Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/3130332e3130302e36382e302f32342d3234203d3e203138303133.roa
File:                     3130332e3130302e36382e302f32342d3234203d3e203138303133.roa (raw, json)
Hash identifier:          9trCS61WlxDaNjMFMf8I2A9wFsbGb5ZIy9HUL4He9I8=
Subject key identifier:   46:AC:E1:D6:DC:B3:C8:55:2C:51:67:C5:BD:7B:8D:F2:72:08:F2:FF
Certificate issuer:       /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2
Certificate serial:       55BB70A51CE206EBE85978DB1880552C7145F61B
Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/3130332e3130302e36382e302f32342d3234203d3e203138303133.roa
Signing time:             Wed 15 Apr 2026 08:25:29 +0000
ROA not before:           Wed 15 Apr 2026 08:20:29 +0000
ROA not after:            Wed 14 Apr 2027 08:25:29 +0000
asID:                     18013
IP address blocks:        103.100.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bb:70:a5:1c:e2:06:eb:e8:59:78:db:18:80:55:2c:71:45:f6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2
        Validity
            Not Before: Apr 15 08:20:29 2026 GMT
            Not After : Apr 14 08:25:29 2027 GMT
        Subject: CN=46ACE1D6DCB3C8552C5167C5BD7B8DF27208F2FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:90:59:c1:aa:10:c2:7a:f2:3d:e5:7c:3e:22:
                    81:ea:4d:4c:d6:1e:50:20:e6:f1:8d:a4:92:d7:3b:
                    4a:c4:cd:c7:7a:4d:f6:25:b1:13:e7:b2:05:e1:2d:
                    e2:a8:e4:66:b6:59:0e:34:3b:96:79:be:ef:3a:68:
                    04:07:a7:ac:e7:e4:5a:d2:d9:89:ce:44:16:f1:70:
                    f1:cb:3c:2c:76:40:db:c7:1e:2a:2c:b3:ce:26:45:
                    e6:96:aa:18:a8:bf:78:ba:73:be:01:01:4e:dc:4c:
                    24:da:52:4b:4a:b1:ed:af:6c:80:a8:79:c0:14:cd:
                    eb:86:b3:71:5b:21:fc:61:01:76:4f:0b:0e:51:27:
                    61:5d:3d:b7:a6:fa:4f:eb:65:b5:0a:c3:45:2f:7e:
                    4b:96:ca:f4:7f:d2:54:76:dc:6a:b1:fe:3d:36:eb:
                    2d:af:39:18:9f:cd:1f:e2:ff:cc:c2:d0:e6:8c:3c:
                    ea:be:f1:eb:40:b8:51:b4:91:49:39:bf:21:18:c7:
                    39:37:4a:44:05:a4:bc:2b:4c:d6:9b:94:1e:4c:56:
                    06:e3:5d:49:b6:5e:7d:3c:c7:cd:da:cb:df:9e:ed:
                    48:48:86:92:57:57:b7:1a:05:d2:e8:a2:07:2f:f8:
                    41:f5:9b:f0:33:c8:cb:9c:27:65:9a:c9:70:18:bc:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AC:E1:D6:DC:B3:C8:55:2C:51:67:C5:BD:7B:8D:F2:72:08:F2:FF
            X509v3 Authority Key Identifier:
                keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/3130332e3130302e36382e302f32342d3234203d3e203138303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:3f:72:b5:11:e9:73:e4:a1:23:d9:73:53:17:3f:20:97:2e:
         8b:ac:70:80:19:c3:4b:82:d2:e6:ce:31:df:7d:5d:84:29:aa:
         c2:ec:b3:48:2c:b9:b0:54:b9:01:ca:75:2f:d8:7b:4f:c7:bd:
         fb:39:0c:d1:a9:f8:c7:5d:4b:8d:5c:90:1b:d7:91:76:4e:01:
         90:f7:bf:df:22:1c:3a:cc:a1:54:9f:2d:a1:51:db:fb:a9:20:
         04:4b:a9:a6:d8:21:e4:fe:c8:07:c8:5e:1b:43:e1:d2:27:c1:
         4f:9d:a9:95:68:f5:95:a6:b0:5a:67:ba:3c:20:4a:aa:3d:fc:
         24:01:9f:51:e2:9d:ca:cd:3f:fd:47:4d:11:80:b3:dd:c5:57:
         c9:9f:2e:68:7a:82:7b:6e:99:7c:01:97:79:e7:35:f3:76:0d:
         f8:34:2a:d0:53:14:27:a0:09:49:2d:d3:d2:fb:d2:0c:26:be:
         d5:58:0d:48:56:22:c3:ae:0d:a7:6c:df:ae:aa:8c:38:85:15:
         09:4f:86:1d:cf:23:70:32:87:0d:54:a0:e6:ce:a0:85:73:33:
         2c:6d:1e:1f:6b:66:37:e8:b0:81:d7:d3:e2:ff:7a:38:ff:0b:
         0f:0e:4b:2a:b9:29:8e:75:5c:37:86:8f:c7:b4:f0:82:cc:0e:
         43:cc:ce:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:25 2026 by rpki-client