Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e302e302f32322d3232203d3e203633353339.roa
File:                     3130332e3130352e302e302f32322d3232203d3e203633353339.roa (raw, json)
Hash identifier:          31zGxJhS2pTXJ1vb53+jYnyELBqiaVCB8H8eztCZm0A=
Subject key identifier:   42:49:56:B5:88:70:03:8E:42:68:E6:48:15:6B:9D:36:30:8B:45:38
Certificate issuer:       /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial:       7555E57B656F1BA465A5EDFD4959A266242C8994
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e302e302f32322d3232203d3e203633353339.roa
Signing time:             Thu 16 Apr 2026 02:55:38 +0000
ROA not before:           Thu 16 Apr 2026 02:50:38 +0000
ROA not after:            Thu 15 Apr 2027 02:55:38 +0000
asID:                     63539
IP address blocks:        103.105.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:55:e5:7b:65:6f:1b:a4:65:a5:ed:fd:49:59:a2:66:24:2c:89:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
        Validity
            Not Before: Apr 16 02:50:38 2026 GMT
            Not After : Apr 15 02:55:38 2027 GMT
        Subject: CN=424956B58870038E4268E648156B9D36308B4538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:04:3c:0f:27:57:1f:27:14:70:e9:85:67:
                    46:50:3b:bf:96:14:e8:0c:f5:ad:fd:55:8b:18:33:
                    01:d9:91:08:29:19:e0:7e:20:fd:bd:db:91:bb:0e:
                    bb:f9:2d:ba:05:32:da:55:85:7b:5a:18:ae:2e:26:
                    2d:58:39:28:f8:55:55:7b:da:84:0f:76:9f:5b:22:
                    de:4b:40:aa:06:0b:28:39:7a:70:51:9d:df:ac:6d:
                    d4:42:74:af:15:26:fb:42:65:c1:9d:84:9b:b9:8f:
                    4d:5c:d6:55:87:73:30:4c:0d:e5:60:2f:5a:ae:d9:
                    77:72:f8:f2:91:04:d3:af:79:97:0c:29:b0:e5:e5:
                    e9:c8:42:b2:70:0c:ac:0a:c7:41:b0:12:8f:58:4d:
                    63:23:0b:e1:3d:23:f7:11:91:26:49:4a:69:65:aa:
                    ed:66:4b:4a:a1:0f:68:5a:74:b5:b7:9d:d1:88:d6:
                    73:ac:ea:76:51:7e:1d:89:02:9d:fc:9e:b0:a9:db:
                    96:99:ac:70:00:75:58:fa:14:d6:e5:75:99:3f:af:
                    1c:90:98:ba:d5:2a:b2:0a:b4:73:85:28:f2:a4:a4:
                    d6:80:61:3e:0e:c5:54:3d:b4:f7:74:97:25:43:07:
                    67:a2:4a:cf:29:a3:6f:22:87:c7:8c:8a:ac:87:fe:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:49:56:B5:88:70:03:8E:42:68:E6:48:15:6B:9D:36:30:8B:45:38
            X509v3 Authority Key Identifier:
                keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e302e302f32322d3232203d3e203633353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:e7:d2:db:11:27:9f:af:41:d4:b8:29:0a:3c:99:08:02:76:
