Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3137342e302f32342d3234203d3e20313331353036.roa
File:                     3130332e3135362e3137342e302f32342d3234203d3e20313331353036.roa (raw, json)
Hash identifier:          5xOmdmKhQmNhVFfauoKuKn6B8VtRms4WvdeVegMHlFU=
Subject key identifier:   0A:AB:B6:CA:48:49:DA:2B:D3:3B:B5:17:79:F5:F1:1A:A8:70:44:36
Certificate issuer:       /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial:       13F0E438AA0E713423865C806748B4420DB55F9A
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3137342e302f32342d3234203d3e20313331353036.roa
Signing time:             Thu 09 Apr 2026 02:00:17 +0000
ROA not before:           Thu 09 Apr 2026 01:55:17 +0000
ROA not after:            Thu 08 Apr 2027 02:00:17 +0000
asID:                     131506
IP address blocks:        103.156.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 19:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f0:e4:38:aa:0e:71:34:23:86:5c:80:67:48:b4:42:0d:b5:5f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
        Validity
            Not Before: Apr  9 01:55:17 2026 GMT
            Not After : Apr  8 02:00:17 2027 GMT
        Subject: CN=0AABB6CA4849DA2BD33BB51779F5F11AA8704436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:7f:a3:28:b2:be:70:27:b9:58:3c:20:15:
                    8e:bd:0d:90:53:cf:ab:a6:ff:7a:e5:01:6c:34:eb:
                    e2:2a:02:2d:70:18:94:80:e7:64:98:ea:12:c6:0a:
                    ba:91:d2:25:ae:e4:33:c2:d2:5b:11:2c:77:8a:7c:
                    18:5a:8a:01:f3:79:65:64:de:48:aa:ed:bc:67:82:
                    52:be:0a:c8:a7:2d:c4:08:ea:99:ad:63:47:9f:30:
                    9d:e7:a1:53:65:ab:43:f7:99:73:b1:b4:b5:ed:56:
                    26:a1:97:90:05:a7:f4:d3:2c:b5:20:e6:e3:51:ab:
                    da:da:82:dc:3a:c7:d2:e8:7e:b4:e6:01:36:f0:47:
                    fd:75:2a:cf:df:78:4a:ad:bb:0b:d2:58:71:e9:98:
                    31:9c:7d:cb:82:1a:e0:f2:0f:4a:2c:6d:b8:a1:40:
                    c6:64:e9:67:74:0a:44:92:d8:dd:a9:95:e5:8f:2f:
                    90:d0:42:d0:86:75:a4:ff:5b:54:34:ee:2c:8c:2b:
                    25:8e:d7:16:76:94:79:4b:dd:b3:04:f5:18:49:45:
                    91:09:c5:56:e2:81:0d:40:6e:c1:5c:58:dd:d6:30:
                    b0:84:dd:94:12:26:d1:43:d5:31:5f:0d:83:ee:c7:
                    3b:61:61:aa:96:01:4f:34:fe:a3:4c:ea:10:8f:19:
                    15:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AB:B6:CA:48:49:DA:2B:D3:3B:B5:17:79:F5:F1:1A:A8:70:44:36
            X509v3 Authority Key Identifier:
                keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3137342e302f32342d3234203d3e20313331353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:1d:93:21:ce:10:d3:7e:85:97:57:f2:27:41:54:84:25:35:
         60:03:5e:52:ef:7c:d1:a6:ab:4a:ff:eb:10:c3:67:e1:07:65:
         3c:64:60:36:c8:ae:ac:28:55:ad:82:98:f6:73:a0:80:7c:97:
         76:07:84:28:8d:13:6f:4b:2f:84:f8:0f:84:7c:76:21:d6:df:
         f4:74:d2:6a:74:e9:b2:eb:79:df:37:18:80:f3:51:78:35:34:
         4f:16:fe:83:07:2a:aa:95:2e:8b:d3:b9:f3:e3:99:93:c8:0b:
         82:ad:ca:3f:f1:45:06:a6:dd:0a:c6:a4:33:d1:ce:0c:4c:fe:
         e2:e1:63:aa:dd:3f:67:65:1e:22:5c:06:ec:62:01:5e:83:d4:
         fa:e9:2f:57:09:55:4f:a7:b6:75:f7:3c:38:bd:30:35:6a:95:
         a0:8e:21:48:1d:fd:61:11:f8:f2:31:53:8d:33:84:21:30:1a:
         94:22:4a:1b:40:29:80:87:e6:9b:a4:5b:13:03:16:50:c5:ea:
         9b:d7:98:ee:df:b6:2a:28:69:14:47:82:60:01:d0:70:e6:bb:
         1b:f9:9b:7d:05:c3:9e:e8:97:b7:f0:53:d4:5a:b5:b9:af:e3:
         a9:37:78:d4:2a:6c:e3:61:5d:07:c4:2a:80:f0:29:f9:17:bb:
         a2:0f:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:31 2026 by rpki-client