Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33322e302f32322d3332203d3e203536303431.roa
File:                     3130332e3231392e33322e302f32322d3332203d3e203536303431.roa (raw, json)
Hash identifier:          rLWGREJ9nji3Oorbvdg7tTAoZn7v999fkb8uYyetyjc=
Subject key identifier:   BA:0C:03:7E:AC:70:FA:92:2E:7A:A8:D7:A7:FC:31:E8:46:87:3F:9C
Certificate issuer:       /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial:       549613A716AC3329ABC2C90A1D67885391BF7840
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33322e302f32322d3332203d3e203536303431.roa
Signing time:             Wed 15 Apr 2026 07:40:58 +0000
ROA not before:           Wed 15 Apr 2026 07:35:58 +0000
ROA not after:            Wed 14 Apr 2027 07:40:58 +0000
asID:                     56041
IP address blocks:        103.219.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:96:13:a7:16:ac:33:29:ab:c2:c9:0a:1d:67:88:53:91:bf:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
        Validity
            Not Before: Apr 15 07:35:58 2026 GMT
            Not After : Apr 14 07:40:58 2027 GMT
        Subject: CN=BA0C037EAC70FA922E7AA8D7A7FC31E846873F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ab:6c:90:b2:00:7f:a8:6a:07:53:f8:5d:f1:
                    e4:14:a2:22:9e:f2:7f:7a:60:90:20:78:79:18:34:
                    7b:50:f2:76:40:b0:71:f6:27:40:81:50:25:f0:2e:
                    b1:fb:7e:91:9c:e0:65:e6:5a:1d:33:e6:8b:63:02:
                    cd:be:d6:94:06:19:20:7f:81:66:89:f6:86:40:c3:
                    9c:61:66:1b:06:6c:c0:5c:d8:47:5f:6d:5f:66:74:
                    c1:b3:3e:f6:18:50:84:00:d1:b3:47:ed:e6:df:f4:
                    25:99:10:4d:85:6b:fe:c5:62:63:d3:76:0c:23:0b:
                    d6:96:14:1b:5a:28:01:bd:1a:9e:61:c7:94:12:2a:
                    64:b7:8d:e0:52:70:11:ca:f7:ca:f7:1c:10:d7:c3:
                    94:85:c2:9b:78:cf:82:ad:20:59:18:18:b0:9d:72:
                    c5:80:c8:d0:78:32:96:50:6c:46:70:f8:c0:11:ab:
                    bb:d7:89:23:34:43:53:47:d2:6e:cb:ce:29:dc:9f:
                    41:bb:f0:47:fe:e6:5a:d7:5d:23:2f:95:d1:01:c3:
                    56:d3:75:68:c0:26:6b:b3:7d:a6:5e:d0:40:a6:71:
                    81:26:a0:4e:c2:12:9c:7f:b0:fe:71:65:0d:63:cc:
                    a5:d9:6a:73:f6:06:f6:70:f8:14:67:ac:f9:50:7b:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0C:03:7E:AC:70:FA:92:2E:7A:A8:D7:A7:FC:31:E8:46:87:3F:9C
            X509v3 Authority Key Identifier:
                keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33322e302f32322d3332203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:5a:2e:0c:86:c1:7e:ee:37:4f:0f:af:73:cb:5a:64:78:20:
         45:89:5e:b0:98:ff:a5:5d:4c:4d:17:d4:0d:b9:19:e7:1d:2b:
         90:36:4a:3f:a6:a2:d4:0e:28:c2:0e:f1:86:08:6f:ab:53:af:
         b7:fa:49:59:9e:79:ef:74:f7:47:21:01:1e:76:e5:80:0a:21:
         b8:11:c2:02:0b:f9:91:fd:62:83:18:ce:aa:83:a7:1e:aa:1b:
         bb:0d:03:aa:93:db:b0:23:91:39:9d:20:8a:be:84:41:7c:7e:
         91:5c:ed:a9:d8:c3:35:b6:70:91:eb:d8:bb:f3:72:05:8c:3a:
         79:8c:64:d8:b3:95:19:a4:54:e7:9d:63:49:75:85:50:32:3c:
         8d:78:a7:31:72:34:ef:25:d0:c1:a1:07:e4:cd:06:bd:de:b1:
         92:74:82:69:18:e9:e0:d4:e7:bb:0b:60:51:6f:35:17:5a:ab:
         7d:60:22:cf:99:37:44:9f:f3:af:77:06:8a:77:d4:34:a7:e8:
         bd:04:ac:93:82:48:55:4a:ce:6a:3c:f0:e3:56:5b:e6:35:c6:
         39:87:30:44:2c:58:4c:92:37:94:22:b7:3d:de:26:37:fb:33:
         1e:b8:59:f3:fe:10:8e:a2:64:a1:ce:ec:f0:13:62:f6:10:d6:
         3a:9a:3c:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:22 2026 by rpki-client