Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130362e3235352e302f32342d3234203d3e203633353339.roa
File:                     3130332e3130362e3235352e302f32342d3234203d3e203633353339.roa (raw, json)
Hash identifier:          GWNimImsWwSd4p1pU6UVEiTBxArj1+mRzoNaUAcCZv4=
Subject key identifier:   A0:A6:A4:46:92:6E:C7:22:C1:79:E0:A5:E2:35:EC:29:CE:74:3A:EC
Certificate issuer:       /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial:       2B6ACA1756009DEC17D9EE09C71DB0545B38FF87
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130362e3235352e302f32342d3234203d3e203633353339.roa
Signing time:             Thu 16 Apr 2026 02:55:38 +0000
ROA not before:           Thu 16 Apr 2026 02:50:38 +0000
ROA not after:            Thu 15 Apr 2027 02:55:38 +0000
asID:                     63539
IP address blocks:        103.106.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6a:ca:17:56:00:9d:ec:17:d9:ee:09:c7:1d:b0:54:5b:38:ff:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
        Validity
            Not Before: Apr 16 02:50:38 2026 GMT
            Not After : Apr 15 02:55:38 2027 GMT
        Subject: CN=A0A6A446926EC722C179E0A5E235EC29CE743AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:c0:65:c0:b2:2e:23:d9:72:da:91:26:df:
                    02:a2:94:b8:0f:73:97:d7:43:2f:85:d0:a3:a9:c3:
                    b4:ab:83:08:54:11:2c:dc:af:79:2e:ee:04:24:1e:
                    20:aa:4f:54:c8:b3:69:ad:21:a1:39:25:3b:5c:e6:
                    53:cf:9a:23:a0:f9:dc:a4:e4:90:dd:55:34:23:99:
                    88:da:41:14:46:bd:a4:09:df:23:8c:49:f2:4e:0b:
                    5c:3f:02:3e:79:3e:c7:af:c0:ea:aa:d3:c5:6b:ac:
                    70:2a:dc:e5:52:eb:8b:f5:47:78:9e:4e:23:2a:97:
                    01:39:c8:ed:72:4e:c7:52:ef:50:83:0f:26:cd:06:
                    a0:ae:da:ad:4b:57:a0:91:4d:b3:5d:a3:57:4f:84:
                    20:ee:1a:5a:f5:93:f4:f1:d9:bf:88:55:6b:2c:13:
                    e7:8c:4f:79:8c:40:fb:a0:4c:ed:54:2d:15:64:cb:
                    5d:05:d5:2a:2e:ed:cd:22:7e:87:bf:73:89:21:9d:
                    1e:a2:09:bf:ed:e9:6c:79:fa:84:fe:32:77:19:46:
                    dc:8f:e3:c9:fd:bb:df:21:1c:31:50:4f:03:56:21:
                    72:01:09:17:92:96:fd:0b:f4:e3:cb:fa:aa:da:02:
                    22:79:1e:ea:3a:4b:48:ec:ae:0e:b2:6a:0a:21:23:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A6:A4:46:92:6E:C7:22:C1:79:E0:A5:E2:35:EC:29:CE:74:3A:EC
            X509v3 Authority Key Identifier:
                keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/3130332e3130362e3235352e302f32342d3234203d3e203633353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:67:f7:e8:af:4a:6b:98:cd:c3:41:21:5d:1b:1d:7f:96:41:
         a3:4e:92:97:f0:3f:db:34:38:26:43:cb:29:5a:ff:dd:4c:37:
         eb:c0:09:41:07:3b:22:8d:1c:7c:35:24:dc:06:bd:e8:7d:b7:
         c9:72:94:95:c5:d4:91:8f:1e:ec:79:e9:98:ba:6a:44:82:9f:
         c6:cb:bb:99:3d:a1:79:7b:65:51:da:da:14:b9:5e:15:d1:b2:
         8a:cf:c4:fa:7b:1a:4b:0d:21:0f:5c:fc:68:04:a4:b0:dc:cb:
         91:0f:5d:27:f3:83:4b:19:60:a3:b9:03:da:16:62:c9:ec:0d:
         05:f0:57:20:40:04:5e:ad:b9:45:43:2e:fc:4e:9a:2e:fc:89:
         f4:ae:83:51:b1:d6:13:89:b6:9c:de:fc:cb:cc:2c:2f:82:82:
         ac:a7:b3:e3:e0:a7:26:92:aa:3c:8b:30:27:6a:0c:51:ef:51:
         ee:a8:1d:e3:ba:6b:6e:01:ee:20:e9:0f:5a:05:e5:c7:20:7a:
         c9:74:74:e2:33:1f:19:39:b5:27:73:6e:7d:6c:2d:af:2a:12:
         09:57:9a:f3:ad:f2:86:e4:ff:90:d3:20:33:88:92:fb:13:1a:
         52:e7:a8:6c:35:0a:3a:bb:88:e8:1d:75:04:1a:de:86:bf:6e:
         6b:17:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:49:19 2026 by rpki-client