Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097347236230070274/0/3130332e3136342e33322e302f32342d3234203d3e203137363231.roa
File:                     3130332e3136342e33322e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          +rL++UMhSg5p47ORwwdTADe44ENBYq7EPXO17vkQoiQ=
Subject key identifier:   DC:B5:26:C8:61:2A:41:05:DD:99:DE:BE:DA:68:10:A1:54:D9:AE:D2
Certificate issuer:       /CN=92BE3D6E46236FC37D6006D602F1002225EABE46
Certificate serial:       4EA00E2E52DC98D8B51679FA7AB524F1155834D8
Authority key identifier: 92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/3130332e3136342e33322e302f32342d3234203d3e203137363231.roa
Signing time:             Fri 17 Apr 2026 02:35:42 +0000
ROA not before:           Fri 17 Apr 2026 02:30:42 +0000
ROA not after:            Fri 16 Apr 2027 02:35:42 +0000
asID:                     17621
IP address blocks:        103.164.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 03:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a0:0e:2e:52:dc:98:d8:b5:16:79:fa:7a:b5:24:f1:15:58:34:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE3D6E46236FC37D6006D602F1002225EABE46
        Validity
            Not Before: Apr 17 02:30:42 2026 GMT
            Not After : Apr 16 02:35:42 2027 GMT
        Subject: CN=DCB526C8612A4105DD99DEBEDA6810A154D9AED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:40:9b:b2:22:c6:66:a3:9b:ff:93:ec:df:
                    b2:35:b0:53:e9:3e:83:cc:d4:2e:a6:b8:81:d1:9b:
                    c9:49:dc:48:73:e8:f4:d5:e6:a6:af:3e:e6:d7:6f:
                    26:6c:d3:5d:8a:69:66:66:4e:5b:8e:91:25:6d:46:
                    a3:fc:fa:e7:7e:7f:ae:69:27:1c:f3:6f:b5:35:21:
                    98:b6:87:75:c4:b4:ef:e6:1f:b9:fe:6d:81:70:f5:
                    de:6c:3c:e5:94:21:9e:fd:b2:3f:07:2c:9b:10:af:
                    57:00:1d:83:f6:03:41:e0:7e:bb:01:b0:cf:e3:0c:
                    01:9e:34:10:4d:0c:35:9d:70:e3:36:bc:7f:82:8d:
                    2e:f1:a8:84:e9:aa:54:b2:05:cb:49:36:ed:12:87:
                    51:1f:14:9e:b8:d9:4d:20:21:f8:6d:ee:e8:9b:44:
                    28:1c:5d:93:82:d7:6c:bb:ab:41:f2:cf:99:8c:8a:
                    24:4b:7e:a3:f5:94:7a:2b:a1:51:14:72:3a:ea:2e:
                    4f:d8:29:f9:f7:b7:71:84:79:e3:d6:a8:a7:d1:5d:
                    18:9c:a5:2e:56:e7:ce:5e:12:37:d4:b6:03:32:ff:
                    df:84:df:92:92:3a:66:99:87:b6:d9:ce:6c:7e:63:
                    b6:ad:01:6e:68:44:73:9b:94:f2:b1:c0:27:51:f2:
                    c9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B5:26:C8:61:2A:41:05:DD:99:DE:BE:DA:68:10:A1:54:D9:AE:D2
            X509v3 Authority Key Identifier:
                keyid:92:BE:3D:6E:46:23:6F:C3:7D:60:06:D6:02:F1:00:22:25:EA:BE:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/92BE3D6E46236FC37D6006D602F1002225EABE46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/92BE3D6E46236FC37D6006D602F1002225EABE46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097347236230070274/0/3130332e3136342e33322e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:37:c3:7c:22:54:83:cd:36:8f:14:5c:cd:8e:b1:03:24:13:
         36:00:77:ea:ee:06:d4:21:fb:69:f9:ea:4a:be:43:27:39:44:
         5f:30:7a:b0:4d:32:29:90:77:ba:ed:32:74:10:6c:1e:11:c5:
         95:90:15:5d:d3:35:7f:d8:7e:b6:28:35:5c:dd:f6:8d:c7:be:
         15:a1:2b:f3:a8:2d:b7:ea:e4:c2:bc:b4:5e:37:af:5c:c0:60:
         2e:e1:44:ff:91:3e:3a:2a:04:18:83:67:a3:56:b8:83:8d:ed:
         9f:71:69:c2:0b:01:42:51:23:b3:7f:32:4a:38:c8:2d:9c:e1:
         7b:b4:48:a4:d5:ec:9f:0c:bf:81:1b:78:e1:60:d8:ed:77:de:
         ac:20:cf:d3:33:7d:9d:cb:87:84:cf:fe:ad:cd:aa:0b:87:3e:
         e9:d5:19:3a:66:25:94:de:e3:76:31:24:b4:a8:62:15:ef:c4:
         e8:2e:50:69:51:57:33:85:7d:9b:37:de:b6:fa:b7:c7:39:ab:
         7d:3f:9a:61:b2:da:5e:bc:ea:d3:42:62:f6:1a:16:b8:d5:c0:
         9a:91:52:ef:39:8c:7e:90:6c:65:54:2e:68:b9:d3:7a:38:d4:
         b8:55:db:5f:c4:f1:c7:99:4e:7f:09:6a:6f:9c:29:b5:c7:22:
         51:48:22:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:25:14 2026 by rpki-client