Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453749761/0/3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa
File:                     3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa (raw, json)
Hash identifier:          eL6eXD6DpEFCAEoVCkipZcpj+NAT0Z6XGY3UwdJgJzM=
Subject key identifier:   0D:9B:D3:E5:5A:1D:4A:37:54:E8:EC:C5:FB:55:2F:79:33:00:CF:93
Certificate issuer:       /CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7
Certificate serial:       58F87AF4175521F68D632791E54D243826D32867
Authority key identifier: E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa
Signing time:             Thu 16 Apr 2026 08:41:56 +0000
ROA not before:           Thu 16 Apr 2026 08:36:56 +0000
ROA not after:            Thu 15 Apr 2027 08:41:56 +0000
asID:                     133115
IP address blocks:        103.171.167.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 06:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f8:7a:f4:17:55:21:f6:8d:63:27:91:e5:4d:24:38:26:d3:28:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7
        Validity
            Not Before: Apr 16 08:36:56 2026 GMT
            Not After : Apr 15 08:41:56 2027 GMT
        Subject: CN=0D9BD3E55A1D4A3754E8ECC5FB552F793300CF93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:40:12:f6:0f:65:4f:f2:4a:54:bc:9b:26:84:
                    b8:48:9e:ad:dc:de:ac:a5:ff:3c:35:88:c4:01:3d:
                    25:80:f9:35:75:0c:e1:cb:29:67:5a:f9:a3:82:2e:
                    68:bb:71:a2:a4:49:c0:a1:a7:dd:3d:cc:68:c0:9a:
                    ec:8a:51:78:3b:b5:fd:26:8f:21:99:3a:37:9e:88:
                    fd:ef:ac:95:8a:08:78:27:b9:08:70:20:88:7e:98:
                    0a:c2:0c:84:b7:01:0b:ba:9a:a6:42:3f:b7:b4:3c:
                    6d:1a:45:fd:f6:70:e1:fb:b2:fb:89:c6:7e:ae:a8:
                    10:42:81:b2:3c:6c:b8:11:37:72:67:14:f5:a6:a6:
                    db:26:75:6e:d3:c8:5b:ee:0f:66:91:0f:9a:15:c3:
                    ff:9e:af:1e:f3:5a:36:97:42:9f:e3:9b:b3:05:bd:
                    c6:3b:af:b7:f3:9e:bc:78:3b:1f:4d:a7:82:4c:c9:
                    e1:00:5c:9a:93:f2:19:e9:f9:ca:c5:53:4a:05:27:
                    bd:e3:1c:ea:98:03:d9:9f:a8:10:d8:c4:80:d0:f1:
                    cd:4c:30:27:91:0d:fb:85:d4:7b:bf:01:36:7d:be:
                    17:2e:ca:54:a7:cd:41:e6:c5:b8:e3:db:f6:c5:af:
                    48:bf:27:f4:bf:26:c3:66:9c:1e:b0:81:43:1f:56:
                    69:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9B:D3:E5:5A:1D:4A:37:54:E8:EC:C5:FB:55:2F:79:33:00:CF:93
            X509v3 Authority Key Identifier:
                keyid:E1:5D:0A:4D:D3:C3:FB:38:13:EB:F7:DE:2A:FC:0E:0E:E9:BC:00:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E15D0A4DD3C3FB3813EBF7DE2AFC0E0EE9BC00F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453749761/0/3130332e3137312e3136372e302f32342d3332203d3e20313333313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:f4:ca:08:dc:f4:98:f2:97:7f:aa:cd:b7:40:84:24:19:95:
         1f:12:96:ea:b9:a8:3a:3e:ba:90:b9:28:a8:ce:d2:3c:45:56:
         12:b2:29:79:22:9a:28:7f:b5:9f:90:01:8c:fa:cf:39:88:fe:
         f1:a6:0e:15:b8:1e:c6:f7:a9:92:de:8c:6c:3e:bd:6a:47:a5:
         cf:16:36:52:dd:cb:aa:2a:81:b1:13:3c:9f:f6:8d:94:04:b2:
         08:89:7f:9a:e7:cc:f0:3d:f2:8b:15:43:21:4e:95:c5:6f:5d:
         6b:19:6f:0e:f0:c9:6b:15:7d:4d:a9:f1:68:c3:19:a6:f6:6c:
         39:87:fc:3e:2a:fb:8c:c9:e5:b5:46:75:07:ec:05:2a:dc:6a:
         06:d8:ef:9f:e9:e8:26:85:fe:e7:c7:32:19:d4:e9:3f:3a:10:
         2c:78:93:1b:3d:24:ae:df:06:ed:e6:2a:a4:2d:53:61:49:1d:
         22:5b:92:e9:b0:3b:bb:2b:e5:f5:94:db:83:e6:4e:6a:f7:bd:
         a7:9d:7b:96:8f:fc:9e:b4:d8:5d:33:8b:46:ab:a6:3f:1d:35:
         52:d0:a3:24:88:4e:ca:af:a6:c7:92:4a:f5:7f:b1:f1:ae:e7:
         9a:6a:08:b4:72:9a:24:3f:a1:61:78:15:16:b7:16:0e:cd:ab:
         7c:6c:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:48 2026 by rpki-client