Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33362e302f32322d3332203d3e2034383337.roa
File:                     3130332e3231392e33362e302f32322d3332203d3e2034383337.roa (raw, json)
Hash identifier:          ONNnz84jBhcHYnXQ3A0lIZhQnu12JiV5NeaIfBKeeTc=
Subject key identifier:   45:82:E6:87:1C:84:D9:E4:01:1C:55:84:8D:F0:7D:63:AD:24:C8:DF
Certificate issuer:       /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial:       2659E5564535C2C62F29352825A7645986BA39E8
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33362e302f32322d3332203d3e2034383337.roa
Signing time:             Wed 15 Apr 2026 07:40:58 +0000
ROA not before:           Wed 15 Apr 2026 07:35:58 +0000
ROA not after:            Wed 14 Apr 2027 07:40:58 +0000
asID:                     4837
IP address blocks:        103.219.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:59:e5:56:45:35:c2:c6:2f:29:35:28:25:a7:64:59:86:ba:39:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
        Validity
            Not Before: Apr 15 07:35:58 2026 GMT
            Not After : Apr 14 07:40:58 2027 GMT
        Subject: CN=4582E6871C84D9E4011C55848DF07D63AD24C8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:cb:ed:38:22:48:5d:1a:00:be:d0:11:ad:
                    e5:67:3c:90:84:c6:ae:00:89:43:7c:a3:77:96:d3:
                    2a:ee:92:a8:a4:b6:a3:e8:85:22:c8:6c:3c:bd:68:
                    04:2d:f4:2f:13:4a:2b:d5:7f:e7:1a:68:00:88:7c:
                    70:cd:f8:31:e6:ba:0f:be:43:6e:0f:0b:66:5f:a6:
                    ca:db:b9:b8:d3:9c:da:97:25:46:a3:8f:e1:89:ef:
                    6d:a2:af:c0:b4:9c:75:62:39:d9:a4:2d:ea:51:fd:
                    9d:25:ce:e7:75:d0:c4:12:69:88:83:7c:fa:c2:8e:
                    31:e3:d7:8f:4d:ad:42:be:3f:08:ca:9b:1d:c7:01:
                    6b:f2:a3:71:55:5f:e4:d3:93:a9:d9:b6:35:3d:1b:
                    99:91:73:73:10:91:cb:d0:89:09:a1:85:b5:69:3d:
                    45:b1:e2:5c:47:13:d9:a6:10:1c:16:2d:51:88:bc:
                    7e:5a:7b:b0:78:6c:81:a4:93:7e:31:28:19:64:5e:
                    6b:19:d0:4e:0c:50:f1:0a:fa:06:a7:5d:3b:43:c9:
                    9e:c3:ac:8e:22:04:fd:ef:29:08:b9:3b:4f:56:cd:
                    79:66:74:e9:ff:b2:b5:49:27:2d:ca:35:17:24:ff:
                    e3:c4:73:34:3b:e1:61:41:54:66:c9:43:95:08:5e:
                    28:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:82:E6:87:1C:84:D9:E4:01:1C:55:84:8D:F0:7D:63:AD:24:C8:DF
            X509v3 Authority Key Identifier:
                keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e33362e302f32322d3332203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:db:71:29:df:d0:62:a2:db:38:a7:92:9a:1b:d0:9f:cd:72:
         6a:34:36:4e:73:54:fc:23:14:ef:d8:63:fd:48:05:9b:95:e9:
         04:8d:25:8b:24:18:49:50:ce:cb:26:f4:33:10:96:61:3d:53:
         e5:94:4f:9f:1c:91:ca:76:01:26:18:a7:73:b1:0c:66:29:3e:
         e6:42:38:f5:35:f9:27:7b:22:a2:84:61:bf:da:3b:86:4a:63:
         a0:e1:0b:fb:00:ab:62:69:e0:78:e9:8e:49:29:0b:a1:fb:e9:
         3d:43:94:65:97:9b:58:ef:7b:65:84:2a:f3:d2:7d:97:30:2b:
         1a:b7:f8:fb:59:e1:c8:d3:17:d6:1a:06:78:89:84:1c:c7:38:
         c0:bd:b2:ab:fd:9a:85:76:90:69:88:52:ae:51:66:80:7d:19:
         5f:c2:88:b5:3d:5d:6b:ac:ea:fd:29:08:29:11:08:91:a5:5f:
         d0:f8:b7:1a:04:bc:72:b2:6a:e9:95:c4:5a:8f:87:14:25:ec:
         7b:dd:53:27:a4:b6:97:db:60:a9:37:62:21:73:85:fb:d9:79:
         bc:a4:cb:51:74:e6:d4:81:f0:b8:91:13:b6:53:30:d6:80:4b:
         98:6d:dd:ce:79:d8:39:f3:b3:cb:0f:8c:dc:11:b4:11:b3:60:
         41:e0:04:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:14 2026 by rpki-client