Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32342d3234203d3e203137363231.roa
File:                     3130332e3233382e3138342e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          NJvGcwjP+XSbrzCGdq1a1NUBP3ZADbWRddXSZijHOOM=
Subject key identifier:   6B:3C:56:BA:F0:85:73:AF:61:DC:7F:99:32:A0:33:74:57:F4:35:00
Certificate issuer:       /CN=C89881B315F7E21BA948CF9CB11D1AC422106426
Certificate serial:       2CEC7C0E1F17F82C19A8A8C62529120753BFEF54
Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32342d3234203d3e203137363231.roa
Signing time:             Fri 17 Apr 2026 10:04:03 +0000
ROA not before:           Fri 17 Apr 2026 09:59:03 +0000
ROA not after:            Fri 16 Apr 2027 10:04:03 +0000
asID:                     17621
IP address blocks:        103.238.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ec:7c:0e:1f:17:f8:2c:19:a8:a8:c6:25:29:12:07:53:bf:ef:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426
        Validity
            Not Before: Apr 17 09:59:03 2026 GMT
            Not After : Apr 16 10:04:03 2027 GMT
        Subject: CN=6B3C56BAF08573AF61DC7F9932A0337457F43500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:82:85:a8:5b:12:bf:7b:ce:50:20:db:ff:d4:
                    ef:6d:cb:82:1f:0f:8a:8e:5c:f5:12:55:e2:93:11:
                    72:2d:89:dc:1b:98:62:1d:fe:27:9e:1b:85:5c:13:
                    89:c6:4f:17:3d:df:ee:54:29:4e:d8:d6:e1:cd:53:
                    ac:4c:ab:c7:31:ab:a1:5d:d3:b3:b4:b1:ea:9a:e9:
                    ad:61:f6:c3:d3:9d:ca:8a:4f:dc:c3:89:d2:50:22:
                    f0:a7:91:ae:f6:23:ac:93:1e:0b:0d:00:46:78:5d:
                    87:00:1e:d7:b3:3e:2e:c2:8b:70:47:91:1d:ac:1b:
                    c9:eb:db:98:f8:49:dc:02:31:c5:00:f9:0c:35:da:
                    7c:83:a6:42:46:a6:6d:a9:41:0c:1e:c0:d3:10:9a:
                    64:ed:2e:b2:54:51:74:26:e9:87:a6:a2:17:9a:13:
                    7e:d0:7d:43:af:27:fb:f8:b0:c2:51:41:bf:82:86:
                    5c:32:b1:ca:96:8d:94:e5:16:ff:30:da:3c:f3:09:
                    15:69:0c:f7:be:fe:34:76:28:e7:70:4b:a6:27:db:
                    88:52:bb:a2:30:a2:93:1a:58:b2:cb:aa:27:4c:8e:
                    e3:6c:40:45:01:03:8f:32:e2:19:9b:49:6c:61:a9:
                    3c:e2:57:aa:54:65:77:ab:de:7e:2e:3f:08:05:fa:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3C:56:BA:F0:85:73:AF:61:DC:7F:99:32:A0:33:74:57:F4:35:00
            X509v3 Authority Key Identifier:
                keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:33:5d:95:35:bc:62:64:36:ac:60:0c:39:05:41:aa:a9:
         b9:10:b4:73:5e:8b:b3:26:50:ed:98:5a:1e:c0:af:29:20:c4:
         e5:32:41:6a:80:ad:5a:a4:c7:a8:7e:ab:1e:91:e8:30:61:1d:
         e5:ba:ac:be:85:f0:bd:d4:e8:8d:2e:ee:50:ff:c8:03:c2:b0:
         ef:d9:5a:af:47:c2:47:0f:37:8f:97:d5:1f:33:0d:cf:0e:56:
         07:32:36:fc:06:9c:c1:97:f0:69:56:bd:c9:a9:a1:d1:c8:b3:
         27:ed:51:82:55:f2:a9:35:db:7e:ac:08:40:f4:a6:8b:24:c5:
         b9:c0:56:b0:cb:e7:83:da:64:e5:d9:5f:36:c7:9a:e6:d6:3c:
         b1:87:29:bc:58:3f:2f:74:bb:1a:04:6a:63:af:80:d6:75:03:
         90:06:f4:44:e9:5d:cc:94:8a:0f:4e:3f:bb:2c:55:42:ea:f5:
         86:14:c9:ae:ad:03:c0:a7:cb:28:8d:9d:c2:da:d3:be:38:89:
         0e:7f:ca:77:73:d7:de:cb:76:d2:aa:5f:6a:33:9f:ee:af:93:
         b7:cd:68:27:92:1c:70:c6:1a:3b:b7:56:32:27:9b:de:a6:c9:
         b3:00:9e:94:cc:26:2b:62:0c:88:b0:67:c2:59:e6:b0:e7:ae:
         09:75:70:dc
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIULOx8Dh8X+CwZqKjGJSkSB1O/71QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy
MjEwNjQyNjAeFw0yNjA0MTcwOTU5MDNaFw0yNzA0MTYxMDA0MDNaMDMxMTAvBgNV
BAMTKDZCM0M1NkJBRjA4NTczQUY2MURDN0Y5OTMyQTAzMzc0NTdGNDM1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgoWoWxK/e85QINv/1O9ty4If
D4qOXPUSVeKTEXItidwbmGId/ieeG4VcE4nGTxc93+5UKU7Y1uHNU6xMq8cxq6Fd
07O0seqa6a1h9sPTncqKT9zDidJQIvCnka72I6yTHgsNAEZ4XYcAHtezPi7Ci3BH
kR2sG8nr25j4SdwCMcUA+Qw12nyDpkJGpm2pQQwewNMQmmTtLrJUUXQm6Yemohea
E37QfUOvJ/v4sMJRQb+ChlwyscqWjZTlFv8w2jzzCRVpDPe+/jR2KOdwS6Yn24hS
u6IwopMaWLLLqidMjuNsQEUBA48y4hmbSWxhqTziV6pUZXer3n4uPwgF+r4rAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUazxWuvCFc69h3H+ZMqAzdFf0NQAwHwYDVR0j
BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx
QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC8zMTMwMzMyZTMy
MzMzODJlMzEzODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfuuDANBgkqhkiG9w0BAQsFAAOCAQEABu0zXZU1vGJkNqxgDDkF
QaqpuRC0c16LsyZQ7ZhaHsCvKSDE5TJBaoCtWqTHqH6rHpHoMGEd5bqsvoXwvdTo
jS7uUP/IA8Kw79lar0fCRw83j5fVHzMNzw5WBzI2/AacwZfwaVa9yamh0cizJ+1R
glXyqTXbfqwIQPSmiyTFucBWsMvng9pk5dlfNsea5tY8sYcpvFg/L3S7GgRqY6+A
1nUDkAb0ROldzJSKD04/uyxVQur1hhTJrq0DwKfLKI2dwtrTvjiJDn/Kd3PX3st2
0qpfajOf7q+Tt81oJ5IccMYaO7dWMieb3qbJswCelMwmK2IMiLBnwlnmsOeuCXVw
3A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 07:28:37 2026 by rpki-client