Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132332e302f32342d3234203d3e2030.roa
File:                     3130332e3233362e3132332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          IlBBikhkFQgdIZ1dkeSBSpyvlJVnKeNS3f62qPJAUhI=
Subject key identifier:   10:20:E7:4B:4B:56:6E:AC:28:9D:CE:85:9F:FC:CF:4D:02:3F:8C:16
Certificate issuer:       /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Certificate serial:       70049C8FEBDDEDCF5AE92762236EC78C0F24D076
Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132332e302f32342d3234203d3e2030.roa
Signing time:             Wed 15 Apr 2026 06:59:04 +0000
ROA not before:           Wed 15 Apr 2026 06:54:04 +0000
ROA not after:            Wed 14 Apr 2027 06:59:04 +0000
asID:                     0
IP address blocks:        103.236.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:04:9c:8f:eb:dd:ed:cf:5a:e9:27:62:23:6e:c7:8c:0f:24:d0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
        Validity
            Not Before: Apr 15 06:54:04 2026 GMT
            Not After : Apr 14 06:59:04 2027 GMT
        Subject: CN=1020E74B4B566EAC289DCE859FFCCF4D023F8C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:2e:37:ff:5c:16:db:fb:e7:b2:cd:de:69:
                    09:07:09:38:ed:9e:26:0a:53:30:38:9a:06:59:1d:
                    51:71:a0:14:e5:8f:29:8b:25:57:18:20:be:c9:86:
                    5c:7f:4d:a9:df:36:26:43:8f:46:65:3e:da:fa:80:
                    b4:61:3d:33:66:4c:7a:19:a0:e3:93:e5:43:e3:d9:
                    43:a6:83:fd:84:54:34:06:5b:66:9d:29:b7:06:17:
                    cf:5f:01:65:56:04:ed:7d:fd:08:69:f0:06:53:51:
                    75:a4:27:4b:fc:2c:6a:2b:3e:1c:95:4f:8c:57:5f:
                    86:6f:e5:b7:89:98:a4:64:86:26:9a:5a:87:3b:2a:
                    8a:82:b4:b1:a5:30:cb:8f:ab:1d:8a:3c:8b:20:b3:
                    96:f7:23:42:ed:10:7a:58:c8:e3:76:30:92:69:4c:
                    94:7b:21:87:c1:72:f4:98:7e:e0:05:93:b1:82:a4:
                    52:06:64:a2:6f:36:bb:c2:ff:cd:4b:6c:36:6a:33:
                    a1:5f:b1:40:b1:8d:62:8c:2f:dc:40:69:2a:5c:dc:
                    18:16:90:ad:b2:12:ae:ee:77:20:94:55:cb:88:58:
                    9b:2c:46:e6:c6:14:c9:f5:f7:a8:98:8d:19:85:70:
                    28:08:45:88:8a:2d:e9:ad:7c:f7:e4:40:7e:4f:dc:
                    1b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:20:E7:4B:4B:56:6E:AC:28:9D:CE:85:9F:FC:CF:4D:02:3F:8C:16
            X509v3 Authority Key Identifier:
                keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132332e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:a3:7f:42:9c:5b:a3:a8:2d:4f:41:b0:d1:70:45:fc:5e:
         3f:d9:5d:8c:30:84:82:1d:ad:b6:82:14:5e:08:c6:25:bb:70:
         f5:7d:5f:eb:83:9e:3b:d2:9d:10:36:91:e3:eb:ab:32:22:ea:
         d1:90:55:45:ea:e4:20:07:8b:b0:2e:de:ef:4b:d4:6f:cd:ae:
         7f:85:0b:c1:15:35:d7:4a:bb:5e:09:2c:e9:85:32:dc:f0:f5:
         7d:36:7d:ce:79:c8:ed:7d:40:01:7d:39:7b:15:65:21:4d:e5:
         f7:b9:58:1e:85:ee:92:e0:e0:db:d5:0e:d9:ba:94:77:0e:a6:
         99:b8:38:6a:c1:96:8b:f1:73:95:bd:10:af:0c:ab:40:7e:41:
         94:54:c3:b5:b3:25:27:06:18:37:7d:03:ce:58:56:67:83:11:
         b6:b4:5f:17:93:98:33:12:2b:e5:77:8c:4f:a8:4f:e6:10:df:
         6c:cb:8f:92:c2:ed:96:2a:33:c1:dc:ca:e5:c5:eb:0c:4a:c3:
         9c:ae:eb:39:70:04:e5:90:7e:5a:c2:31:63:83:23:60:ac:17:
         bb:cb:c6:4a:9a:51:05:b7:55:70:79:f6:7c:10:93:49:d9:c2:
         71:28:7c:d7:e5:a9:97:36:a3:65:c3:79:79:b9:ec:40:d1:f0:
         35:23:92:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:30 2026 by rpki-client