Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137312e302f32342d3234203d3e203233383438.roa
File:                     3130332e3231302e3137312e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          UV9guMplFMeKY2gCLhzy1M0/bBWfK0PmFQi6CizqjdI=
Subject key identifier:   C1:61:6E:F3:36:0F:01:30:9C:81:21:6B:C7:B2:E3:33:67:E6:2E:28
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       23CCCA58E3B39E01E32AFC9BE0C3CAE446B86F36
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137312e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:09:44 +0000
ROA not before:           Thu 16 Apr 2026 09:04:44 +0000
ROA not after:            Thu 15 Apr 2027 09:09:44 +0000
asID:                     23848
IP address blocks:        103.210.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cc:ca:58:e3:b3:9e:01:e3:2a:fc:9b:e0:c3:ca:e4:46:b8:6f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:04:44 2026 GMT
            Not After : Apr 15 09:09:44 2027 GMT
        Subject: CN=C1616EF3360F01309C81216BC7B2E33367E62E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:81:87:76:69:e0:86:84:c5:49:c0:1a:d1:
                    3e:71:43:70:78:32:e3:0b:32:e3:3b:27:7e:52:67:
                    d4:fa:4d:ba:18:23:a6:f3:82:7d:4e:43:99:aa:9c:
                    07:9d:f5:8d:71:29:80:0a:75:03:2b:76:e7:91:7e:
                    29:aa:8f:55:d2:06:b0:00:76:43:99:32:ef:24:41:
                    f9:75:78:11:ad:eb:10:4f:75:12:13:13:5e:da:0a:
                    23:3b:05:93:ce:0b:fc:99:6a:b6:29:df:69:d2:98:
                    3f:ec:97:fe:35:2f:73:13:25:cc:fb:6b:0e:e6:15:
                    4f:93:1c:aa:4c:d9:ca:fc:53:af:37:eb:17:c7:81:
                    72:c8:90:30:49:c9:f0:48:82:8c:45:6d:fe:bb:ce:
                    72:59:2d:34:2c:2b:ba:5c:c8:c8:e5:e1:3c:ec:e2:
                    0c:10:ed:cd:83:2f:9a:94:5d:41:3e:a8:9f:e9:91:
                    d1:fd:27:e9:76:26:42:6a:b8:7c:94:36:07:20:e9:
                    f7:11:06:ad:25:dc:dd:19:d9:13:2e:b4:72:95:e6:
                    58:1e:b7:0e:e1:30:3c:0a:b6:32:63:e1:6d:d5:37:
                    29:f9:72:09:e9:c1:f5:28:d0:c1:37:ff:c9:91:8c:
                    be:e9:d3:ea:4d:0e:81:8f:a9:1f:90:2f:c7:1c:c2:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:61:6E:F3:36:0F:01:30:9C:81:21:6B:C7:B2:E3:33:67:E6:2E:28
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3130332e3231302e3137312e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:9a:7c:f3:ae:cb:73:fd:48:d6:27:7b:f0:f9:fa:13:e6:5d:
         9f:a1:65:d2:e5:63:f5:65:31:28:9d:16:cd:6c:f7:5f:51:dc:
         b4:a5:e8:1c:2b:ec:c7:a1:1e:5f:23:9a:69:71:68:38:f0:50:
         bc:0c:81:0a:b7:41:ec:64:41:fb:15:f7:99:5a:56:60:23:09:
         7b:88:71:e7:2a:16:d2:f0:cb:ad:20:dd:3e:ac:8c:a3:f6:17:
         7c:83:eb:ec:69:72:9c:34:bc:4d:df:a8:eb:72:cf:25:63:92:
         cb:ce:a1:3d:9d:cf:30:f6:bc:84:ab:9e:f8:a5:15:83:24:30:
         7c:ea:ca:74:aa:4a:5f:e7:df:cd:51:ba:86:c1:e8:83:38:51:
         37:68:60:df:02:7a:22:a0:07:43:f6:8d:00:7a:49:8f:50:7d:
         bb:cf:8a:fa:72:b1:b2:00:9e:5e:31:af:c0:0a:88:e0:aa:89:
         b3:e0:f6:ac:a4:88:d1:4d:77:f0:5a:02:1f:ef:14:f6:8e:8e:
         b4:4e:75:ae:7a:f8:18:7b:5b:ba:78:f6:40:40:bc:7b:7a:08:
         bf:16:4c:85:81:29:5c:40:39:c4:bf:52:96:e2:86:0b:c8:2e:
         c5:0c:ac:f1:77:6e:e4:1a:76:80:9c:71:95:67:3e:64:66:c5:
         e6:0e:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:04 2026 by rpki-client