Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138372e302f32342d3234203d3e203633353339.roa
File:                     3130332e3130352e3138372e302f32342d3234203d3e203633353339.roa (raw, json)
Hash identifier:          4RGNaPoLZcADL1NoS4OERenxrli/g6WqyrNzlkvhQSQ=
Subject key identifier:   01:93:B3:C2:56:AB:EB:7F:01:12:17:B8:00:DE:DC:E3:EE:57:CE:E6
Certificate issuer:       /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial:       49CA0EE62931FEDBFF424B701F5E125047DDE0A5
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138372e302f32342d3234203d3e203633353339.roa
Signing time:             Thu 16 Apr 2026 02:55:38 +0000
ROA not before:           Thu 16 Apr 2026 02:50:38 +0000
ROA not after:            Thu 15 Apr 2027 02:55:38 +0000
asID:                     63539
IP address blocks:        103.105.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ca:0e:e6:29:31:fe:db:ff:42:4b:70:1f:5e:12:50:47:dd:e0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
        Validity
            Not Before: Apr 16 02:50:38 2026 GMT
            Not After : Apr 15 02:55:38 2027 GMT
        Subject: CN=0193B3C256ABEB7F011217B800DEDCE3EE57CEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:45:90:d3:03:36:c1:64:fa:93:bf:bc:5a:
                    6b:0c:eb:0b:b4:e8:d4:77:24:31:c0:72:be:41:d9:
                    bb:82:d7:60:59:1e:db:b4:da:52:85:2b:2e:61:45:
                    af:d5:ad:e9:27:6e:ee:51:0b:ff:1e:52:a1:90:e6:
                    3b:8e:2a:fe:68:e3:bb:72:eb:b0:fa:12:ff:22:76:
                    04:7c:51:ad:f8:3d:16:77:84:c0:84:6d:e8:1b:f7:
                    08:2f:d2:39:01:d9:73:9b:98:3c:f1:c0:0c:28:7c:
                    ee:ba:35:e5:68:b3:3a:51:52:dc:58:d6:04:e5:c0:
                    bc:ab:6d:18:fe:40:6b:db:f4:1c:01:dd:07:b7:2a:
                    55:35:7e:b4:de:42:3e:0e:40:43:90:76:7b:08:08:
                    2f:c7:5f:02:31:95:7d:f6:6f:95:f2:a5:a0:cf:27:
                    4d:85:c1:74:7c:08:7d:f7:23:f6:56:ef:4b:91:30:
                    bb:70:8b:d2:9c:b1:c9:39:64:a8:c8:0c:f0:2e:b5:
                    b9:af:53:61:89:e8:38:d9:fd:33:7e:ac:0e:92:9f:
                    d4:1d:c8:ac:e6:5c:d6:81:62:80:34:77:56:09:12:
                    a6:3f:cb:2f:93:c1:73:40:7b:4b:01:ae:08:d8:9b:
                    ae:be:40:cc:e5:e5:99:21:41:ee:0a:23:bf:3a:03:
                    89:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:93:B3:C2:56:AB:EB:7F:01:12:17:B8:00:DE:DC:E3:EE:57:CE:E6
            X509v3 Authority Key Identifier:
                keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130352e3138372e302f32342d3234203d3e203633353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:e9:32:18:3b:0f:57:c4:55:d1:79:45:42:d5:b4:f4:3c:7a:
         f1:0a:9f:48:4c:02:f3:8c:22:ae:46:e3:87:85:4c:9b:d2:a4:
         5e:ab:14:4b:2f:b8:a9:25:2a:78:e8:43:96:55:4f:54:3e:39:
         57:ea:cf:15:ad:6f:81:4b:0d:21:b2:6c:5a:7f:ec:93:2a:48:
         e8:b9:82:af:d4:a1:ff:21:f8:8a:a7:8d:00:bd:4a:b8:eb:34:
         7c:4a:86:d2:a4:db:79:5d:3a:e8:e5:78:00:3b:68:c5:7f:ec:
         4b:d8:f9:1e:b0:8a:64:b3:4d:25:93:a0:d3:8d:9c:59:5c:fa:
         b7:8a:67:e5:22:3d:36:b4:bb:c6:e0:b4:fe:65:1a:ba:25:13:
         ac:47:61:2b:58:12:e3:cf:c2:d0:31:14:8d:b8:96:fe:7e:28:
         a2:f6:23:de:72:ba:54:fd:f1:d3:f8:64:6d:11:7f:05:9f:02:
         a1:d9:f0:75:27:91:5f:85:23:92:6a:db:42:0a:90:e1:aa:4b:
         e3:d7:0b:7f:70:78:c1:3a:f3:63:72:ca:e7:69:1a:27:43:9b:
         a2:61:f3:95:e9:3b:1b:8a:55:88:06:95:b2:f5:b7:34:0e:ca:
         9e:5e:31:cb:a7:c3:40:c2:e3:df:20:7f:e9:ee:b6:1a:37:1a:
         f0:5e:ad:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:48:41 2026 by rpki-client