         e9:23:2b:ed:ac:88:47:34:df:30:74:7a:ae:22:c5:0c:a3:bf:
         2c:53:6c:a7:9a:17:ee:f0:b4:23:94:28:56:00:90:c7:e5:a8:
         48:be:ce:70:8c:95:75:a9:76:82:96:2a:08:71:1b:a1:e4:5a:
         0b:b7:2f:85:20:2b:8f:ba:c8:c2:38:36:d5:93:53:0a:08:db:
         cf:de:c8:04:07:f8:46:fc:84:32:02:48:35:73:1e:67:e3:45:
         f3:f8:20:e0:cc:53:78:f9:d0:0f:85:b7:ae:e4:2e:97:34:b2:
         79:58:08:ec:95:9a:19:42:a3:6f:6e:a5:82:d9:32:5c:e8:92:
         95:cf:b0:31:29:bd:6f:56:c8:1a:c0:be:5d:8e:f9:ff:e3:54:
         62:a9:ef:61:4f:ad:df:2f:ca:be:5b:b4:ce:b0:e0:9c:8e:55:
         d1:39:23:44:c5:b6:c5:27:26:9e:7c:5c:3f:b3:4d:a0:6e:49:
         2a:a1:a2:98:82:15:5f:3b:47:fb:b8:ce:99:24:28:02:94:e5:
         38:68:ba:ee:b9:5c:91:6b:82:4b:e5:cd:64:42:a4:0c:a2:06:
         96:8c:3c:ff:07:df:1e:71:9a:92:2b:af:1b:21:f6:c0:f9:be:
         f4:cf:31:a3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUdVXle2VvG6Rlpe39SVmiZiQsiZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMxRjlDQkI1RkY2MDYzMjMwRDQ1QjU5NkYyRDBFNkQ5
NDMzODgxNTAeFw0yNjA0MTYwMjUwMzhaFw0yNzA0MTUwMjU1MzhaMDMxMTAvBgNV
BAMTKDQyNDk1NkI1ODg3MDAzOEU0MjY4RTY0ODE1NkI5RDM2MzA4QjQ1MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6JAQ8DydXHycUcOmFZ0ZQO7+W
FOgM9a39VYsYMwHZkQgpGeB+IP2925G7Drv5LboFMtpVhXtaGK4uJi1YOSj4VVV7
2oQPdp9bIt5LQKoGCyg5enBRnd+sbdRCdK8VJvtCZcGdhJu5j01c1lWHczBMDeVg
L1qu2Xdy+PKRBNOveZcMKbDl5enIQrJwDKwKx0GwEo9YTWMjC+E9I/cRkSZJSmll
qu1mS0qhD2hadLW3ndGI1nOs6nZRfh2JAp38nrCp25aZrHAAdVj6FNbldZk/rxyQ
mLrVKrIKtHOFKPKkpNaAYT4OxVQ9tPd0lyVDB2eiSs8po28ih8eMiqyH/qfFAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUQklWtYhwA45CaOZIFWudNjCLRTgwHwYDVR0j
BBgwFoAUvB+cu1/2BjIw1FtZby0ObZQziBUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk4NDE4NzI1NDE0NTAyNi8wL0JDMUY5Q0JCNUZGNjA2MzIzMEQ0NUI1OTZGMkQw
RTZEOTQzMzg4MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkMxRjlDQkI1RkY2MDYzMjMwRDQ1QjU5NkYyRDBFNkQ5NDMzODgxNS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2OTg0MTg3MjU0MTQ1MDI2LzAvMzEzMDMzMmUzMTMw
MzUyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM1MzMzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdpADANBgkqhkiG9w0BAQsFAAOCAQEAiOfS2xEnn69B1LgpCjyZCAJ26SMr
7ayIRzTfMHR6riLFDKO/LFNsp5oX7vC0I5QoVgCQx+WoSL7OcIyVdal2gpYqCHEb
oeRaC7cvhSArj7rIwjg21ZNTCgjbz97IBAf4RvyEMgJINXMeZ+NF8/gg4MxTePnQ
D4W3ruQulzSyeVgI7JWaGUKjb26lgtkyXOiSlc+wMSm9b1bIGsC+XY75/+NUYqnv
YU+t3y/Kvlu0zrDgnI5V0TkjRMW2xScmnnxcP7NNoG5JKqGimIIVXztH+7jOmSQo
ApTlOGi67rlckWuCS+XNZEKkDKIGlow8/wffHnGakiuvGyH2wPm+9M8xow==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:42 2026 by rpki-client