Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137302e302f32342d3234203d3e203233383438.roa
File:                     3130332e3231302e3137302e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          3bTRSDiKkrOgwIE9K+BKvBbFZU2U+XjTotJ6TJJwEOE=
Subject key identifier:   59:F2:09:A5:1F:85:41:A2:23:AB:DF:1A:A4:AD:20:66:04:62:DB:6E
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       5E5F6D6424D111AE3FB2377EBB09DB11AB82DAE2
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137302e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:09:44 +0000
ROA not before:           Thu 16 Apr 2026 09:04:44 +0000
ROA not after:            Thu 15 Apr 2027 09:09:44 +0000
asID:                     23848
IP address blocks:        103.210.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5f:6d:64:24:d1:11:ae:3f:b2:37:7e:bb:09:db:11:ab:82:da:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:04:44 2026 GMT
            Not After : Apr 15 09:09:44 2027 GMT
        Subject: CN=59F209A51F8541A223ABDF1AA4AD20660462DB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:8e:27:33:49:0a:81:22:4d:68:a4:09:74:
                    07:74:a1:d5:bc:2a:6c:76:e1:ec:2c:4f:e1:c4:b9:
                    a4:0c:43:8a:8d:75:dc:10:01:0e:81:b8:02:ba:d5:
                    89:11:38:ec:db:82:52:b0:b5:d0:00:34:87:c7:6f:
                    e6:b4:b9:bb:da:f4:ee:c5:4e:60:db:27:72:46:0f:
                    51:8e:45:68:1a:57:3e:b3:42:51:bf:dc:71:44:45:
                    8c:ff:f2:c6:f3:93:3f:02:47:af:95:0e:6b:f7:f4:
                    c7:d2:2e:eb:33:5b:5f:3c:29:2d:f8:7f:96:e0:63:
                    6c:54:15:f0:9a:3a:96:59:29:11:f1:e6:17:57:a5:
                    eb:44:e3:92:a8:2f:5c:b5:77:1e:1e:37:6a:49:f7:
                    1a:e6:8c:26:91:34:b6:20:b6:12:a5:9c:b8:de:4e:
                    55:2c:c7:aa:63:c7:c9:41:12:05:a0:43:4f:9c:2f:
                    1c:a7:7f:f3:d6:a6:3a:ff:ff:b3:e6:14:21:af:fc:
                    a3:fa:90:51:04:16:71:16:88:80:ea:0d:24:b3:22:
                    8e:cc:79:bb:89:14:6e:b6:4a:ca:06:e2:13:29:f3:
                    f1:23:4f:94:8b:c8:33:a9:24:3b:e0:76:92:e0:c7:
                    ab:21:36:38:dc:8f:db:a0:2c:c7:0e:04:7e:a6:1c:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F2:09:A5:1F:85:41:A2:23:AB:DF:1A:A4:AD:20:66:04:62:DB:6E
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137302e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:0f:f0:8e:20:a1:67:87:62:90:b6:12:5f:bd:12:92:2c:a3:
         fa:d0:9c:df:36:fd:66:ef:e1:9f:d8:0d:dd:9d:aa:33:46:c6:
         56:75:29:56:7d:33:b0:03:ad:b9:bb:4f:49:c4:2d:16:65:4b:
         fc:56:88:15:be:27:00:0e:20:b4:b3:64:9d:64:f5:1d:29:62:
         00:92:7b:78:32:28:b5:c4:41:1a:8a:6f:7d:e7:fd:b2:e7:18:
         f7:58:a9:50:c4:b2:9d:bf:20:f6:bd:85:96:cd:ff:ad:7c:f4:
         c7:cf:2a:ed:40:d2:44:91:37:90:1b:51:a3:d2:62:87:14:80:
         36:2c:6c:5b:c0:23:76:12:e3:02:3f:ad:5c:d9:1d:47:f7:27:
         42:8f:a1:54:59:0c:08:70:62:3f:9a:e6:06:20:11:56:1c:d9:
         ca:e8:53:65:1a:9b:1b:b7:0b:d1:69:36:a0:46:93:75:17:30:
         ea:b8:db:30:ef:0a:7f:0b:d8:9c:a8:1c:4b:c0:05:eb:af:79:
         50:cb:53:06:a3:ec:48:2b:6b:20:c0:d4:b2:e4:4a:85:de:32:
         6a:cc:b3:97:ac:8c:b3:57:a7:d4:10:96:d7:9d:eb:ff:03:6c:
         4c:8e:2a:65:b4:93:7d:9d:6d:45:39:63:55:c1:dc:bc:49:49:
         57:1c:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:23 2026 by rpki-client