Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e3231392e32342e302f32322d3332203d3e203536303436.roa
File:                     3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (raw, json)
Hash identifier:          LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=
Subject key identifier:   DF:61:C5:2B:9E:4A:CA:65:50:68:07:01:9B:FC:AD:BF:AA:2C:63:2C
Certificate issuer:       /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F
Certificate serial:       539C9E2544C66769EC057FD40C6AEAFCE6306F60
Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e3231392e32342e302f32322d3332203d3e203536303436.roa
Signing time:             Wed 15 Apr 2026 07:52:55 +0000
ROA not before:           Wed 15 Apr 2026 07:47:55 +0000
ROA not after:            Wed 14 Apr 2027 07:52:55 +0000
asID:                     56046
IP address blocks:        103.219.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 15:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9c:9e:25:44:c6:67:69:ec:05:7f:d4:0c:6a:ea:fc:e6:30:6f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F
        Validity
            Not Before: Apr 15 07:47:55 2026 GMT
            Not After : Apr 14 07:52:55 2027 GMT
        Subject: CN=DF61C52B9E4ACA65506807019BFCADBFAA2C632C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f0:cc:e7:20:27:a9:d4:3a:0d:32:25:d0:11:
                    aa:0d:41:b7:f4:10:66:f7:ca:38:b6:b8:7a:22:3c:
                    55:14:97:7f:74:5e:de:62:b3:52:08:d4:d3:2c:99:
                    b0:88:e4:e5:2a:39:71:fc:89:26:ee:15:10:00:50:
                    28:8e:28:3a:39:6e:53:ff:9b:4c:b3:53:bd:1d:db:
                    12:81:77:08:00:11:f0:03:21:0c:cb:bf:00:23:b7:
                    06:bc:3e:96:40:38:72:9d:cb:8f:9c:a4:d7:ad:82:
                    e5:75:ea:24:b9:7b:ef:47:44:5c:1d:ca:96:f4:b5:
                    95:3e:7a:ad:d4:3d:00:aa:9f:68:12:85:90:d6:dd:
                    a8:66:65:22:dd:76:92:e4:b9:2e:a3:75:0a:36:fc:
                    4a:80:58:58:52:3c:57:23:4e:b6:7d:cb:de:3d:a2:
                    c1:50:89:13:f8:e4:80:54:75:a7:cb:a0:a0:89:87:
                    c6:e1:90:6a:15:33:e8:74:a0:59:b9:78:eb:f4:be:
                    09:1f:29:d5:49:02:f7:c3:8e:b6:05:9e:11:ea:74:
                    bf:97:b2:c8:8d:4e:ee:66:c0:98:b0:62:34:ee:3a:
                    9b:cd:56:9a:12:f6:dc:1b:39:3e:28:da:f3:b8:dc:
                    1f:26:57:c1:b8:1b:6a:7e:64:25:51:fb:24:77:b3:
                    7c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:C5:2B:9E:4A:CA:65:50:68:07:01:9B:FC:AD:BF:AA:2C:63:2C
            X509v3 Authority Key Identifier:
                keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/3130332e3231392e32342e302f32322d3332203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:8b:fd:6d:67:e7:0b:e1:16:60:63:86:0a:28:b0:b5:c1:a2:
         cd:b1:92:4f:43:60:e1:c2:db:f6:bf:7c:0c:e4:23:39:ac:63:
         46:ac:ea:c1:68:ed:d5:c7:79:9d:2a:32:42:da:bb:f3:8f:ea:
         49:3f:05:3c:b6:32:fd:bd:fb:24:8e:5b:fe:81:a7:89:40:f8:
         93:d8:18:ac:2f:21:29:da:7a:f4:29:e5:4e:af:ea:79:52:f8:
         3a:ed:20:2c:a8:c0:30:01:64:d3:db:56:af:cd:5f:24:79:0b:
         c1:62:e3:ac:07:a0:c1:12:72:5d:63:2a:f4:4e:4a:8f:37:ba:
         88:3e:c6:a5:24:13:f7:cd:94:92:d8:8f:8a:d4:6e:d5:47:84:
         7c:8f:43:fa:7a:ad:2d:22:4b:fa:86:e1:b8:d7:2b:a0:12:0c:
         8b:24:00:84:9e:cf:5c:f1:a7:60:d1:ff:a8:52:6b:31:f4:f2:
         d0:7c:9d:e8:8a:12:0b:99:54:18:b1:91:49:9f:c5:f2:2c:0f:
         f2:87:c3:2f:96:a3:a1:ef:cd:0f:b4:12:5f:da:85:aa:9f:7a:
         de:2f:79:9e:ac:74:35:ab:d5:90:57:f2:43:f7:03:ab:27:31:
         b0:84:75:4d:15:2b:66:5f:15:37:c8:ea:19:72:a3:f7:ed:dd:
         77:ff:48:8d
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUU5yeJUTGZ2nsBX/UDGrq/OYwb2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1
NkMwNzAzRjAeFw0yNjA0MTUwNzQ3NTVaFw0yNzA0MTQwNzUyNTVaMDMxMTAvBgNV
BAMTKERGNjFDNTJCOUU0QUNBNjU1MDY4MDcwMTlCRkNBREJGQUEyQzYzMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy8MznICep1DoNMiXQEaoNQbf0
EGb3yji2uHoiPFUUl390Xt5is1II1NMsmbCI5OUqOXH8iSbuFRAAUCiOKDo5blP/
m0yzU70d2xKBdwgAEfADIQzLvwAjtwa8PpZAOHKdy4+cpNetguV16iS5e+9HRFwd
ypb0tZU+eq3UPQCqn2gShZDW3ahmZSLddpLkuS6jdQo2/EqAWFhSPFcjTrZ9y949
osFQiRP45IBUdafLoKCJh8bhkGoVM+h0oFm5eOv0vgkfKdVJAvfDjrYFnhHqdL+X
ssiNTu5mwJiwYjTuOpvNVpoS9twbOT4o2vO43B8mV8G4G2p+ZCVR+yR3s3yTAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU32HFK55KymVQaAcBm/ytv6osYywwHwYDVR0j
BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz
RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjcwNDE1NTk3Nzg0MjY5MS8wLzMxMzAzMzJlMzIz
MTM5MmUzMjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfbGDANBgkqhkiG9w0BAQsFAAOCAQEATov9bWfnC+EWYGOGCiiwtcGi
zbGST0Ng4cLb9r98DOQjOaxjRqzqwWjt1cd5nSoyQtq784/qST8FPLYy/b37JI5b
/oGniUD4k9gYrC8hKdp69CnlTq/qeVL4Ou0gLKjAMAFk09tWr81fJHkLwWLjrAeg
wRJyXWMq9E5Kjze6iD7GpSQT982UktiPitRu1UeEfI9D+nqtLSJL+obhuNcroBIM
iyQAhJ7PXPGnYNH/qFJrMfTy0Hyd6IoSC5lUGLGRSZ/F8iwP8ofDL5ajoe/ND7QS
X9qFqp963i95nqx0NavVkFfyQ/cDqycxsIR1TRUrZl8VN8jqGXKj9+3dd/9IjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:15 2026 by rpki-client