Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138322e302f32342d3234203d3e203633353339.roa
File:                     3130332e3130352e3138322e302f32342d3234203d3e203633353339.roa (raw, json)
Hash identifier:          5dtBWCJKUt0qXEUR78d/nAXooGGIAc/Oiel8IgG1O1I=
Subject key identifier:   2D:44:23:A1:C8:8C:F9:0B:62:6D:F1:CE:52:44:AE:B1:56:AB:33:AE
Certificate issuer:       /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial:       238E2B9DF624B7D0F31296228F8A9BC7C760673E
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138322e302f32342d3234203d3e203633353339.roa
Signing time:             Thu 16 Apr 2026 02:55:38 +0000
ROA not before:           Thu 16 Apr 2026 02:50:38 +0000
ROA not after:            Thu 15 Apr 2027 02:55:38 +0000
asID:                     63539
IP address blocks:        103.105.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8e:2b:9d:f6:24:b7:d0:f3:12:96:22:8f:8a:9b:c7:c7:60:67:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
        Validity
            Not Before: Apr 16 02:50:38 2026 GMT
            Not After : Apr 15 02:55:38 2027 GMT
        Subject: CN=2D4423A1C88CF90B626DF1CE5244AEB156AB33AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:a7:88:21:82:31:ee:1c:8f:93:23:a8:b2:
                    85:7c:d1:66:00:be:dc:ef:ca:b6:d5:2f:66:f3:f3:
                    9b:3e:23:a8:83:56:d1:49:9b:29:d3:e9:d5:10:b7:
                    77:74:71:cc:77:a5:df:7a:1e:26:48:a8:f9:f1:a1:
                    bc:92:62:d4:1f:51:6d:d9:48:f3:b6:4d:ad:c9:85:
                    61:ef:df:83:ec:2e:50:3e:cb:01:3b:8d:eb:d2:ba:
                    a0:53:f4:3e:ef:99:4f:4a:2b:c3:70:95:a7:8b:be:
                    94:40:44:f3:13:f3:0b:b6:d0:85:49:61:af:f5:c5:
                    72:44:d7:e7:3f:4e:7d:87:0c:98:77:36:83:eb:12:
                    b5:24:ad:c4:6b:d9:37:89:49:d0:f3:ed:0e:3b:85:
                    ef:eb:65:4d:0f:b0:8d:6b:3a:6b:89:a8:96:c2:68:
                    62:45:46:d3:c5:cb:c9:60:4b:e1:fb:3f:8e:08:04:
                    1d:34:17:63:8f:d3:8f:72:ad:7f:14:3e:b9:1f:61:
                    71:36:00:c3:74:4f:03:86:03:17:22:e7:c0:f8:52:
                    17:69:43:14:8c:a3:a5:a5:53:58:37:f2:8a:c1:a6:
                    6e:30:71:26:0b:db:1f:a3:68:32:85:16:56:64:19:
                    e1:e4:7d:6a:99:f8:7f:aa:94:04:ae:18:03:7a:bb:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:44:23:A1:C8:8C:F9:0B:62:6D:F1:CE:52:44:AE:B1:56:AB:33:AE
            X509v3 Authority Key Identifier:
                keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138322e302f32342d3234203d3e203633353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:21:5f:fd:ab:b2:1d:ef:aa:69:e7:b2:2b:7d:a2:45:c1:b6:
         b2:e7:f7:f1:b1:4c:d4:16:6e:2d:7e:63:56:d7:cc:ab:a3:ab:
         a8:da:0a:6d:a6:91:41:9f:66:ff:65:94:e2:09:fb:dc:4f:b0:
         7c:7c:e8:88:44:20:c1:6f:dc:95:24:d8:72:a6:42:46:7c:5a:
         d1:d2:d7:66:fe:30:fc:68:fd:48:a0:3f:86:eb:e7:cd:9d:2a:
         da:05:19:63:c1:7a:e0:75:e9:e0:a9:03:8f:a0:02:be:b2:57:
         9d:e8:d2:ed:85:13:d7:31:52:4f:d2:d6:b5:a8:5a:d7:66:6f:
         d9:21:bb:17:6f:55:de:ea:04:c3:fb:72:b4:2f:b3:de:dc:c9:
         5b:06:54:b9:5e:7b:01:eb:ce:26:c4:d6:57:93:96:f2:16:68:
         ee:8e:3d:ab:9a:81:9a:96:a2:a2:98:0f:70:10:7c:96:1a:9e:
         b4:f2:9e:91:59:39:b6:45:38:74:24:53:ae:ee:bf:f3:52:0f:
         2c:5e:ad:a0:63:11:71:0e:5b:13:f7:91:dc:d3:56:ca:65:46:
         2f:7d:8a:c3:b6:7e:40:15:8b:25:0b:53:3a:b4:e4:80:1c:b0:
         3c:10:c1:cb:ff:e2:3f:62:3c:ce:ff:79:63:fd:98:b5:9e:de:
         93:83:bc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:39 2026 by rpki-client