Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34372e302f32342d3234203d3e203633353939.roa
File:                     3130332e3231352e34372e302f32342d3234203d3e203633353939.roa (raw, json)
Hash identifier:          u/vlygKRp4uqaQ1eQKS9c4Kf1g9VgGjmp1fspJX/cVs=
Subject key identifier:   A1:90:C6:5A:D3:4E:1F:A1:D6:5F:C7:1A:FE:74:29:A9:C7:A4:6D:6E
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       5753C525D37CF5D4F6CF790399D46FE74355F99D
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34372e302f32342d3234203d3e203633353939.roa
Signing time:             Fri 17 Apr 2026 07:31:58 +0000
ROA not before:           Fri 17 Apr 2026 07:26:58 +0000
ROA not after:            Fri 16 Apr 2027 07:31:58 +0000
asID:                     63599
IP address blocks:        103.215.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:53:c5:25:d3:7c:f5:d4:f6:cf:79:03:99:d4:6f:e7:43:55:f9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: Apr 17 07:26:58 2026 GMT
            Not After : Apr 16 07:31:58 2027 GMT
        Subject: CN=A190C65AD34E1FA1D65FC71AFE7429A9C7A46D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:e6:8f:c7:cb:49:21:51:d7:c7:6f:6e:7c:
                    d7:7b:93:9d:66:b3:62:0f:dc:fb:7a:ff:97:6f:ea:
                    f6:04:7f:8f:d2:49:a2:46:5b:bc:50:89:5c:cb:14:
                    5d:42:44:e8:ed:e3:0d:69:c4:f2:a9:db:f8:66:42:
                    6f:e5:be:30:17:43:5c:28:48:24:28:d7:d6:f7:d0:
                    1f:a4:05:aa:02:76:f5:2f:fd:0d:2d:53:0f:9e:66:
                    41:c5:08:8a:72:00:b7:43:bc:50:46:cb:b2:bc:9f:
                    cb:75:80:89:8d:83:cb:1e:12:ac:22:c2:91:fc:6d:
                    7d:69:35:5d:8c:a5:ca:1b:27:62:a6:98:7f:d1:d7:
                    f6:06:6d:97:12:3e:43:ee:d7:06:e5:9f:6e:79:a3:
                    cf:99:29:ea:57:c1:da:f4:78:35:ba:26:78:48:ef:
                    e6:a4:d2:7b:52:f9:c3:99:8a:7f:c1:7a:4d:92:3f:
                    31:4f:e7:64:8d:8b:52:b9:07:ff:7e:95:9c:f8:2f:
                    db:26:37:a6:61:05:2a:40:ef:6f:ab:be:33:cb:4b:
                    fa:1e:b5:64:6d:34:f3:31:5f:a5:c5:44:0f:c5:63:
                    60:f2:07:ed:c9:af:f8:39:68:dd:a8:7e:3f:f3:b4:
                    0e:ad:2b:5f:c9:87:5d:49:ba:01:03:e2:14:f3:90:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:90:C6:5A:D3:4E:1F:A1:D6:5F:C7:1A:FE:74:29:A9:C7:A4:6D:6E
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3231352e34372e302f32342d3234203d3e203633353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:a5:1e:ba:15:f0:41:eb:4f:1a:bd:c5:31:e9:b9:3d:06:d3:
         f1:7e:cd:8c:c2:f8:4c:ad:47:af:b7:e1:ad:bc:81:8b:38:81:
         a4:ec:e9:a1:c7:4d:8f:7b:e4:66:f1:f1:c0:de:92:9d:ca:ff:
         a4:40:cb:6a:b3:d4:fc:2f:0d:94:7b:84:a1:d2:8d:7c:86:7d:
         ba:92:54:6c:64:8a:6d:45:df:55:eb:7b:ce:d9:cb:ba:cd:ae:
         b8:b1:23:f2:fc:66:a6:0e:5c:6e:f6:3c:7a:7f:ed:c9:86:47:
         fd:7c:99:a6:03:a8:69:5d:00:5a:77:28:5c:41:1d:21:4f:c7:
         4e:d0:2b:94:e2:88:b7:19:e6:f1:e2:d5:9c:c2:f4:23:0d:cd:
         48:2e:6d:94:3b:4c:7e:a5:13:a0:f2:ac:04:2b:e8:b0:fa:e5:
         c2:65:3c:92:a6:d7:26:72:fe:c7:06:6e:bf:09:c4:18:2f:2c:
         c7:5f:4d:bd:08:04:45:7f:01:29:bf:5a:31:1b:81:4e:0b:d7:
         1e:53:2d:71:80:1a:56:e9:69:3b:2c:07:ef:a8:ba:1a:7e:60:
         ac:75:11:df:a7:30:fb:70:03:a2:54:3e:78:1a:e9:93:64:71:
         d0:01:40:6d:10:ac:d4:df:e3:29:f6:31:17:f4:f3:bb:56:98:
         32:d1:a1:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:43:36 2026 by rpki-client