Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32332d3234203d3e20313534333231.roa
File:                     3130332e3136362e35322e302f32332d3234203d3e20313534333231.roa (raw, json)
Hash identifier:          0C8XcZ1s9U/Zhi7pGBjei7dFvtqtfA78ZraGcnjIorM=
Subject key identifier:   64:8C:90:C6:B0:0B:CA:BF:51:04:7E:54:4D:E8:50:AE:7F:76:18:FA
Certificate issuer:       /CN=9B5519650F0653145F5D42879890BE1251C8F463
Certificate serial:       63F4156C48A725EECDCD160D84C082424A41B402
Authority key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32332d3234203d3e20313534333231.roa
Signing time:             Thu 02 Apr 2026 09:19:35 +0000
ROA not before:           Thu 02 Apr 2026 09:14:35 +0000
ROA not after:            Thu 01 Apr 2027 09:19:35 +0000
asID:                     154321
IP address blocks:        103.166.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Apr 2026 03:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f4:15:6c:48:a7:25:ee:cd:cd:16:0d:84:c0:82:42:4a:41:b4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B5519650F0653145F5D42879890BE1251C8F463
        Validity
            Not Before: Apr  2 09:14:35 2026 GMT
            Not After : Apr  1 09:19:35 2027 GMT
        Subject: CN=648C90C6B00BCABF51047E544DE850AE7F7618FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dc:48:40:67:0e:03:3c:a3:52:e1:eb:23:e7:
                    b2:c2:55:c0:88:e2:f4:96:22:a4:b4:e7:ae:68:14:
                    7b:3b:f7:23:7f:eb:94:65:f4:58:eb:d5:74:37:a8:
                    87:71:58:47:29:78:08:16:65:a3:d8:66:7d:02:d9:
                    18:09:f5:3b:05:61:cc:1b:39:04:2b:33:b7:97:c8:
                    7d:cc:dd:87:3b:ec:4a:1d:4a:44:fd:a6:5c:e2:26:
                    72:2c:75:5a:ea:36:61:7f:2f:ab:a6:9c:9f:23:c3:
                    81:7c:06:ec:b5:0b:bd:bc:f3:d8:b7:a8:47:8c:fd:
                    8b:6e:ae:f2:94:74:6b:ed:1c:19:45:22:1d:bd:44:
                    38:8d:85:d4:8d:c4:af:79:5f:8a:00:9e:73:10:74:
                    c6:d1:0f:68:28:9d:ff:88:fa:45:99:fb:33:89:6a:
                    31:9a:03:32:b5:e5:d9:24:23:0e:a8:62:20:52:ab:
                    a6:d3:e7:3d:1a:61:d0:3b:03:96:a2:8e:c7:89:c9:
                    05:ad:f7:b3:37:e6:4f:82:2a:70:bc:f4:2c:16:72:
                    f9:d8:0d:4f:fb:61:87:05:7c:b3:dc:b3:34:9e:4e:
                    2c:66:8b:a6:58:47:fc:6e:53:22:4f:9a:8d:b6:57:
                    e5:29:40:9f:29:fc:a3:ac:79:ab:96:4d:6b:9f:0f:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8C:90:C6:B0:0B:CA:BF:51:04:7E:54:4D:E8:50:AE:7F:76:18:FA
            X509v3 Authority Key Identifier:
                keyid:9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32332d3234203d3e20313534333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:fb:fa:9c:c6:fe:09:e0:48:16:f9:e7:9c:83:2e:cb:b4:
         7c:c5:0f:c5:38:c5:b6:66:c7:df:46:8d:3e:f5:b4:bc:96:e4:
         2d:6c:93:fc:ef:48:36:16:84:a8:4f:1c:18:9b:f9:6f:6b:b5:
         b1:be:c9:4c:cb:0e:6f:ec:53:3a:a6:df:5a:69:0d:d8:9c:41:
         c7:c8:bf:b7:e3:f8:33:83:d5:a9:0b:ee:0c:23:78:6e:b3:29:
         35:00:10:96:4d:99:3d:32:93:4e:ea:0a:0d:71:d9:e9:ae:ea:
         de:48:6a:cb:d0:bd:8a:6a:e2:09:95:bf:b3:15:4e:bf:77:96:
         19:29:6b:4a:70:d9:96:f7:f4:7c:bf:21:8d:77:ba:15:ae:9d:
         b5:12:f0:3a:6d:6a:cf:f5:8d:46:34:eb:3a:49:4f:15:1f:a2:
         4e:d6:21:87:94:a5:84:26:61:92:a6:e3:4c:1b:38:09:94:ca:
         7b:9c:c0:26:f1:0b:48:99:6d:62:01:bd:10:e4:94:cf:d9:f0:
         ef:36:a8:38:72:ef:b1:dc:bd:4c:cc:a1:49:82:4b:31:14:2a:
         58:9c:d7:08:f6:74:85:67:9f:04:a2:3b:4d:c2:4b:84:7f:dd:
         9e:a7:76:e1:d8:40:ef:48:cd:b8:09:f6:f2:1b:b5:5a:9c:19:
         88:27:12:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:09:56 2026 by rpki-client