Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3233342e35372e302f32342d3234203d3e2034383337.roa
File:                     3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=
Subject key identifier:   E9:E8:19:7B:2B:47:07:93:08:3E:44:C5:91:04:D9:FA:13:31:BE:73
Certificate issuer:       /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial:       06C3D8E16D78FDCC43DBB30A29F119622421AD44
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3233342e35372e302f32342d3234203d3e2034383337.roa
Signing time:             Thu 16 Apr 2026 06:55:30 +0000
ROA not before:           Thu 16 Apr 2026 06:50:30 +0000
ROA not after:            Thu 15 Apr 2027 06:55:30 +0000
asID:                     4837
IP address blocks:        103.234.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 03:22:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c3:d8:e1:6d:78:fd:cc:43:db:b3:0a:29:f1:19:62:24:21:ad:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
        Validity
            Not Before: Apr 16 06:50:30 2026 GMT
            Not After : Apr 15 06:55:30 2027 GMT
        Subject: CN=E9E8197B2B470793083E44C59104D9FA1331BE73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:06:24:46:42:de:4d:67:49:27:89:2e:93:
                    fc:92:8c:d4:80:9d:92:2e:c1:1e:31:3e:99:44:31:
                    25:d2:77:0f:48:7f:82:5d:64:a5:29:64:85:5c:ee:
                    5b:41:81:1c:8c:ed:c8:96:17:17:42:ef:bf:de:4f:
                    38:63:35:53:b4:76:b8:f7:68:64:4a:69:b0:5a:d4:
                    9f:b1:a0:3e:1d:c7:20:ba:ef:c2:61:92:2d:98:78:
                    18:f6:5c:36:b9:7b:6d:39:ea:5f:95:2a:8e:89:ea:
                    60:fe:36:8d:e2:22:fe:78:42:a5:b7:98:09:fa:60:
                    2d:a1:95:b0:f1:ee:05:ff:a2:67:fa:83:82:7d:55:
                    38:3c:1e:da:88:37:3e:79:d3:45:92:ca:bd:28:81:
                    92:73:15:85:5d:2a:db:b4:5d:e1:e0:3b:a6:0f:f5:
                    64:3c:7f:7d:64:f0:2b:34:ba:b2:16:dd:ec:ff:2c:
                    ac:26:2a:af:6f:eb:61:41:ba:89:c4:67:5d:48:d5:
                    1d:1b:d2:07:55:e1:41:d1:a6:49:78:ce:63:4a:41:
                    5b:32:50:d8:45:3e:09:02:67:7d:c7:b9:08:0b:e7:
                    f1:3e:c3:3e:1b:a3:4f:7a:e7:02:01:a7:a2:c3:59:
                    3b:77:d9:ba:da:db:9d:a0:13:4d:ba:b2:fc:43:79:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E8:19:7B:2B:47:07:93:08:3E:44:C5:91:04:D9:FA:13:31:BE:73
            X509v3 Authority Key Identifier:
                keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3233342e35372e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:69:c8:98:79:7d:59:db:8a:71:02:71:00:ad:f9:95:1a:5a:
         aa:c8:a1:44:7f:47:92:ad:3d:0b:59:c0:4b:1c:0a:36:fd:41:
         06:88:f7:bc:47:1d:42:15:d3:a0:9c:ec:45:4f:7e:c6:ec:27:
         c6:2c:66:9b:a1:80:87:7d:b9:28:00:25:36:ef:d7:6f:46:d8:
         06:8e:fe:f5:82:e1:d1:d9:1c:4b:12:71:57:49:cf:c8:06:9d:
         d4:4d:e0:7c:cb:44:c3:98:f6:3b:52:43:ab:85:7d:aa:62:4f:
         48:01:dd:dd:97:6e:be:5d:dd:2f:71:3f:c3:11:8c:24:8d:ac:
         87:c4:e1:6d:68:c9:b0:2f:a4:4c:17:0f:e7:98:85:8a:c0:a4:
         2e:87:c4:e5:c7:be:f3:da:98:30:0a:09:9f:58:30:10:6e:8f:
         8e:b5:7e:34:f0:45:62:e8:a1:e0:91:b8:3b:c5:11:62:c8:25:
         08:90:a9:bb:83:af:1d:92:43:bb:63:16:51:47:b5:bd:05:b3:
         03:33:ce:28:e6:0c:eb:ef:25:55:47:90:d3:cc:9b:16:00:b3:
         05:2b:d5:0a:bc:33:c5:20:5a:05:32:44:d0:59:9d:9d:6c:d6:
         7b:f4:5d:43:f3:97:45:e4:9b:39:81:e5:6c:2b:5c:2c:b3:14:
         b0:49:83:8b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUBsPY4W14/cxD27MKKfEZYiQhrUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4
N0FCQ0E4OTAeFw0yNjA0MTYwNjUwMzBaFw0yNzA0MTUwNjU1MzBaMDMxMTAvBgNV
BAMTKEU5RTgxOTdCMkI0NzA3OTMwODNFNDRDNTkxMDREOUZBMTMzMUJFNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KAYkRkLeTWdJJ4kuk/ySjNSA
nZIuwR4xPplEMSXSdw9If4JdZKUpZIVc7ltBgRyM7ciWFxdC77/eTzhjNVO0drj3
aGRKabBa1J+xoD4dxyC678Jhki2YeBj2XDa5e2056l+VKo6J6mD+No3iIv54QqW3
mAn6YC2hlbDx7gX/omf6g4J9VTg8HtqINz5500WSyr0ogZJzFYVdKtu0XeHgO6YP
9WQ8f31k8Cs0urIW3ez/LKwmKq9v62FBuonEZ11I1R0b0gdV4UHRpkl4zmNKQVsy
UNhFPgkCZ33HuQgL5/E+wz4bo0965wIBp6LDWTt32bra252gE026svxDeRYLAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU6egZeytHB5MIPkTFkQTZ+hMxvnMwHwYDVR0j
BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0
MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3MDQ3NDMwNzQ4MTc2Mzg3LzAvMzEzMDMzMmUzMjMz
MzQyZTM1MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGfqOTANBgkqhkiG9w0BAQsFAAOCAQEAkWnImHl9WduKcQJxAK35lRpaqsih
RH9Hkq09C1nASxwKNv1BBoj3vEcdQhXToJzsRU9+xuwnxixmm6GAh325KAAlNu/X
b0bYBo7+9YLh0dkcSxJxV0nPyAad1E3gfMtEw5j2O1JDq4V9qmJPSAHd3Zduvl3d
L3E/wxGMJI2sh8ThbWjJsC+kTBcP55iFisCkLofE5ce+89qYMAoJn1gwEG6PjrV+
NPBFYuih4JG4O8URYsglCJCpu4OvHZJDu2MWUUe1vQWzAzPOKOYM6+8lVUeQ08yb
FgCzBSvVCrwzxSBaBTJE0FmdnWzWe/RdQ/OXReSbOYHlbCtcLLMUsEmDiw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:51 2026 by rpki-client