Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3130332e34322e37362e302f32322d3232203d3e203539303239.roa
File:                     3130332e34322e37362e302f32322d3232203d3e203539303239.roa (raw, json)
Hash identifier:          be2JZ0OEzLx2IHDgfa2BR1lqni3m7jJ03MQDMJo/MT8=
Subject key identifier:   08:A3:4B:3E:CB:16:E7:9F:43:05:06:44:FF:D4:0A:79:B0:4B:D4:B2
Certificate issuer:       /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial:       7E4F70FE564259EACA7FD39D9FF7DB00AEF95EAB
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3130332e34322e37362e302f32322d3232203d3e203539303239.roa
Signing time:             Thu 16 Apr 2026 07:14:29 +0000
ROA not before:           Thu 16 Apr 2026 07:09:29 +0000
ROA not after:            Thu 15 Apr 2027 07:14:29 +0000
asID:                     59029
IP address blocks:        103.42.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4f:70:fe:56:42:59:ea:ca:7f:d3:9d:9f:f7:db:00:ae:f9:5e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
        Validity
            Not Before: Apr 16 07:09:29 2026 GMT
            Not After : Apr 15 07:14:29 2027 GMT
        Subject: CN=08A34B3ECB16E79F43050644FFD40A79B04BD4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:41:fc:00:ab:ed:e4:27:24:31:ad:f3:de:
                    77:75:38:12:a4:3a:04:81:25:c7:a3:5b:89:8f:b8:
                    7e:f9:ee:f2:75:8b:5d:9f:e2:bb:e7:9c:5c:55:f1:
                    8d:c0:06:ee:a0:dd:5f:44:b9:fb:af:6d:d4:be:e9:
                    f9:2f:35:5c:72:03:13:06:84:88:d3:63:1b:e7:79:
                    91:c1:ad:d4:7f:7f:94:e7:12:80:e0:58:c5:fb:02:
                    30:4e:09:03:c6:0f:2c:ae:31:e7:35:69:3c:ee:0c:
                    d0:f1:aa:fb:81:fa:14:8a:49:ac:8b:ac:54:69:18:
                    8b:9c:cb:dc:b2:b8:6b:fa:d9:9d:d6:50:9a:12:2b:
                    9a:52:b3:9f:2d:cb:70:ad:b3:e0:49:67:a7:18:c5:
                    8a:58:0b:fa:a4:26:75:6e:59:d9:7a:0d:c5:2d:f5:
                    06:ba:ee:59:23:97:e1:16:23:0c:93:7c:23:15:49:
                    6b:c6:ee:91:66:72:d6:7c:fe:41:ac:90:5e:1c:f2:
                    64:94:6e:90:37:ff:03:a8:3b:7a:6a:79:e7:5f:45:
                    64:5e:37:54:a7:af:45:32:69:fb:f6:b6:6d:71:75:
                    a7:ce:ac:4b:05:eb:34:6b:25:a7:ae:54:b6:0e:c2:
                    04:c7:42:b3:8a:3b:73:20:0c:61:58:8e:a0:4c:3b:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A3:4B:3E:CB:16:E7:9F:43:05:06:44:FF:D4:0A:79:B0:4B:D4:B2
            X509v3 Authority Key Identifier:
                keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3130332e34322e37362e302f32322d3232203d3e203539303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:dd:83:bf:f5:a7:02:63:18:c6:d5:35:28:24:8e:f4:ef:4a:
         5d:8c:6e:9e:27:58:9c:50:8e:70:da:a3:65:8e:b8:15:c2:2c:
         dc:8a:de:ec:cb:c3:df:16:a0:b9:8d:b1:59:a2:af:ea:41:80:
         24:b1:90:dd:45:f8:64:d6:01:70:f5:83:5e:9d:44:b5:ac:5a:
         a3:42:0c:69:75:01:28:8b:85:77:44:68:68:c2:90:78:b7:10:
         b9:99:9d:d5:ad:50:88:0a:c3:5c:b0:44:f2:fe:fa:03:f6:b1:
         b4:e5:fb:36:e2:e0:56:db:ab:7a:d2:b9:3b:10:ac:a6:39:bd:
         d4:54:4f:87:76:a1:11:b4:88:2d:30:cf:7a:a7:07:fd:ea:15:
         a5:62:db:50:76:a2:d4:a6:c2:5b:3d:6b:67:2d:ef:a2:14:c2:
         9f:f0:c8:a1:74:32:cf:88:66:52:30:ef:8c:e6:19:76:34:0c:
         bc:91:91:23:4d:0f:36:51:66:09:46:71:b1:81:b0:f6:da:80:
         1b:5c:3d:a5:dc:27:e2:e6:b1:d4:4b:1e:28:04:ee:18:d5:01:
         68:34:35:84:70:75:1e:f5:b2:bd:03:a8:76:8b:36:8b:46:b5:
         6a:4d:1b:61:69:ae:ce:81:77:33:79:7a:8e:68:c7:43:a1:14:
         41:91:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:24 2026 by rpki-client