Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3130332e37372e39322e302f32342d3234203d3e203633363331.roa
File:                     3130332e37372e39322e302f32342d3234203d3e203633363331.roa (raw, json)
Hash identifier:          ADw6qnP/A+ORdKk9K2tbJM0cq0oMe2oxLQDRPiM4J/I=
Subject key identifier:   E5:88:E6:AE:E9:A8:53:9D:27:2B:38:90:41:60:45:27:13:4C:97:98
Certificate issuer:       /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
Certificate serial:       BDBD57A2BD4BE95B3CC31E78F336D37D60EF95
Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3130332e37372e39322e302f32342d3234203d3e203633363331.roa
Signing time:             Thu 16 Apr 2026 05:55:33 +0000
ROA not before:           Thu 16 Apr 2026 05:50:33 +0000
ROA not after:            Thu 15 Apr 2027 05:55:33 +0000
asID:                     63631
IP address blocks:        103.77.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bd:bd:57:a2:bd:4b:e9:5b:3c:c3:1e:78:f3:36:d3:7d:60:ef:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22
        Validity
            Not Before: Apr 16 05:50:33 2026 GMT
            Not After : Apr 15 05:55:33 2027 GMT
        Subject: CN=E588E6AEE9A8539D272B389041604527134C9798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:1e:bc:c3:ca:ea:12:9f:51:d0:7a:fb:c7:
                    2c:3b:a0:d3:f6:12:9a:14:96:1b:03:30:c7:0f:cb:
                    92:dc:03:e2:ab:1f:4d:15:12:5e:a7:3f:43:f7:67:
                    5a:6e:a0:cf:f6:3b:0d:4b:05:40:b3:f4:2d:a2:9e:
                    18:85:ef:e1:be:ab:fa:39:7c:60:cb:dd:8e:be:a8:
                    a3:6f:75:a6:61:7c:bb:af:e7:19:56:1d:c9:86:2a:
                    5c:e4:a8:52:60:c2:08:2e:5c:94:ea:ff:de:fa:43:
                    bb:f4:b0:b0:4c:ff:c8:b0:ff:0c:4d:8e:b0:79:80:
                    4e:ce:71:b7:37:51:95:7c:91:0b:63:ad:27:be:c5:
                    a7:04:46:1a:72:a5:ea:48:8b:4a:7b:24:b0:1d:1f:
                    0d:c3:e1:16:e7:2d:70:63:18:5d:a3:83:96:fa:36:
                    9d:c3:ca:24:9b:74:cc:7c:03:7a:e2:1e:99:ba:4d:
                    a3:c7:67:5e:d7:7f:8a:f3:79:3b:9a:a1:a1:91:ce:
                    d4:f7:91:35:cb:d6:1e:8c:7b:d2:52:8e:6b:c1:8e:
                    1f:27:6c:0a:5a:33:6c:e3:1c:d1:6d:d3:0e:f3:c0:
                    94:0a:b3:ec:5f:77:bc:1a:07:67:1b:8b:eb:45:46:
                    2b:41:ae:5b:e3:17:bf:7c:30:68:cd:e3:80:a6:fb:
                    0c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:88:E6:AE:E9:A8:53:9D:27:2B:38:90:41:60:45:27:13:4C:97:98
            X509v3 Authority Key Identifier:
                keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3130332e37372e39322e302f32342d3234203d3e203633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:0b:ea:03:a7:b3:45:42:5c:09:4d:56:48:4d:ef:88:90:7d:
         bf:0e:21:92:04:45:58:c2:65:ac:d0:6e:cf:a2:c5:45:96:4f:
         2f:ce:3a:51:62:26:e1:0a:0f:e1:b6:e0:21:8a:d1:71:a4:d7:
         73:8f:ae:8f:20:aa:ea:8f:07:8d:11:6d:27:68:df:b9:0f:fe:
         c7:f6:11:60:eb:1b:f1:0d:78:1d:41:d9:6d:b4:53:1d:d9:fa:
         13:7d:d5:d4:a2:73:85:78:76:a8:09:9b:67:e9:f4:ce:15:f2:
         bc:65:40:8c:e9:3f:fb:75:46:70:27:ad:01:73:5a:02:6e:58:
         28:39:f1:c9:bb:fd:ee:84:e6:85:b5:7e:e6:05:0d:c8:0e:27:
         85:39:be:b8:43:ca:ee:73:59:b2:d7:8f:71:cf:ee:3c:39:b8:
         d7:56:2f:32:79:ce:b6:80:5c:74:ea:01:36:07:8d:dc:5d:36:
         3a:21:2f:fd:ae:8a:fc:fe:eb:e8:42:cb:f1:ba:e4:71:a9:5e:
         10:db:8b:fe:e6:7d:6d:76:bc:04:44:83:5b:1f:a3:4a:b6:33:
         72:e6:0f:84:30:a4:38:01:7a:d3:c7:ae:98:d8:30:ed:ee:43:
         be:b5:f4:00:fe:fb:b3:b6:4e:9c:63:6d:c2:80:eb:de:d8:ef:
         a2:8e:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:12:33 2026 by rpki-client