Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32332d3233203d3e203535393934.roa
File:                     3130332e3233382e3138342e302f32332d3233203d3e203535393934.roa (raw, json)
Hash identifier:          U86y2pWfRpvA/Qc80njgiyVqAEwVkTh9omuYjbYPgmw=
Subject key identifier:   A2:D4:76:B7:AB:35:22:F4:F1:3E:64:0A:20:85:7C:F2:E1:34:FC:89
Certificate issuer:       /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial:       5022598AAD8946641A3F1F477498D5D397EA19AA
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32332d3233203d3e203535393934.roa
Signing time:             Fri 17 Apr 2026 10:04:03 +0000
ROA not before:           Fri 17 Apr 2026 09:59:03 +0000
ROA not after:            Fri 16 Apr 2027 10:04:03 +0000
asID:                     55994
IP address blocks:        103.238.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:52:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:22:59:8a:ad:89:46:64:1a:3f:1f:47:74:98:d5:d3:97:ea:19:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
        Validity
            Not Before: Apr 17 09:59:03 2026 GMT
            Not After : Apr 16 10:04:03 2027 GMT
        Subject: CN=A2D476B7AB3522F4F13E640A20857CF2E134FC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f0:6e:68:1d:82:87:3a:9d:00:41:1a:6d:d2:
                    fe:bf:89:ec:c6:c7:83:5b:fa:82:3f:44:95:13:03:
                    d5:00:23:2e:45:aa:6e:d8:d9:a6:60:4c:7f:9e:4f:
                    54:c7:04:74:46:df:87:a7:b1:9f:57:65:6d:5b:28:
                    3b:da:11:de:a6:77:ce:91:22:be:4d:5d:0f:68:fd:
                    21:23:27:8b:11:8a:d4:76:1d:3c:83:03:eb:1a:4e:
                    22:93:71:fa:52:13:db:06:2a:03:2e:9c:c0:e0:50:
                    de:14:9a:ea:46:ee:7f:dc:3c:5c:69:1d:ac:3c:f2:
                    9d:af:f9:52:e5:d4:e2:21:de:a5:27:1b:07:dd:ab:
                    7f:4b:3c:fc:bd:c4:8e:7a:43:b9:98:cc:af:cf:bc:
                    4b:d7:01:c0:2f:3c:e1:1b:89:14:16:a8:b6:12:b4:
                    65:33:67:71:c5:8e:7d:74:5f:71:7d:f3:dd:91:7a:
                    b2:f4:44:eb:23:d3:61:2c:e0:ce:01:02:67:26:28:
                    7e:cf:14:5b:6e:94:40:27:1f:06:a8:01:77:c4:07:
                    b7:90:85:59:54:c1:0a:ae:2e:1f:c0:15:e4:40:cf:
                    1e:1f:40:31:81:1a:07:98:e2:89:4d:6b:7b:ce:de:
                    40:0d:b5:a0:9f:ff:70:77:35:56:db:83:42:ad:cb:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D4:76:B7:AB:35:22:F4:F1:3E:64:0A:20:85:7C:F2:E1:34:FC:89
            X509v3 Authority Key Identifier:
                keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32332d3233203d3e203535393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:55:ca:2d:9e:08:c9:cd:df:19:52:08:e0:b7:07:4e:f2:86:
         4c:b7:af:e4:a1:bd:27:d3:f5:09:04:4a:f1:99:0b:64:8d:02:
         c2:67:9c:ad:fd:75:5a:48:d3:94:0b:72:f8:85:27:dc:88:ef:
         f1:8f:02:4f:aa:47:7a:b8:7a:1a:5a:01:b0:68:bb:f8:e4:02:
         ea:fd:6d:c8:f3:ef:04:74:57:62:f0:5c:a0:40:50:b9:85:43:
         a4:49:5e:61:a9:e7:7d:4b:62:be:00:4e:16:08:52:0c:39:e2:
         28:a8:4e:bb:90:4f:9a:e1:67:d8:b2:ad:27:61:57:61:da:35:
         3a:26:9b:78:0f:12:cd:d4:4b:63:8d:58:1c:5c:bc:e0:d2:9e:
         fe:f9:38:fe:54:42:44:ca:73:c3:9a:fc:3b:ad:6a:f1:4f:ab:
         3b:cc:ea:05:19:21:94:22:2d:bc:40:f7:70:56:5e:9d:4c:d6:
         2c:a5:31:54:86:86:33:ed:94:a5:16:b3:a3:78:69:28:84:c1:
         1b:84:f6:e7:0a:60:5f:55:ac:49:a2:81:35:44:53:5a:11:c7:
         e4:7c:2c:7a:d1:85:5b:ab:7b:fe:fd:e4:52:d4:50:39:33:1a:
         79:66:3c:dd:d9:f0:0d:13:f7:e8:b7:9a:9b:e8:2f:0f:5f:fb:
         c5:ae:6c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:00 2026 by rpki-client