Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138302e302f32322d3232203d3e203633353339.roa
File:                     3130332e3130352e3138302e302f32322d3232203d3e203633353339.roa (raw, json)
Hash identifier:          VflfPvnB4xs7QkcHeF9XZhM+eHcytgoNgRAfmO9MsXc=
Subject key identifier:   32:CF:84:C1:1B:47:C1:5C:F4:95:44:DD:9B:A2:21:3A:DE:C1:CD:06
Certificate issuer:       /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial:       DD4AD49F586ACA64101B1C5E874ABF6F28D874
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138302e302f32322d3232203d3e203633353339.roa
Signing time:             Thu 16 Apr 2026 02:55:38 +0000
ROA not before:           Thu 16 Apr 2026 02:50:38 +0000
ROA not after:            Thu 15 Apr 2027 02:55:38 +0000
asID:                     63539
IP address blocks:        103.105.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            dd:4a:d4:9f:58:6a:ca:64:10:1b:1c:5e:87:4a:bf:6f:28:d8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
        Validity
            Not Before: Apr 16 02:50:38 2026 GMT
            Not After : Apr 15 02:55:38 2027 GMT
        Subject: CN=32CF84C11B47C15CF49544DD9BA2213ADEC1CD06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e1:47:94:86:ea:97:31:6b:c5:98:b6:f4:14:
                    c4:00:d7:58:d3:1f:68:3f:db:f3:32:3e:39:43:d9:
                    96:a9:35:a4:38:07:89:45:4a:18:8f:4e:79:2c:15:
                    44:41:f0:e8:66:64:86:d5:a9:34:37:8e:48:10:77:
                    65:b0:1a:24:fe:a2:36:08:b4:2e:1b:06:09:be:b1:
                    df:92:15:4f:c1:91:b0:9f:93:62:b1:20:28:cf:f0:
                    60:9e:21:1a:1f:93:a6:c1:5e:3c:91:9b:f3:85:b9:
                    41:f3:28:8a:8b:1f:05:d7:41:d7:a8:68:aa:c8:7a:
                    12:ee:ac:f7:50:28:1d:d3:c8:0a:39:b5:f0:65:ed:
                    ca:e0:ee:9e:d3:c5:27:22:e0:a6:e7:13:b1:22:13:
                    c0:54:5b:bb:2d:4e:bb:37:a4:ed:90:2f:e0:bd:5c:
                    6f:91:0e:4f:98:40:d9:ea:9c:f2:b5:97:cf:02:04:
                    1f:94:5f:19:b5:75:48:a1:dd:ae:1e:42:e8:47:c2:
                    da:30:a7:55:b3:e4:35:f4:de:c7:08:d2:c4:66:37:
                    a1:53:bc:e1:c2:a4:1f:ef:9d:4b:a9:59:55:b0:ae:
                    23:33:e2:b1:da:5f:03:bf:b4:7a:7d:65:77:c6:07:
                    46:e5:2d:96:68:3a:df:2b:61:89:01:05:54:2a:d6:
                    10:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CF:84:C1:1B:47:C1:5C:F4:95:44:DD:9B:A2:21:3A:DE:C1:CD:06
            X509v3 Authority Key Identifier:
                keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138302e302f32322d3232203d3e203633353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:e4:ec:d2:95:9a:34:6d:a1:0d:2c:22:e1:f2:bf:b9:38:cc:
         19:8e:98:f6:5a:51:a4:76:0a:fe:be:41:27:b8:c5:b1:3d:c6:
         3b:77:3e:5d:58:b9:47:2d:ea:88:cb:57:d5:a2:c8:52:ba:9f:
         98:30:52:0b:84:ce:c0:f7:ce:d9:e0:dc:cb:f7:6d:1d:5d:d4:
         ec:42:e7:9d:a9:65:d5:a3:ea:97:f8:1c:7d:d9:be:52:ce:19:
         16:66:74:8d:2f:be:10:bc:a7:51:a8:3e:4a:b0:a0:dc:c7:b0:
         d9:e9:ca:60:f9:bd:08:57:39:fd:28:93:3a:1d:4f:f6:1e:17:
         44:77:d1:6c:bb:2b:d9:ca:96:d7:49:26:cd:b0:0c:ff:f0:88:
         98:03:16:2e:c2:39:e3:72:22:d8:f8:b6:d0:3a:7c:5e:70:5d:
         87:34:39:cf:c0:c3:ad:be:bb:a4:be:db:ab:4e:62:37:64:11:
         9e:f9:b1:51:4c:2f:ca:f9:99:58:00:56:63:5e:5a:6d:83:2d:
         de:7b:32:75:b0:d8:6f:86:ef:a6:2b:98:06:27:43:42:86:cb:
         dc:f7:f0:0b:a2:3e:1c:6a:5d:45:a6:29:08:66:b6:ff:89:98:
         f6:8e:11:8c:3a:1b:77:9f:c1:6d:b1:f9:bc:cf:ef:5f:d3:76:
         e9:c2:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:40 2026 by rpki-client