Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130322e3231332e302f32342d3234203d3e203633353339.roa
File:                     3130332e3130322e3231332e302f32342d3234203d3e203633353339.roa (raw, json)
Hash identifier:          lEk/emwpLd2KNPHcEzjkD8dtGpcwgFTdqo+fRWykTXI=
Subject key identifier:   27:DB:F9:33:93:8D:26:F7:AD:E1:8A:AB:85:BF:5A:4A:87:71:03:69
Certificate issuer:       /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial:       191654A73AB4006F21545CFF660182F0DC42CE47
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130322e3231332e302f32342d3234203d3e203633353339.roa
Signing time:             Thu 16 Apr 2026 02:55:38 +0000
ROA not before:           Thu 16 Apr 2026 02:50:38 +0000
ROA not after:            Thu 15 Apr 2027 02:55:38 +0000
asID:                     63539
IP address blocks:        103.102.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:16:54:a7:3a:b4:00:6f:21:54:5c:ff:66:01:82:f0:dc:42:ce:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
        Validity
            Not Before: Apr 16 02:50:38 2026 GMT
            Not After : Apr 15 02:55:38 2027 GMT
        Subject: CN=27DBF933938D26F7ADE18AAB85BF5A4A87710369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:dd:62:50:4a:53:6b:15:4b:93:c1:96:13:
                    dc:b6:b1:53:45:dd:94:2e:af:06:ef:1e:a8:da:db:
                    ac:b0:69:1c:64:1e:9b:33:c7:8e:c8:52:53:5b:d3:
                    ef:25:a5:59:95:d3:66:d3:f7:64:f8:d8:61:16:d3:
                    97:b8:80:c4:75:c9:4c:c0:97:a3:eb:0d:b7:c8:fa:
                    aa:f8:c8:bc:90:d7:6b:85:be:c2:25:7d:18:af:82:
                    ac:fb:7b:e6:93:ed:46:70:ee:6e:ba:de:0c:50:df:
                    84:89:2b:a9:5b:31:e6:e3:82:10:5d:d9:9a:91:d5:
                    bb:0a:0d:b1:f8:19:43:82:9d:83:57:62:96:8c:95:
                    bb:ab:f7:64:84:d7:8b:9b:a9:63:af:6f:65:b9:d0:
                    2a:79:f2:6d:80:a0:72:e6:d0:65:e3:a9:a6:07:d6:
                    f3:06:db:ff:e8:a8:b5:a2:a2:84:04:94:3e:b0:5b:
                    34:fe:a7:ed:8c:af:69:c6:b9:4c:f0:51:c8:9c:28:
                    1b:57:08:8c:42:98:6a:f8:a5:f3:33:0f:bd:24:2c:
                    f7:7e:83:db:d6:7a:02:5d:80:4e:4c:dc:eb:d8:ca:
                    d0:54:08:01:8f:7c:3d:5e:20:ac:b0:80:70:ba:16:
                    17:8a:40:32:6a:89:6f:1e:8f:1c:ce:a3:e2:48:2b:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DB:F9:33:93:8D:26:F7:AD:E1:8A:AB:85:BF:5A:4A:87:71:03:69
            X509v3 Authority Key Identifier:
                keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130322e3231332e302f32342d3234203d3e203633353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1b:68:20:e5:71:38:cc:e1:35:89:40:53:5d:63:88:ad:d0:
         e5:87:cf:a0:c6:1f:8b:76:de:b0:e0:9c:33:3c:b7:0d:7e:a6:
         81:68:ea:5a:34:3f:6a:eb:75:a4:6a:75:16:56:18:82:7d:98:
         ef:d5:25:99:eb:96:d5:6d:0a:3a:95:2e:5e:d0:8e:91:a1:f5:
         28:7e:97:2f:dc:87:dd:80:7f:70:84:2b:8c:21:5c:9e:61:56:
         c0:ab:dc:9c:61:ff:7d:d1:58:44:28:7e:0c:9b:96:a4:24:4b:
         4d:b5:c2:bd:0e:23:3b:c7:db:52:c9:e3:5b:8f:9b:17:ac:fb:
         05:1d:5c:54:da:4b:5c:76:47:f6:74:e2:9c:12:6b:f4:4d:c4:
         3d:3c:02:05:16:ee:e2:05:10:b0:f0:eb:16:ea:e6:28:7f:5c:
         ee:8b:12:11:df:ff:2f:ab:1b:91:99:26:17:81:ca:d3:9d:87:
         82:ad:6c:ec:ad:bf:22:1e:82:27:e6:2c:d6:0a:13:a0:1c:da:
         ea:bb:5b:24:ad:92:87:89:77:28:7e:ae:27:40:d7:b9:38:a9:
         6c:66:9e:a9:e7:45:aa:fe:27:d7:7c:17:cf:1f:61:78:3e:a1:
         bf:88:93:73:06:b9:66:af:22:a2:cd:2e:ee:b8:27:7d:84:de:
         3f:43:6f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:49:18 2026 by rpki-client