Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa
File:                     3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (raw, json)
Hash identifier:          xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=
Subject key identifier:   15:03:4F:53:36:4E:5C:0C:2B:FC:0B:B1:67:43:BB:EF:34:04:76:C0
Certificate issuer:       /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
Certificate serial:       649E6E8CD881B66042ADD238A089C6AAA3957225
Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa
Signing time:             Wed 15 Apr 2026 03:11:38 +0000
ROA not before:           Wed 15 Apr 2026 03:06:38 +0000
ROA not after:            Wed 14 Apr 2027 03:11:38 +0000
asID:                     4837
IP address blocks:        101.251.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 09:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:9e:6e:8c:d8:81:b6:60:42:ad:d2:38:a0:89:c6:aa:a3:95:72:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63
        Validity
            Not Before: Apr 15 03:06:38 2026 GMT
            Not After : Apr 14 03:11:38 2027 GMT
        Subject: CN=15034F53364E5C0C2BFC0BB16743BBEF340476C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:81:56:98:5d:51:cf:39:e4:82:e9:6a:78:
                    81:24:8c:97:27:26:28:97:50:73:10:4c:6b:79:94:
                    3c:3e:ed:1c:2a:d1:79:79:07:d3:bd:d6:88:8e:52:
                    a2:0b:f4:31:e2:d1:ca:01:2b:6f:88:6a:05:b3:7d:
                    ab:88:41:1f:1b:c6:37:e4:2e:66:4c:6e:eb:a6:00:
                    1d:a9:f3:05:41:4a:c2:ca:d6:d4:f6:57:05:bc:d6:
                    86:7a:60:b5:a9:cb:f9:89:66:39:0f:61:d5:90:61:
                    06:30:22:95:fc:43:7e:97:92:36:9e:c6:d1:b6:02:
                    4d:01:66:b9:83:5b:cd:f4:3f:ce:46:e9:72:a3:02:
                    3e:96:a6:30:4f:f7:11:8e:af:a9:35:3f:87:ea:1d:
                    27:53:a9:2b:cf:7b:a7:ef:e9:18:d0:f4:97:52:eb:
                    00:2d:e4:14:84:53:ac:8f:75:82:6d:07:e4:b9:d9:
                    7d:77:5a:84:6a:f8:c9:5c:3f:6c:c9:c0:ae:79:3b:
                    38:a4:75:9d:30:8b:68:be:04:db:77:3b:87:9f:48:
                    fe:56:af:bf:51:be:81:4f:7c:62:fc:6d:6f:36:0b:
                    c7:66:94:18:46:c9:79:2e:40:14:31:69:28:b5:54:
                    bf:18:ff:63:d3:7a:5d:5b:06:d7:0c:ac:6d:b4:2f:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:03:4F:53:36:4E:5C:0C:2B:FC:0B:B1:67:43:BB:EF:34:04:76:C0
            X509v3 Authority Key Identifier:
                keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.251.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:50:98:96:19:62:85:dc:c7:a5:c8:f6:70:0d:ec:be:20:91:
         e3:ec:a6:2c:67:b4:b5:87:86:45:ed:09:c1:43:14:17:fd:75:
         ee:70:bc:70:31:64:cf:4d:db:67:f8:e0:f5:79:89:e5:ee:b8:
         b6:ac:7d:d3:05:1e:d4:82:f2:44:f6:a2:35:e1:63:34:95:1f:
         a0:94:d0:0a:6c:6d:ab:c5:69:77:bd:b0:b9:32:6c:8c:d2:d8:
         2f:06:38:7c:6c:7f:6b:23:c4:b6:8a:83:5e:f9:48:1b:49:ad:
         7d:32:44:3a:80:6e:23:81:3e:27:83:9f:41:11:88:c0:d1:84:
         07:f0:71:9a:0d:97:9b:7f:79:49:77:35:10:af:24:bc:5a:c2:
         16:52:60:6c:98:f9:ec:d8:7e:4f:8f:aa:ce:8e:76:ec:ab:76:
         ff:7e:e3:e2:c1:6b:e2:1c:dd:3b:82:cf:02:6c:02:e9:6a:37:
         ea:46:9a:a8:d3:7d:71:46:87:c5:85:7b:bd:6a:39:6a:f9:16:
         c2:d9:2c:d3:59:54:72:47:5c:48:13:ba:73:b6:94:1a:13:28:
         1a:94:70:0a:19:c5:57:3f:3c:a0:5c:b0:a9:b7:b1:39:58:be:
         09:7a:21:6c:96:95:be:33:29:16:d4:77:c8:2e:72:ec:1c:d1:
         66:23:c8:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:28 2026 by rpki-client