Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa
File:                     3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (raw, json)
Hash identifier:          WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=
Subject key identifier:   ED:D0:59:75:E2:D8:B6:F7:59:75:B0:CF:86:B0:ED:92:4A:0E:0C:67
Certificate issuer:       /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B
Certificate serial:       557838C39B1F8415CF6510309FA8D11FCB01CC27
Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa
Signing time:             Wed 15 Apr 2026 03:32:43 +0000
ROA not before:           Wed 15 Apr 2026 03:27:43 +0000
ROA not after:            Wed 14 Apr 2027 03:32:43 +0000
asID:                     146804
IP address blocks:        103.246.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:78:38:c3:9b:1f:84:15:cf:65:10:30:9f:a8:d1:1f:cb:01:cc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B
        Validity
            Not Before: Apr 15 03:27:43 2026 GMT
            Not After : Apr 14 03:32:43 2027 GMT
        Subject: CN=EDD05975E2D8B6F75975B0CF86B0ED924A0E0C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d0:65:2e:4a:db:ff:cb:8f:e7:af:4a:e1:f3:
                    aa:a9:24:5f:e2:8c:64:3e:74:fb:7f:d3:fb:67:e5:
                    66:23:15:6d:61:8e:cf:ad:2a:24:20:4b:48:60:32:
                    01:ac:39:7e:07:8e:60:cc:78:76:e9:7f:03:ab:c8:
                    02:63:bb:8f:3f:3c:2b:90:cc:98:a6:9c:cd:76:1c:
                    5d:35:ff:85:54:bc:ed:cb:85:11:9e:82:e1:f9:8e:
                    52:f5:cb:8b:e4:d6:c5:40:90:c9:4b:25:f2:72:e1:
                    7a:c3:84:f7:40:56:10:c6:e9:3f:41:f5:85:cf:7d:
                    32:ca:5e:76:5d:79:14:c5:e3:74:39:48:72:2a:fc:
                    17:f1:ff:d4:2e:23:3b:dd:12:37:f2:c5:6e:f5:26:
                    73:27:ec:f2:57:6c:42:8a:d1:0b:b3:e9:86:57:0c:
                    66:e7:4e:71:df:f5:64:d8:92:21:8c:46:53:a6:b6:
                    5e:b0:db:3f:c2:d1:00:91:43:0c:60:39:25:e6:e7:
                    e9:20:8a:90:04:cd:c2:67:ac:41:16:c0:37:3d:c1:
                    7f:e2:b4:a5:af:2e:d3:99:d0:ce:1f:c3:40:ad:a6:
                    bd:23:30:60:4d:4e:6f:03:67:ab:10:03:39:f6:74:
                    05:96:7a:a1:97:cf:39:52:bd:67:b6:86:1d:33:9f:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D0:59:75:E2:D8:B6:F7:59:75:B0:CF:86:B0:ED:92:4A:0E:0C:67
            X509v3 Authority Key Identifier:
                keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:b8:09:10:5b:12:7d:87:fc:92:c5:50:29:90:0b:93:4f:58:
         61:c2:5f:e3:ec:62:fd:25:7e:85:6e:4e:a6:8f:5b:31:23:86:
         5b:c1:d8:33:22:6d:27:9c:97:7c:8b:42:6c:53:23:b3:81:fc:
         86:2a:fd:ac:f6:6c:7e:cf:02:29:48:08:ca:56:8c:09:26:ec:
         21:cd:13:30:30:be:0d:7f:ae:1b:02:c1:c9:b3:32:44:35:e3:
         39:cd:f6:f4:63:45:7c:e4:f9:7d:84:1f:71:f7:ad:d1:17:97:
         08:5d:c0:35:09:c5:4b:f0:16:e8:18:72:e9:60:c2:9f:2e:33:
         36:1e:c3:d5:5e:d9:5c:7b:35:5b:5f:a3:e6:b9:75:80:20:91:
         4f:dc:c8:c3:4e:ef:d4:d4:a9:c1:25:b3:99:65:53:00:ae:6d:
         67:d6:a7:f3:38:f5:57:57:44:b0:1c:79:1d:f8:38:03:6b:25:
         83:e0:90:aa:53:54:4f:f2:25:0f:05:48:10:fe:c9:bf:1c:94:
         9f:15:ac:69:1b:cd:75:21:c7:67:82:7a:2f:6a:22:0f:b3:9f:
         ac:39:c0:e8:54:34:d2:ca:ca:e7:39:5d:71:5e:19:4c:3a:f1:
         1b:06:1b:dc:72:4a:de:23:a5:f7:c4:77:b3:cb:6f:b3:08:cd:
         2e:5a:04:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:40 2026 by rpki-client