Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e203538343631.roa
File:                     3130332e3231392e32382e302f32322d3332203d3e203538343631.roa (raw, json)
Hash identifier:          7see7mUP5RiDFD85n7obIwjrZr6JjitwwbnUFue3amg=
Subject key identifier:   64:78:4A:BB:B1:14:E1:CD:C8:D5:CE:12:B4:5F:E1:81:B2:D1:3D:B8
Certificate issuer:       /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial:       4BA067951212E389506DCD17E062EA26EDCA6A6B
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e203538343631.roa
Signing time:             Wed 15 Apr 2026 07:40:58 +0000
ROA not before:           Wed 15 Apr 2026 07:35:58 +0000
ROA not after:            Wed 14 Apr 2027 07:40:58 +0000
asID:                     58461
IP address blocks:        103.219.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a0:67:95:12:12:e3:89:50:6d:cd:17:e0:62:ea:26:ed:ca:6a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
        Validity
            Not Before: Apr 15 07:35:58 2026 GMT
            Not After : Apr 14 07:40:58 2027 GMT
        Subject: CN=64784ABBB114E1CDC8D5CE12B45FE181B2D13DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:c3:99:26:04:1b:93:83:1b:a3:ff:91:37:
                    bc:d1:5b:5a:f4:58:2f:32:38:e1:b5:8a:85:2e:c1:
                    cb:40:8c:f3:58:7b:cc:78:07:26:57:68:50:d4:14:
                    24:9e:1e:04:e2:92:50:9e:04:a4:99:6f:8d:35:34:
                    eb:06:78:e3:99:69:ed:4a:7d:05:13:76:a9:8e:99:
                    6b:85:df:36:63:a6:f4:ea:f6:3f:ae:65:4c:1b:5e:
                    f7:df:85:08:52:c3:6e:03:78:1f:68:d5:e2:13:d9:
                    90:01:8d:1d:58:84:7e:94:11:23:75:27:5d:a3:5a:
                    53:b8:09:b8:0d:4f:1c:fb:c9:69:6f:bc:d4:99:97:
                    17:5f:e3:a7:91:1e:82:5a:b8:ca:bf:f7:eb:2a:0a:
                    a5:73:d4:09:b3:3e:59:27:f5:e0:c3:74:77:35:39:
                    39:9e:07:12:36:31:55:67:04:ef:0a:12:24:ef:81:
                    5d:4e:eb:4a:b4:b1:3e:06:21:d7:9e:c8:40:6f:53:
                    0c:36:3a:52:29:5c:18:83:e8:95:d8:ee:62:28:12:
                    44:02:6e:88:16:60:15:6f:c7:47:21:d3:86:5e:aa:
                    2b:24:e9:22:59:b3:08:c8:99:4f:7f:f1:dc:1c:a3:
                    ee:f3:b1:6d:dc:07:1b:8b:26:b8:79:e0:86:e8:bc:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:78:4A:BB:B1:14:E1:CD:C8:D5:CE:12:B4:5F:E1:81:B2:D1:3D:B8
            X509v3 Authority Key Identifier:
                keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e203538343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:5e:c4:d5:ec:65:7f:ce:9a:98:21:f6:1b:d1:44:3e:58:b7:
         9b:b3:0e:0d:a6:71:dc:b3:fa:16:98:b8:3d:f9:1d:4a:13:51:
         a2:32:a7:96:39:b7:d0:3d:8c:4b:71:8d:2e:da:4c:3f:c7:a3:
         ff:95:af:26:16:1d:46:59:5b:16:3f:10:a3:74:33:ed:12:0f:
         8c:13:63:ac:fe:f0:71:93:91:61:96:ea:34:a1:93:e6:01:dd:
         9b:7c:51:26:86:c7:b1:6d:4c:82:81:6f:b7:b7:57:ec:af:bf:
         af:73:07:3b:5f:34:a0:3a:67:a7:6e:af:f0:ca:9e:bf:09:62:
         01:17:74:ce:15:c6:ea:4a:59:f7:f7:30:78:36:c3:9d:cf:9f:
         20:2f:28:5d:98:ea:35:ca:05:fe:ac:e2:7a:a0:c4:f1:b3:9f:
         8b:fa:2a:dd:90:82:38:c6:5d:5b:c4:fe:4e:c6:41:53:ed:17:
         3d:ab:01:d1:ea:c3:bd:9d:76:ec:12:21:6e:aa:47:e8:b6:22:
         80:da:e5:31:f3:74:70:08:0b:09:03:42:71:d2:03:86:fd:f5:
         67:2a:7f:17:f3:01:4e:6e:96:da:15:72:76:2b:06:62:67:2e:
         8b:9f:bc:68:cd:f6:85:85:d9:8f:ca:02:74:be:f7:41:ae:30:
         39:ce:be:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:28 2026 by rpki-client