Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e3233342e3132392e302f32342d3234203d3e203137363231.roa
File:                     3130332e3233342e3132392e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          hjZZWuzPbHVXr03JjZNZ9eEAXooHh0hek1gV2iAOLKs=
Subject key identifier:   1C:D5:5B:FC:A1:9A:2C:4C:87:7E:97:08:03:CC:6B:AD:8E:0D:27:3E
Certificate issuer:       /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Certificate serial:       366F0AD7DC1707E48B2DE4EFA5D7AF0E7307358E
Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e3233342e3132392e302f32342d3234203d3e203137363231.roa
Signing time:             Tue 21 Apr 2026 02:56:53 +0000
ROA not before:           Tue 21 Apr 2026 02:51:53 +0000
ROA not after:            Tue 20 Apr 2027 02:56:53 +0000
asID:                     17621
IP address blocks:        103.234.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 04:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6f:0a:d7:dc:17:07:e4:8b:2d:e4:ef:a5:d7:af:0e:73:07:35:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
        Validity
            Not Before: Apr 21 02:51:53 2026 GMT
            Not After : Apr 20 02:56:53 2027 GMT
        Subject: CN=1CD55BFCA19A2C4C877E970803CC6BAD8E0D273E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:6b:4a:8c:4c:b6:79:19:9c:fa:c2:99:dd:
                    e6:a3:17:cb:f4:f8:ff:25:47:ac:69:d8:ca:a7:2d:
                    2d:96:54:79:29:68:5d:18:36:5b:2c:df:9d:c8:0d:
                    51:91:a2:ac:17:af:a3:84:fd:81:63:75:d8:f6:9a:
                    03:25:bf:38:9a:de:9b:96:31:21:1b:65:9b:1a:34:
                    61:01:75:3b:7e:de:d2:89:ba:80:39:2a:cc:39:bd:
                    b9:1e:33:6a:71:0c:a4:52:9f:5b:13:dd:e8:5d:81:
                    76:51:ef:66:82:2e:f8:e6:aa:6a:87:89:6a:e4:22:
                    4a:72:d8:e3:9e:e3:da:07:00:c1:53:70:ec:88:ea:
                    1a:61:79:b8:5e:22:b9:a1:14:72:59:d3:67:09:0b:
                    ef:a9:2e:16:32:89:54:92:9f:51:5a:b4:ed:37:21:
                    a9:8b:09:50:f8:18:94:7d:79:ae:3f:b3:70:55:91:
                    f4:dd:2b:9e:73:18:35:11:bb:8b:a1:ff:ca:1c:53:
                    0d:1c:10:77:69:b4:e0:a5:d4:0b:d9:77:9c:04:c4:
                    41:0d:d0:e6:83:5c:4e:06:51:04:c0:e0:d8:5b:56:
                    78:00:59:91:4b:bb:48:12:86:50:65:46:37:72:0a:
                    c3:b9:c2:ad:b7:31:01:68:8e:0d:a0:d6:2d:0d:64:
                    fe:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D5:5B:FC:A1:9A:2C:4C:87:7E:97:08:03:CC:6B:AD:8E:0D:27:3E
            X509v3 Authority Key Identifier:
                keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/3130332e3233342e3132392e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:24:e5:3a:a1:69:76:44:11:2f:89:4a:ce:25:ff:55:f4:
         eb:38:5a:0b:b8:e4:ce:80:44:2b:cf:66:c1:bf:bd:11:53:91:
         49:3b:fa:b2:48:05:3d:2e:1f:d2:c4:2b:5a:20:72:78:3f:e6:
         eb:87:28:67:df:9f:ce:1b:c5:d9:51:71:b3:aa:3e:eb:cb:8e:
         a0:43:bd:57:05:e0:24:08:26:d2:88:00:a3:d4:76:e8:00:6d:
         92:18:b2:2d:39:ca:ba:99:3c:fb:c7:23:35:e2:c4:2c:56:76:
         e1:7c:ed:83:a7:2d:30:7d:f1:ce:35:95:30:af:d5:ac:90:1a:
         cc:a6:28:5c:ce:c1:09:f6:f3:d4:c6:eb:de:f6:ae:ea:72:65:
         5c:5e:7b:b8:0c:1c:97:59:3b:cc:6f:8f:2e:af:c0:e6:bf:6d:
         d6:51:62:95:ea:33:c6:c3:49:03:d0:5d:d3:9f:99:6f:21:5d:
         f7:27:21:ed:fe:28:1d:36:e2:e7:fa:30:b4:18:9f:8a:3f:20:
         a1:f1:9d:55:df:44:92:0e:75:ff:c4:a3:50:c0:6a:2d:58:6a:
         c5:7f:fb:5e:20:6f:32:54:ca:a9:a9:bb:98:76:fd:39:99:94:
         95:cc:2a:cc:85:a9:3b:8c:58:b7:15:d6:88:eb:1b:bf:f6:d3:
         22:22:05:c8
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUNm8K19wXB+SLLeTvpdevDnMHNY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez
REIwMDQyNzAeFw0yNjA0MjEwMjUxNTNaFw0yNzA0MjAwMjU2NTNaMDMxMTAvBgNV
BAMTKDFDRDU1QkZDQTE5QTJDNEM4NzdFOTcwODAzQ0M2QkFEOEUwRDI3M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgGtKjEy2eRmc+sKZ3eajF8v0
+P8lR6xp2MqnLS2WVHkpaF0YNlss353IDVGRoqwXr6OE/YFjddj2mgMlvzia3puW
MSEbZZsaNGEBdTt+3tKJuoA5Ksw5vbkeM2pxDKRSn1sT3ehdgXZR72aCLvjmqmqH
iWrkIkpy2OOe49oHAMFTcOyI6hphebheIrmhFHJZ02cJC++pLhYyiVSSn1FatO03
IamLCVD4GJR9ea4/s3BVkfTdK55zGDURu4uh/8ocUw0cEHdptOCl1AvZd5wExEEN
0OaDXE4GUQTA4NhbVngAWZFLu0gShlBlRjdyCsO5wq23MQFojg2g1i0NZP5XAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUHNVb/KGaLEyHfpcIA8xrrY4NJz4wHwYDVR0j
BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy
QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2OTA2MjYvMC8zMTMwMzMyZTMy
MzMzNDJlMzEzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfqgTANBgkqhkiG9w0BAQsFAAOCAQEAe/Ak5TqhaXZEES+JSs4l
/1X06zhaC7jkzoBEK89mwb+9EVORSTv6skgFPS4f0sQrWiByeD/m64coZ9+fzhvF
2VFxs6o+68uOoEO9VwXgJAgm0ogAo9R26ABtkhiyLTnKupk8+8cjNeLELFZ24Xzt
g6ctMH3xzjWVMK/VrJAazKYoXM7BCfbz1Mbr3vau6nJlXF57uAwcl1k7zG+PLq/A
5r9t1lFileozxsNJA9Bd05+ZbyFd9ych7f4oHTbi5/owtBifij8gofGdVd9Ekg51
/8SjUMBqLVhqxX/7XiBvMlTKqam7mHb9OZmUlcwqzIWpO4xYtxXWiOsbv/bTIiIF
yA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:06:04 2026 by rpki-client