Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e322e3130382e302f32342d3234203d3e2034383437.roa
File:                     3130332e322e3130382e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          UpJStsN0x9csFH+SpeM+wtkv4hreOMGlJvTo97F6t+c=
Subject key identifier:   74:F8:48:CA:98:AB:C5:87:B8:E1:35:35:CB:E6:A8:4B:CC:55:FE:AC
Certificate issuer:       /CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
Certificate serial:       28D5D14B7B14AE002904F5D2E9CF8BA7E319F79C
Authority key identifier: 62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e322e3130382e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 16 Apr 2026 07:42:17 +0000
ROA not before:           Thu 16 Apr 2026 07:37:17 +0000
ROA not after:            Thu 15 Apr 2027 07:42:17 +0000
asID:                     4847
IP address blocks:        103.2.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 09:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d5:d1:4b:7b:14:ae:00:29:04:f5:d2:e9:cf:8b:a7:e3:19:f7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163
        Validity
            Not Before: Apr 16 07:37:17 2026 GMT
            Not After : Apr 15 07:42:17 2027 GMT
        Subject: CN=74F848CA98ABC587B8E13535CBE6A84BCC55FEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:19:5f:18:9a:99:95:de:4e:1a:0c:dd:8f:
                    6e:72:27:f5:e6:08:4e:09:c4:75:fc:7b:fb:89:fa:
                    c8:5e:d3:86:1c:26:3c:51:6e:95:f6:ba:5d:6e:5b:
                    dd:db:c4:55:80:02:2f:7c:ef:f3:bd:aa:66:85:e2:
                    b6:ce:5f:64:14:14:8b:6f:ef:48:6c:d9:59:09:28:
                    88:fc:a4:c9:dd:af:56:d8:c3:cf:54:f3:cb:c4:a2:
                    e8:4f:34:f0:15:d5:4e:ec:05:b5:5b:2c:fe:ba:12:
                    3c:45:f6:31:2d:74:40:91:97:c0:92:78:ce:bd:ae:
                    5f:a0:32:62:1d:58:5b:0b:9a:de:ea:69:67:ec:36:
                    80:3f:e9:9c:36:fc:e1:e0:af:f0:d8:22:48:7a:f5:
                    86:8c:3c:3f:e3:ea:72:81:ee:c5:9f:40:e3:29:1a:
                    2b:2d:d7:de:b4:0f:08:85:3e:fe:95:1d:6e:5b:72:
                    1b:79:d2:00:b6:b1:6c:63:37:4a:f5:05:bf:56:28:
                    0a:8c:70:11:ef:10:33:ce:3a:31:0e:69:01:ca:f0:
                    cb:a7:9f:7b:36:5c:76:98:19:4d:09:7a:95:df:ea:
                    9b:5e:c1:a0:14:46:4c:3a:dd:f5:52:4a:d7:90:a7:
                    84:7b:10:ec:98:45:1c:4a:69:ea:9f:37:24:b8:82:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F8:48:CA:98:AB:C5:87:B8:E1:35:35:CB:E6:A8:4B:CC:55:FE:AC
            X509v3 Authority Key Identifier:
                keyid:62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e322e3130382e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:76:00:7f:f1:90:d6:d6:86:ac:1d:b9:16:07:93:fc:f8:2a:
         06:9e:1f:f8:5e:a8:25:e8:1e:d7:ae:15:1e:0a:43:91:d7:90:
         71:e0:82:c9:5e:0e:60:ab:10:80:87:76:67:fc:0d:c3:63:60:
         52:6a:c9:1f:dd:70:31:87:fc:5e:26:bd:a8:8f:dd:85:04:10:
         4e:40:38:fb:75:fe:c1:2d:a2:cc:74:fe:2b:9d:17:d5:f8:df:
         5a:b8:b8:86:35:cf:e8:99:3e:1f:e7:25:23:b6:af:79:fd:17:
         f7:f5:03:a4:53:e4:59:16:71:98:be:ac:ab:3a:2f:eb:a4:d7:
         84:3c:aa:c0:84:e1:33:13:37:44:92:21:9e:16:02:61:61:37:
         78:13:f9:db:2d:0f:ca:69:b4:33:7a:24:bc:99:76:94:9f:8a:
         06:aa:63:0e:4e:b7:b1:d2:31:06:e4:e5:64:e6:35:90:66:52:
         2b:64:84:2e:3c:b0:4a:a0:21:20:72:41:7c:47:a7:4b:8b:92:
         4a:21:83:fb:de:e0:79:48:66:d5:6d:01:b8:88:f6:4b:54:8d:
         67:72:ff:37:2e:da:71:c9:32:b3:cc:bc:75:52:58:40:78:49:
         60:39:2e:ba:64:8b:d1:b5:81:dd:6a:98:a1:99:9f:d1:c8:76:
         51:1a:6d:71
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUKNXRS3sUrgApBPXS6c+Lp+MZ95wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJCQ0JGOTE4NTQzN0EwQkM5OEVGOEQ2QzQ1RjRCMEVD
QjU2QzE2MzAeFw0yNjA0MTYwNzM3MTdaFw0yNzA0MTUwNzQyMTdaMDMxMTAvBgNV
BAMTKDc0Rjg0OENBOThBQkM1ODdCOEUxMzUzNUNCRTZBODRCQ0M1NUZFQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwcRlfGJqZld5OGgzdj25yJ/Xm
CE4JxHX8e/uJ+she04YcJjxRbpX2ul1uW93bxFWAAi987/O9qmaF4rbOX2QUFItv
70hs2VkJKIj8pMndr1bYw89U88vEouhPNPAV1U7sBbVbLP66EjxF9jEtdECRl8CS
eM69rl+gMmIdWFsLmt7qaWfsNoA/6Zw2/OHgr/DYIkh69YaMPD/j6nKB7sWfQOMp
Gist1960DwiFPv6VHW5bcht50gC2sWxjN0r1Bb9WKAqMcBHvEDPOOjEOaQHK8Mun
n3s2XHaYGU0JepXf6ptewaAURkw63fVSSteQp4R7EOyYRRxKaeqfNyS4guQXAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUdPhIypirxYe44TU1y+aoS8xV/qwwHwYDVR0j
BBgwFoAUYry/kYVDegvJjvjWxF9LDstWwWMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA2MjQ3MzA0MDY1ODQzNS8wLzYyQkNCRjkxODU0MzdBMEJDOThFRjhENkM0NUY0
QjBFQ0I1NkMxNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNjJCQ0JGOTE4NTQzN0EwQkM5OEVGOEQ2QzQ1RjRCMEVDQjU2QzE2My5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3MDYyNDczMDQwNjU4NDM1LzAvMzEzMDMzMmUzMjJl
MzEzMDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnAmwwDQYJKoZIhvcNAQELBQADggEBADZ2AH/xkNbWhqwduRYHk/z4KgaeH/he
qCXoHteuFR4KQ5HXkHHggsleDmCrEICHdmf8DcNjYFJqyR/dcDGH/F4mvaiP3YUE
EE5AOPt1/sEtosx0/iudF9X431q4uIY1z+iZPh/nJSO2r3n9F/f1A6RT5FkWcZi+
rKs6L+uk14Q8qsCE4TMTN0SSIZ4WAmFhN3gT+dstD8pptDN6JLyZdpSfigaqYw5O
t7HSMQbk5WTmNZBmUitkhC48sEqgISByQXxHp0uLkkohg/ve4HlIZtVtAbiI9ktU
jWdy/zcu2nHJMrPMvHVSWEB4SWA5Lrpki9G1gd1qmKGZn9HIdlEabXE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:48:49 2026 by rpki-client