Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130322e3231342e302f32342d3234203d3e203633353339.roa
File:                     3130332e3130322e3231342e302f32342d3234203d3e203633353339.roa (raw, json)
Hash identifier:          e2tFgUDndDZmuq4ZEV4P73soZ5eVG1yDkdZ2OLVKDLM=
Subject key identifier:   AA:21:3D:DC:A5:BA:72:57:83:A6:9B:39:53:2A:A1:F8:7F:82:20:E7
Certificate issuer:       /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial:       793E797FF6AC44280D35A539F503CCF23E8C9F99
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130322e3231342e302f32342d3234203d3e203633353339.roa
Signing time:             Thu 16 Apr 2026 02:55:39 +0000
ROA not before:           Thu 16 Apr 2026 02:50:39 +0000
ROA not after:            Thu 15 Apr 2027 02:55:39 +0000
asID:                     63539
IP address blocks:        103.102.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3e:79:7f:f6:ac:44:28:0d:35:a5:39:f5:03:cc:f2:3e:8c:9f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
        Validity
            Not Before: Apr 16 02:50:39 2026 GMT
            Not After : Apr 15 02:55:39 2027 GMT
        Subject: CN=AA213DDCA5BA725783A69B39532AA1F87F8220E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:51:0b:f8:74:df:80:46:ad:84:41:71:73:86:
                    c3:f9:f4:85:13:96:98:78:d2:d1:ff:36:5b:65:2d:
                    32:57:b1:f4:ad:d3:da:0c:89:63:08:2e:1a:f6:85:
                    13:95:4c:e7:cb:06:7b:05:73:e4:59:c2:61:cd:d5:
                    77:16:b8:71:0c:59:ba:41:79:ae:fa:da:32:92:ce:
                    7a:e2:bc:8a:0c:f6:7d:28:a3:3c:9c:db:68:a2:28:
                    16:cc:74:d7:8d:20:39:e5:c1:3b:d5:88:38:be:9a:
                    86:9c:f7:23:7b:1d:a7:59:f4:25:3e:0b:b6:34:2d:
                    4b:59:66:f7:f5:c4:c2:0f:a2:e8:ea:df:5b:06:6b:
                    a1:a9:e8:28:89:31:15:58:94:6c:46:81:96:95:82:
                    71:7c:28:06:6d:9b:b7:17:11:6d:de:b0:2d:4f:05:
                    6b:7a:47:7d:74:5a:e7:07:84:06:75:e8:21:73:2a:
                    81:67:ec:59:2d:e6:cb:3d:4c:8c:99:26:aa:7d:7c:
                    3c:3e:d1:fe:1c:f4:07:1b:df:43:f4:9d:45:a7:7a:
                    bf:4f:3e:af:e1:c3:5f:a2:b2:f2:5a:65:f9:c0:9a:
                    5e:09:d8:5f:fc:53:0d:81:49:ee:d5:9a:c7:f7:d2:
                    c8:64:2f:b3:65:f7:6f:db:1e:5e:f0:c2:dd:18:cf:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:21:3D:DC:A5:BA:72:57:83:A6:9B:39:53:2A:A1:F8:7F:82:20:E7
            X509v3 Authority Key Identifier:
                keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130322e3231342e302f32342d3234203d3e203633353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:82:9c:6d:35:48:01:65:bb:66:2b:2d:77:c9:56:9a:88:
         e7:15:0b:a6:18:95:77:b8:ab:06:1c:c1:f1:78:15:b2:97:42:
         46:1b:59:ef:80:be:a4:ea:e7:b6:6f:f0:43:ef:f7:8f:ec:11:
         1f:b5:f2:59:9d:1d:0c:f7:17:6b:98:7b:4d:60:2e:0d:fc:7e:
         b8:78:25:98:8f:15:8d:e4:39:40:7e:b4:69:2e:ae:38:2f:a9:
         78:3f:fa:48:90:41:d8:8d:4f:74:b3:b5:ab:50:7e:45:f5:c3:
         c9:35:f6:03:db:3b:5a:ae:b2:3c:87:9d:cc:4d:11:4a:bb:44:
         0d:d6:cf:88:a6:15:0a:ee:fd:6d:e1:b9:03:c0:40:41:ca:ab:
         51:35:e6:f6:9e:5b:8c:99:b6:09:bd:06:2a:77:12:35:4a:8f:
         d3:dc:b9:17:0f:8f:fd:fb:78:a7:81:e2:7e:6c:d6:45:c6:3b:
         8b:a7:74:68:ec:b1:af:8a:8b:50:2f:25:28:41:85:be:5b:ee:
         bd:d6:db:29:eb:35:5b:cb:6a:1b:b7:35:41:e2:b7:6f:c9:0c:
         f5:5a:4a:49:69:f4:73:db:44:a6:ba:8f:e7:1b:60:a6:a7:7c:
         df:5d:48:f4:68:b6:2e:d1:97:62:cb:85:bf:bd:20:d8:8e:5b:
         f8:78:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:41 2026 by rpki-client