Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3130332e312e32302e302f32322d3232203d3e203233383431.roa
File:                     3130332e312e32302e302f32322d3232203d3e203233383431.roa (raw, json)
Hash identifier:          VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=
Subject key identifier:   08:1B:8C:ED:07:00:9D:46:DF:4B:FA:0B:AE:EF:63:F9:F2:9F:34:9B
Certificate issuer:       /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial:       5C9B4575E7794619F80445C1C726CF568420FD1F
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3130332e312e32302e302f32322d3232203d3e203233383431.roa
Signing time:             Wed 15 Apr 2026 01:17:05 +0000
ROA not before:           Wed 15 Apr 2026 01:12:05 +0000
ROA not after:            Wed 14 Apr 2027 01:17:05 +0000
asID:                     23841
IP address blocks:        103.1.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9b:45:75:e7:79:46:19:f8:04:45:c1:c7:26:cf:56:84:20:fd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
        Validity
            Not Before: Apr 15 01:12:05 2026 GMT
            Not After : Apr 14 01:17:05 2027 GMT
        Subject: CN=081B8CED07009D46DF4BFA0BAEEF63F9F29F349B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:72:53:7f:ec:d2:a0:7b:d1:8d:96:26:bd:
                    db:b4:d4:18:34:0f:cf:fe:0e:7c:9c:f0:7c:73:ea:
                    44:30:e0:66:c1:94:ac:d3:0d:3b:9e:ff:51:31:d4:
                    9f:f1:a6:46:12:89:10:f0:fe:cb:fb:e0:c0:4e:80:
                    d7:c1:35:03:13:88:14:e7:80:70:62:81:12:13:91:
                    e4:b1:50:f8:54:f2:77:f9:71:dd:7b:ae:22:fe:79:
                    a9:03:6b:d3:15:e1:c8:73:fa:c6:a2:dd:19:55:99:
                    c6:1a:2d:46:84:06:33:f3:70:25:ce:13:53:36:c8:
                    9f:88:fb:ef:1a:a8:66:a4:78:56:a8:78:e1:94:ca:
                    56:b3:ca:58:ec:17:89:f3:e6:47:03:16:1a:53:9d:
                    9f:73:3b:6f:84:d3:84:1d:bb:80:c9:49:50:00:9d:
                    b1:81:39:ac:39:67:e9:d2:b7:8f:3f:59:75:6b:a0:
                    2c:48:7a:ba:c9:da:4f:ef:ec:e1:c0:1e:67:00:62:
                    40:54:63:f4:99:e0:30:d7:54:a4:91:ee:06:f6:7c:
                    9f:f2:28:ae:ae:10:62:5e:b6:f5:c6:8b:6e:2f:2c:
                    0a:24:22:11:61:35:b2:68:23:85:f7:36:1c:9c:16:
                    7e:8e:95:e9:0f:84:ba:fc:3d:fc:a3:2c:dc:26:e6:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1B:8C:ED:07:00:9D:46:DF:4B:FA:0B:AE:EF:63:F9:F2:9F:34:9B
            X509v3 Authority Key Identifier:
                keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/3130332e312e32302e302f32322d3232203d3e203233383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:65:17:a9:9f:c8:97:a2:00:3d:14:1e:56:3a:ce:ae:bd:60:
         17:fc:79:a9:ab:11:39:d3:06:9a:80:69:6b:41:85:b8:f9:f3:
         9d:33:52:45:e4:33:fb:04:5d:5e:98:0c:6d:d0:4b:63:dc:0a:
         5e:c2:54:93:8c:14:c7:79:0b:92:f9:b3:86:8d:33:84:4f:23:
         74:56:24:0e:e7:f3:4b:2d:cf:9f:c4:b7:59:b5:49:08:66:42:
         c3:e3:96:d5:83:97:ea:d7:3e:89:da:b2:e4:ca:7a:96:d5:aa:
         b5:16:70:9d:bc:df:e5:38:17:6d:9d:5a:5d:0a:86:40:e6:48:
         e0:1a:c7:c8:c3:6c:0c:8b:57:88:7b:6f:64:e4:5c:db:21:65:
         e2:32:dd:24:d0:13:c3:b7:34:a1:4d:c7:b9:26:fe:61:4b:e1:
         87:ad:a5:b6:9d:6d:28:29:54:9e:2b:0c:c2:bd:dd:5f:3f:ed:
         5a:2c:75:6b:03:d3:b3:13:cf:00:75:df:95:5b:98:0f:6d:7a:
         d2:1b:cc:7b:40:b6:e8:04:7c:33:3e:30:67:1c:36:33:11:6b:
         e4:21:64:eb:0a:7c:00:0b:d1:3e:ff:9b:d2:0c:62:6c:7d:f0:
         4b:bf:ff:25:e9:5d:63:de:3d:5e:b0:56:9a:9b:78:c2:60:fa:
         e0:8a:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:58:35 2026 by rpki-client