Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138342e302f32322d3232203d3e203633353339.roa
File:                     3130332e3130352e3138342e302f32322d3232203d3e203633353339.roa (raw, json)
Hash identifier:          vIZJyscaQGumtDa3wtU91Fi20DqtmjLyMeNAkiESD1w=
Subject key identifier:   F4:D2:C6:07:D4:83:4A:6E:7A:B8:A3:A8:77:1F:10:BB:B0:DA:F7:FD
Certificate issuer:       /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial:       58AC1F0FDC94683C268426E0B1D16897D0FEC9D0
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138342e302f32322d3232203d3e203633353339.roa
Signing time:             Thu 16 Apr 2026 02:55:37 +0000
ROA not before:           Thu 16 Apr 2026 02:50:37 +0000
ROA not after:            Thu 15 Apr 2027 02:55:37 +0000
asID:                     63539
IP address blocks:        103.105.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ac:1f:0f:dc:94:68:3c:26:84:26:e0:b1:d1:68:97:d0:fe:c9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
        Validity
            Not Before: Apr 16 02:50:37 2026 GMT
            Not After : Apr 15 02:55:37 2027 GMT
        Subject: CN=F4D2C607D4834A6E7AB8A3A8771F10BBB0DAF7FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:23:95:a9:db:32:7e:0e:6a:8c:18:f7:7b:
                    f2:45:e7:da:48:86:03:18:37:b3:92:0b:52:cf:35:
                    f9:a9:14:ec:6c:5d:9b:1e:2c:c1:0d:95:87:8b:53:
                    f9:8a:cf:c8:eb:49:15:a1:be:0b:7d:a6:6e:34:91:
                    11:82:9c:dc:a8:0b:b5:af:42:61:7c:dc:6d:ee:e3:
                    21:06:bf:f0:61:52:c7:b7:75:ef:07:cb:cf:08:08:
                    20:e6:a3:86:71:f3:9c:0b:0d:86:ed:30:30:4d:3a:
                    13:12:0d:e5:53:38:52:64:1f:6d:c6:55:e1:f4:a8:
                    71:ac:12:13:ce:f3:c8:3b:6e:f6:15:be:f8:b8:04:
                    9a:c5:df:59:7c:11:72:b4:5b:f6:bc:5a:d1:be:9b:
                    a5:a5:e3:5e:f0:6e:d7:04:39:ea:88:ad:68:fb:aa:
                    72:13:b2:2b:b2:46:4e:4a:91:00:57:91:76:2a:a8:
                    61:25:30:dc:eb:3d:81:f7:3f:db:0f:43:f1:bc:0d:
                    4a:65:14:c5:09:d4:38:93:ee:1e:86:0e:7e:0e:f5:
                    92:68:e7:c6:83:0d:92:07:4d:48:e7:2b:7e:fe:29:
                    29:d7:9b:d4:cb:4c:ea:a9:26:53:bc:a8:89:d2:2d:
                    05:35:8a:3e:93:83:4e:99:ce:e0:52:ad:44:48:3a:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D2:C6:07:D4:83:4A:6E:7A:B8:A3:A8:77:1F:10:BB:B0:DA:F7:FD
            X509v3 Authority Key Identifier:
                keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138342e302f32322d3232203d3e203633353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:9f:a1:7a:9b:eb:5b:5e:4e:ff:25:34:d7:3e:98:38:4c:2f:
         53:22:60:7a:4e:77:a1:b9:c1:9a:d9:c8:53:d9:78:d0:23:c6:
         60:f4:02:e1:e3:db:75:a0:3c:62:30:5f:8a:b0:4f:4c:3d:ab:
         22:0a:f4:e0:2e:db:5b:6d:3b:77:12:3c:2d:4d:94:be:fa:4e:
         4d:85:e1:04:9d:c2:be:5e:da:b7:85:62:59:ba:ec:10:31:f8:
         64:fa:74:9a:d6:0f:62:f8:77:f1:8b:05:e5:d8:cb:c1:10:64:
         a3:79:17:da:53:a0:a9:29:5a:58:b7:37:23:db:dc:0c:6d:d6:
         96:ff:61:38:cb:ee:9d:0f:7f:fa:22:d7:d0:a9:2c:3e:d1:d5:
         d0:d6:60:36:30:6c:7f:94:1a:a2:50:66:63:f0:9a:d8:1b:c0:
         cc:19:59:ab:0c:50:f3:ed:d2:52:ca:fc:e3:24:1c:35:b3:ed:
         09:15:f8:b1:8d:c0:82:b2:a1:82:db:97:eb:8d:74:51:4e:9b:
         d5:80:66:a8:a1:b3:b9:22:d7:bf:de:de:8c:de:fc:47:a2:47:
         56:3d:0c:b6:65:36:2c:58:0f:9d:44:72:01:18:cb:bb:c5:f3:
         3c:89:79:b0:6f:80:7d:a2:bb:21:8c:88:ef:c9:8f:71:a1:5e:
         ee:50:51:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:40 2026 by rpki-client