Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130342e3235322e302f32342d3234203d3e203633353339.roa
File:                     3130332e3130342e3235322e302f32342d3234203d3e203633353339.roa (raw, json)
Hash identifier:          rhSJttFZU6Ofpv/g7R9Ct+5A+REhiRCtsmzIlI/SYOM=
Subject key identifier:   BB:85:02:50:A7:BA:66:F8:F0:EC:0F:43:17:64:DB:59:CD:46:58:3C
Certificate issuer:       /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial:       2577774623AC176618A0FCAB86908A2D943E5B32
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130342e3235322e302f32342d3234203d3e203633353339.roa
Signing time:             Thu 16 Apr 2026 02:55:38 +0000
ROA not before:           Thu 16 Apr 2026 02:50:38 +0000
ROA not after:            Thu 15 Apr 2027 02:55:38 +0000
asID:                     63539
IP address blocks:        103.104.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:77:77:46:23:ac:17:66:18:a0:fc:ab:86:90:8a:2d:94:3e:5b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
        Validity
            Not Before: Apr 16 02:50:38 2026 GMT
            Not After : Apr 15 02:55:38 2027 GMT
        Subject: CN=BB850250A7BA66F8F0EC0F431764DB59CD46583C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:52:e5:c9:46:8b:e8:1f:dc:9d:b5:98:83:
                    13:5e:98:da:01:66:9a:55:5c:25:b1:ea:53:77:43:
                    84:e5:e5:2b:00:c2:40:f9:76:fb:22:3f:5c:2a:4e:
                    33:33:d4:e6:ac:bd:82:72:3e:38:13:99:0b:97:3d:
                    5f:b9:ad:e3:8c:6b:70:d7:cc:0b:92:ec:e5:4d:f8:
                    81:ed:ce:26:ff:2f:39:e6:36:cb:e0:d0:cd:5f:b9:
                    3d:0f:05:05:ad:c3:14:03:47:5a:46:cf:7e:49:95:
                    08:a3:ab:12:ee:1f:f3:91:46:22:81:9b:39:30:36:
                    ae:cd:96:80:cd:f1:58:0d:93:0e:aa:67:d1:4c:c8:
                    b2:25:a4:0a:53:28:3c:a4:dc:ea:cc:7a:55:da:a7:
                    8d:c8:e1:3a:e2:fe:8b:46:25:e8:17:6c:9d:79:b2:
                    b1:37:26:a0:6d:d4:ae:e1:27:2d:c6:bc:db:b1:b0:
                    8f:bf:00:f4:2e:50:cc:e1:cf:a7:d2:6c:d9:84:6a:
                    4e:c9:b0:bf:82:1f:a5:54:58:3b:cf:75:e9:c2:df:
                    2f:04:b3:d0:42:6d:26:c9:9f:51:84:ce:73:ab:7d:
                    dd:20:d5:c9:5e:50:83:88:66:8a:65:8f:36:97:b8:
                    4f:e4:bb:b4:5b:b5:9e:88:13:ff:f2:46:40:52:d9:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:85:02:50:A7:BA:66:F8:F0:EC:0F:43:17:64:DB:59:CD:46:58:3C
            X509v3 Authority Key Identifier:
                keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130342e3235322e302f32342d3234203d3e203633353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ed:0c:03:3d:2f:da:6c:13:8b:68:62:78:3c:cf:a6:24:0d:
         39:44:c3:6e:7e:85:b8:6d:09:f7:7d:3c:ce:b6:71:ed:21:fd:
         16:61:db:8a:b5:a4:93:c6:ae:a9:24:39:d8:2a:09:71:b7:84:
         64:22:dd:03:49:d7:44:6e:35:2c:50:77:ea:3f:bf:ce:6f:ea:
         9b:8e:6c:c7:87:38:69:23:dc:3f:f9:f4:6e:1d:f3:df:e2:15:
         e1:d4:44:7f:df:86:0d:57:8e:d6:53:88:44:88:2a:3d:b1:04:
         9f:6c:02:dd:8b:99:0c:72:38:05:13:ec:5f:69:b8:3c:7e:3c:
         2c:cd:f1:7e:f7:a5:c3:dc:bb:8c:4c:2e:8e:e6:8a:43:4b:be:
         40:4c:74:8e:ec:b1:6b:25:d2:d2:d0:f1:21:99:64:e6:fd:85:
         aa:70:d3:65:d5:08:3e:2e:cc:d2:b2:fb:d6:89:87:68:68:8f:
         d8:33:7e:67:a8:a0:c1:3e:e6:32:57:6d:aa:ae:fd:43:b3:01:
         74:85:3d:85:2a:b7:87:5c:c5:b4:83:64:58:3f:c3:73:53:63:
         c7:c2:ca:82:26:49:55:b5:01:5d:5d:9c:1f:97:4c:65:9f:df:
         6a:ed:25:d7:a4:14:ad:52:dc:02:ca:a6:19:3d:8b:c1:ff:4d:
         a8:ce:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:40 2026 by rpki-client