Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3130332e35322e3130302e302f32322d3234203d3e203338323833.roa
File:                     3130332e35322e3130302e302f32322d3234203d3e203338323833.roa (raw, json)
Hash identifier:          n3GRVhOmk8CKyJPGNg53Kpj23hTf59riyMVti4k63sI=
Subject key identifier:   C2:40:05:65:F8:15:3F:03:AE:EC:90:FF:54:1C:A9:36:B1:74:26:E5
Certificate issuer:       /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial:       51AEB2A446E4AC77A6200E7B172E2B60C24EE762
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3130332e35322e3130302e302f32322d3234203d3e203338323833.roa
Signing time:             Wed 08 Apr 2026 03:17:42 +0000
ROA not before:           Wed 08 Apr 2026 03:12:42 +0000
ROA not after:            Wed 07 Apr 2027 03:17:42 +0000
asID:                     38283
IP address blocks:        103.52.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ae:b2:a4:46:e4:ac:77:a6:20:0e:7b:17:2e:2b:60:c2:4e:e7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
        Validity
            Not Before: Apr  8 03:12:42 2026 GMT
            Not After : Apr  7 03:17:42 2027 GMT
        Subject: CN=C2400565F8153F03AEEC90FF541CA936B17426E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:32:ef:39:5d:e9:f7:37:38:55:31:bd:9f:
                    28:aa:3c:23:ef:9c:d1:a6:9f:59:e2:d0:6a:5b:02:
                    1e:a5:c4:68:b4:df:b8:ce:26:e4:10:25:37:9d:45:
                    0a:59:09:17:af:7f:94:25:48:dd:e2:b3:bd:58:11:
                    96:60:d1:60:b9:b7:7a:c5:fb:26:3d:60:c5:4f:9b:
                    21:de:af:16:36:d6:0e:99:ad:60:6f:80:ef:f7:4f:
                    4c:4f:64:82:ed:92:58:1a:85:3c:11:72:51:69:e4:
                    7a:ea:6d:8c:ef:53:13:b4:c2:5f:39:1c:c7:d7:54:
                    26:e6:cf:a6:a5:cf:d1:21:7f:77:21:0a:41:ab:13:
                    1c:9c:81:9a:2b:f2:87:ef:bc:47:43:4d:4b:8d:ec:
                    dc:43:30:33:83:91:2a:71:25:53:dd:02:7a:b5:2a:
                    b2:db:5a:4e:81:de:9d:45:df:d1:68:57:40:8e:74:
                    16:de:7f:38:44:b5:29:bd:0f:e9:2a:62:d5:10:42:
                    b6:f7:63:f0:45:dd:49:2c:ae:cf:c3:1a:72:67:8d:
                    ac:f1:14:6d:b9:97:7d:53:8b:78:b7:c3:7b:4e:af:
                    55:a8:8e:c1:7b:e6:96:8d:7d:61:30:e0:c5:70:62:
                    a6:d0:e2:c3:47:39:5d:81:43:b8:25:55:54:cd:c0:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:40:05:65:F8:15:3F:03:AE:EC:90:FF:54:1C:A9:36:B1:74:26:E5
            X509v3 Authority Key Identifier:
                keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/3130332e35322e3130302e302f32322d3234203d3e203338323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:25:2f:3b:16:5c:c1:29:b5:fe:fa:87:68:51:88:8d:35:
         40:55:80:9d:98:8e:a9:e4:45:da:9a:e8:fd:8f:2e:00:39:e6:
         dc:74:a4:d5:ba:53:5b:63:cb:b4:9b:4e:b7:a9:34:75:4c:a4:
         ae:ba:4d:67:eb:f0:a1:a8:ce:1b:cc:cf:dd:0a:d9:83:fb:0f:
         f4:fd:9e:01:6e:d0:f3:ea:94:a7:c5:cd:65:09:2e:e4:6d:cd:
         ef:20:62:63:d7:49:96:ce:be:0d:71:e5:72:ca:67:d7:c8:17:
         13:e7:3c:97:ad:39:88:7f:47:db:9f:5c:e5:a0:43:48:dc:b7:
         03:48:ab:e8:4c:f2:e0:e6:33:fe:ae:67:d9:c3:08:a4:b4:c0:
         64:7b:be:d2:79:bb:7a:ee:dc:5c:44:d2:9e:a0:0d:53:d1:7c:
         9b:9b:82:2f:fb:02:b9:b4:44:23:4a:7c:ed:f3:5e:a5:66:28:
         2c:ee:a3:81:73:e2:18:50:50:d9:b7:ae:64:2f:f1:21:3f:5b:
         18:60:26:9b:ee:28:58:f9:42:f8:fd:f4:27:c0:40:55:64:e8:
         af:c6:82:ac:e5:8a:c7:39:27:d3:7b:29:a3:d6:c3:ac:14:6b:
         57:ff:7c:8b:a6:23:2e:12:7b:f9:b6:c6:01:e7:68:75:5c:0b:
         c8:be:29:bf
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUUa6ypEbkrHemIA57Fy4rYMJO52IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcx
MzM1RTRFOTAeFw0yNjA0MDgwMzEyNDJaFw0yNzA0MDcwMzE3NDJaMDMxMTAvBgNV
BAMTKEMyNDAwNTY1RjgxNTNGMDNBRUVDOTBGRjU0MUNBOTM2QjE3NDI2RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRRjLvOV3p9zc4VTG9nyiqPCPv
nNGmn1ni0GpbAh6lxGi037jOJuQQJTedRQpZCRevf5QlSN3is71YEZZg0WC5t3rF
+yY9YMVPmyHerxY21g6ZrWBvgO/3T0xPZILtklgahTwRclFp5HrqbYzvUxO0wl85
HMfXVCbmz6alz9Ehf3chCkGrExycgZor8ofvvEdDTUuN7NxDMDODkSpxJVPdAnq1
KrLbWk6B3p1F39FoV0COdBbefzhEtSm9D+kqYtUQQrb3Y/BF3Uksrs/DGnJnjazx
FG25l31Ti3i3w3tOr1WojsF75paNfWEw4MVwYqbQ4sNHOV2BQ7glVVTNwKJlAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUwkAFZfgVPwOu7JD/VBypNrF0JuUwHwYDVR0j
BBgwFoAU5EoRJFuEpiae7CPXMh8RlxM15OkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NjE1MDQwMi8wL0U0NEExMTI0NUI4NEE2MjY5RUVDMjNENzMyMUYx
MTk3MTMzNUU0RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcxMzM1RTRFOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NjE1MDQwMi8wLzMxMzAzMzJlMzUz
MjJlMzEzMDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzODMyMzgzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmc0ZDANBgkqhkiG9w0BAQsFAAOCAQEAHNwlLzsWXMEptf76h2hRiI01
QFWAnZiOqeRF2pro/Y8uADnm3HSk1bpTW2PLtJtOt6k0dUykrrpNZ+vwoajOG8zP
3QrZg/sP9P2eAW7Q8+qUp8XNZQku5G3N7yBiY9dJls6+DXHlcspn18gXE+c8l605
iH9H259c5aBDSNy3A0ir6Ezy4OYz/q5n2cMIpLTAZHu+0nm7eu7cXETSnqANU9F8
m5uCL/sCubREI0p87fNepWYoLO6jgXPiGFBQ2beuZC/xIT9bGGAmm+4oWPlC+P30
J8BAVWTor8aCrOWKxzkn03spo9bDrBRrV/98i6YjLhJ7+bbGAedodVwLyL4pvw==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:17 2026 by rpki-client