Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453684225/0/3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa
File:                     3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa (raw, json)
Hash identifier:          xHB51GTEu6E4O2uPU5Q+PFtFl9kWbp78dTmrzsJmvSE=
Subject key identifier:   8C:1F:26:4C:D9:F0:B6:FD:66:DA:0F:EB:06:1D:3F:A5:8A:D0:0B:6E
Certificate issuer:       /CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3
Certificate serial:       385542EB6B1CD5EE3C5D36BCEAC33EA1C8106A3E
Authority key identifier: 6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa
Signing time:             Thu 16 Apr 2026 08:35:16 +0000
ROA not before:           Thu 16 Apr 2026 08:30:16 +0000
ROA not after:            Thu 15 Apr 2027 08:35:16 +0000
asID:                     146842
IP address blocks:        103.170.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:55:42:eb:6b:1c:d5:ee:3c:5d:36:bc:ea:c3:3e:a1:c8:10:6a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3
        Validity
            Not Before: Apr 16 08:30:16 2026 GMT
            Not After : Apr 15 08:35:16 2027 GMT
        Subject: CN=8C1F264CD9F0B6FD66DA0FEB061D3FA58AD00B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:b8:69:30:41:78:af:bc:a4:72:24:e6:7c:
                    46:45:ff:f1:3d:69:bf:8c:cc:86:a5:47:cb:a9:86:
                    dc:32:74:40:a8:52:64:82:f7:06:07:77:f1:ed:89:
                    9d:cb:8a:c5:f5:6f:b0:af:f3:c2:a3:5b:91:71:49:
                    8c:32:78:3f:79:98:99:82:b6:ee:2f:0c:89:dc:99:
                    0a:96:2a:db:fd:ca:e3:c9:dd:0e:53:5e:9d:48:13:
                    10:41:c3:b8:b6:f2:9a:81:a9:c8:4c:24:14:e1:91:
                    1f:7f:81:49:8f:cc:83:8f:cd:b1:f6:f2:49:81:e6:
                    e5:f2:4d:de:b3:05:30:33:d0:05:f4:44:8a:85:a2:
                    84:45:8c:14:39:bf:a7:8b:c9:19:01:45:2b:6f:34:
                    41:34:c2:09:2b:38:c7:e9:0b:40:84:60:e9:08:c8:
                    57:fb:3d:dd:63:f9:72:ac:39:1b:66:e7:a2:68:f5:
                    9e:18:f3:67:83:a9:0d:1e:37:02:53:a9:e1:06:96:
                    0e:bd:c3:0e:3a:a1:f2:6b:f9:f3:05:ee:87:af:09:
                    74:cf:0e:7a:d7:a5:a7:c7:7a:24:d7:11:7d:a6:e3:
                    ce:e9:77:73:af:ec:7c:5d:ed:3e:0e:39:f9:86:49:
                    22:06:e0:87:10:2a:f7:e0:ba:dc:a6:ee:13:1d:1f:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1F:26:4C:D9:F0:B6:FD:66:DA:0F:EB:06:1D:3F:A5:8A:D0:0B:6E
            X509v3 Authority Key Identifier:
                keyid:6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:2b:77:94:5d:a7:0f:b6:8c:60:78:c8:58:10:56:1c:28:14:
         70:b1:aa:80:72:0a:07:ed:3c:30:af:65:4e:8d:ae:bf:3e:30:
         32:a8:46:b5:ee:3e:7c:8a:c7:7a:88:56:57:00:30:bf:ce:36:
         c3:e1:0c:79:5d:c9:f9:19:7d:74:aa:52:18:a2:e9:b7:c7:42:
         23:d3:47:b1:e7:7d:11:bf:55:db:63:7d:c2:c0:a2:48:21:0a:
         8e:2b:65:65:a3:fb:39:79:f5:d6:41:36:ad:1f:0e:29:a1:47:
         87:03:88:93:e4:f5:8d:d7:fb:5e:eb:ba:e1:4c:86:4a:f8:c9:
         31:57:80:8a:fb:e6:6e:15:b2:03:8d:d3:39:6f:d4:c3:35:26:
         a4:85:28:85:51:d8:33:81:33:a6:fe:22:f3:bb:52:ac:5b:86:
         15:3a:fd:ea:b1:ad:a4:32:80:d6:02:82:f5:be:28:75:87:d8:
         71:f5:19:0c:a3:2b:c0:84:fc:b1:b0:9e:34:bd:8e:93:1e:bf:
         10:d8:50:bf:4b:87:4c:65:c2:13:ac:b0:ae:bd:7f:55:2d:09:
         8d:4c:1b:e6:4e:d6:97:bb:19:1e:4d:b5:24:20:31:17:c8:93:
         0d:8d:9c:5e:85:f9:dc:5a:fb:24:c9:d3:a3:75:b1:70:1c:f8:
         2e:8a:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:00:29 2026 by rpki-client