Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453684225/0/3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa
File:                     3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa (raw, json)
Hash identifier:          oIVYiH99ns+ZO8k2snXu2q5AtM9u9S/dgbN/MlAUrrI=
Subject key identifier:   F1:02:DB:4D:60:5E:A3:8F:99:77:8B:B1:31:AF:5A:D6:49:FB:74:AA
Certificate issuer:       /CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3
Certificate serial:       773E4C33F82C7448A339BB4138E3D5F87F6C8439
Authority key identifier: 6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa
Signing time:             Thu 16 Apr 2026 08:35:16 +0000
ROA not before:           Thu 16 Apr 2026 08:30:16 +0000
ROA not after:            Thu 15 Apr 2027 08:35:16 +0000
asID:                     146842
IP address blocks:        103.170.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3e:4c:33:f8:2c:74:48:a3:39:bb:41:38:e3:d5:f8:7f:6c:84:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3
        Validity
            Not Before: Apr 16 08:30:16 2026 GMT
            Not After : Apr 15 08:35:16 2027 GMT
        Subject: CN=F102DB4D605EA38F99778BB131AF5AD649FB74AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7d:94:54:11:f0:fd:2c:7e:5f:e5:63:cb:1b:
                    67:1d:5d:f8:c3:d3:c7:4b:fa:14:22:c4:ab:56:2d:
                    02:b8:74:3c:18:c7:2a:a6:a8:cf:41:24:58:b0:a8:
                    b2:7e:5b:e8:54:6e:9b:8f:25:37:51:ed:e0:41:18:
                    63:b7:b2:a9:f4:3f:5c:c0:c0:bc:b7:a8:3f:1a:b8:
                    ba:4a:e4:2f:b9:4c:af:4b:c3:e7:ab:4c:fb:cb:79:
                    28:67:cc:27:bf:56:72:15:ce:2f:ff:59:d8:a4:15:
                    f8:0a:1d:bf:4b:e4:d3:9b:b5:20:cd:2a:6a:5b:b9:
                    ed:8f:24:a1:12:12:1f:97:eb:d6:df:3b:b7:03:ee:
                    1a:0c:1a:86:a6:0e:1a:f3:70:8c:78:7e:42:88:97:
                    36:da:78:49:1f:f1:c4:4f:5d:2c:fc:9b:a1:fb:6f:
                    a4:bd:56:d0:6e:fb:06:3e:99:71:1c:4f:61:ae:fb:
                    d0:b4:c0:ae:68:b8:e4:76:23:74:d6:8e:8e:9a:e3:
                    47:f4:bf:f3:bd:d1:d7:58:28:ac:97:56:eb:e1:a2:
                    a7:39:58:0f:0a:fd:20:7c:f2:89:28:f5:6e:7d:a8:
                    25:24:3f:d5:a5:5e:fa:34:5f:93:56:8e:df:5f:42:
                    a2:7d:c7:d8:9f:78:01:04:a2:13:99:3d:04:83:74:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:02:DB:4D:60:5E:A3:8F:99:77:8B:B1:31:AF:5A:D6:49:FB:74:AA
            X509v3 Authority Key Identifier:
                keyid:6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:f9:31:16:a3:0c:a2:d3:d3:8f:7c:b9:7a:e5:90:48:1f:28:
         2a:5a:80:ea:aa:9d:1f:b9:f0:aa:78:ab:62:50:a1:2e:08:17:
         e3:03:4b:5c:df:40:99:9b:87:f8:39:16:14:96:1d:4b:3b:da:
         74:96:8f:a9:0f:8f:c0:09:ba:75:eb:66:8b:8a:86:20:de:60:
         ab:5e:cb:c0:04:17:03:fb:10:85:c8:f6:07:df:96:98:e2:d8:
         06:f8:8f:52:d0:53:79:bc:97:89:82:01:09:96:17:8a:42:de:
         5b:20:6b:ed:df:78:c7:b1:a6:e6:c2:cf:5f:7d:d4:da:62:1c:
         d8:14:c3:fd:8e:5c:c2:a1:69:78:45:c8:ae:1b:ba:33:f7:84:
         a8:d0:ff:99:35:ce:02:b2:66:5f:0f:fb:2e:60:e7:55:be:06:
         f8:ee:dd:2d:c4:61:1c:8f:9c:34:67:30:b1:28:75:94:be:ad:
         98:0c:bb:5a:03:10:ce:b7:04:10:c2:34:48:fd:af:8a:c4:37:
         41:32:28:96:ae:1b:aa:d4:83:8b:a6:0c:b0:10:6d:ba:1b:da:
         a1:12:63:c6:fe:11:7a:32:a3:b4:18:53:8d:1d:f7:bc:22:60:
         a2:b4:cc:e7:e2:16:73:b2:83:d3:e0:06:c5:b9:63:2e:75:b2:
         a9:5f:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:26:48 2026 by rpki-client