Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235322e302f32322d3232203d3e2034383132.roa
File:                     3130332e3139322e3235322e302f32322d3232203d3e2034383132.roa (raw, json)
Hash identifier:          zY7BeZ54qOlA5fmxZp3uwnE81EWFDJk9pWozMKFYWaI=
Subject key identifier:   0A:B2:41:9C:FD:91:E4:DA:FB:3B:9C:B9:A8:C3:8A:EA:07:13:9A:86
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       3291148558234D093A9841618E0E892558886C38
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235322e302f32322d3232203d3e2034383132.roa
Signing time:             Fri 17 Apr 2026 06:20:10 +0000
ROA not before:           Fri 17 Apr 2026 06:15:10 +0000
ROA not after:            Fri 16 Apr 2027 06:20:10 +0000
asID:                     4812
IP address blocks:        103.192.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 10:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:91:14:85:58:23:4d:09:3a:98:41:61:8e:0e:89:25:58:88:6c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Apr 17 06:15:10 2026 GMT
            Not After : Apr 16 06:20:10 2027 GMT
        Subject: CN=0AB2419CFD91E4DAFB3B9CB9A8C38AEA07139A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:c8:ce:dd:e8:cb:fa:fe:22:57:ba:b9:52:
                    3d:ff:c6:c5:d4:67:59:88:91:5f:4b:71:cd:f3:96:
                    89:7e:b9:f6:08:32:62:f1:bd:fd:b3:2a:2d:a8:82:
                    b9:fc:6c:b9:8b:87:c9:f6:9a:e2:f2:be:d1:a7:8c:
                    a7:76:4f:0e:d9:ef:40:81:cc:ec:bd:8e:67:c9:5d:
                    6b:30:85:5f:60:f9:ca:bb:4f:47:68:2d:97:0d:ee:
                    d3:1c:9b:ab:41:24:8d:5a:71:87:3b:97:d8:02:10:
                    08:cd:2a:83:bd:9e:94:02:41:75:a3:83:37:33:93:
                    5a:3b:98:f0:62:ad:38:70:b6:b3:7f:9f:70:3a:96:
                    0f:e6:ae:95:6f:f0:93:c1:82:ca:a0:f4:59:fd:0d:
                    57:a7:77:ce:a6:ca:7a:12:b5:a9:c9:58:38:2e:90:
                    59:b6:5d:81:f2:a7:ce:5e:32:be:0b:70:d7:20:98:
                    0c:ef:92:60:57:e2:a5:e1:de:e1:36:ff:cb:09:c0:
                    ed:cf:a6:a3:bd:d0:d0:b3:57:3a:39:f8:cd:71:ca:
                    34:f5:6d:42:37:03:66:ce:99:22:09:6a:97:75:32:
                    fc:38:69:b8:64:9f:58:09:1e:29:63:2a:7a:04:de:
                    25:4d:86:1a:c1:c7:05:e7:1d:2e:eb:0b:19:b2:d7:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B2:41:9C:FD:91:E4:DA:FB:3B:9C:B9:A8:C3:8A:EA:07:13:9A:86
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235322e302f32322d3232203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:f3:00:06:8f:76:1a:88:1b:c4:29:a0:33:8f:12:13:c1:ca:
         87:a5:e6:a1:07:d1:49:80:03:32:51:f0:ae:23:fc:20:dc:c0:
         39:82:cc:ff:a7:1b:75:51:2e:20:8b:e9:e1:3f:80:da:01:c7:
         f8:1e:dd:23:a1:89:8b:e2:a8:64:4a:17:47:b2:a9:5d:b8:62:
         cf:75:e1:26:65:b9:3f:70:fa:12:18:a8:01:fe:3b:49:9d:81:
         e1:f6:23:47:7f:fa:44:75:2b:38:e0:3a:0b:b4:5c:c5:a5:87:
         c5:07:3f:fc:d6:b6:be:77:7b:de:22:0b:e3:f8:08:ae:85:4d:
         b8:15:b1:6e:85:95:f8:13:14:91:78:2b:69:c3:e2:2b:bd:4d:
         b3:2b:ea:91:5b:3a:60:b9:c4:35:36:fb:ad:29:d4:d4:f0:3b:
         9b:4d:fc:31:84:2c:b5:dc:78:85:9e:b9:75:60:56:84:85:bf:
         74:08:89:22:2f:87:6a:91:4c:e3:eb:0f:2a:05:ad:30:4f:2b:
         06:b4:12:87:c4:1f:20:ae:ca:5e:bc:73:f8:a2:53:3e:03:b9:
         74:b3:1c:48:c1:40:ea:6b:a6:1f:a8:37:53:7d:ac:46:4c:44:
         34:98:da:f5:70:39:25:ba:ae:a1:bb:bd:ca:d9:de:1d:64:c1:
         1c:82:fc:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:22 2026 by rpki-client