:78:f5:55:81:ad:e3:88:
                    b1:68:1c:1d:df:36:e4:78:ef:2b:9f:64:54:09:c4:
                    7f:e2:23:56:a7:a4:0a:f2:aa:9c:dd:62:c9:ee:fe:
                    5c:4c:b4:7f:c5:c2:4d:33:98:e5:c0:38:3d:c0:ef:
                    21:1b:16:2a:89:c9:91:2d:83:65:54:2f:e3:6f:1f:
                    64:a0:73:cc:d6:ed:51:fe:9d:69:8c:95:d7:46:75:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E3:B3:DE:7E:5D:54:5C:45:73:5E:52:14:42:F2:9C:40:05:10:3A
            X509v3 Authority Key Identifier:
                keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/3130332e38312e34382e302f32322d3232203d3e203538353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:ef:a2:1a:30:d6:9e:83:3c:f3:34:81:0e:96:15:9d:7a:
         fe:a5:42:03:8b:b5:c2:ae:56:8a:ee:0d:35:9d:61:72:b5:10:
         d5:b3:2e:d7:83:d5:49:3e:d7:0b:40:e5:e4:26:a9:55:f9:a2:
         df:ce:f1:8a:cb:e3:cc:99:e2:a3:03:83:47:68:88:df:1a:20:
         cd:59:1f:8c:23:a0:88:d6:7b:84:60:0c:29:72:28:cf:b8:0c:
         99:dc:a0:0f:77:c5:a7:e0:33:fa:c9:c2:67:83:d4:6d:9d:2c:
         de:b6:3c:46:c1:6a:7d:0c:b8:36:1e:e2:d8:31:23:19:ec:f1:
         b2:d9:a8:a5:e6:4a:3d:bf:d2:d2:70:a0:a9:52:1e:bf:1d:bf:
         ef:10:36:1b:93:1c:47:a1:8e:49:c1:c4:1e:7f:3e:3d:97:27:
         ec:83:aa:6c:67:0c:9e:24:87:79:60:83:f8:5d:33:7c:e4:c7:
         ba:c5:b7:56:35:14:d3:f2:c5:73:87:82:0d:ab:f0:44:1a:6d:
         f7:14:31:e5:52:d6:41:be:96:c6:6f:f0:0e:3c:06:7f:5f:3b:
         9f:f7:92:1a:4b:36:92:21:5b:b4:ce:2a:99:cf:ba:d7:b4:c3:
         73:a9:5e:e0:88:23:15:ac:aa:4c:79:ff:69:22:d4:bb:b1:15:
         48:2b:53:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:06 2026 by rpki-client