Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3137352e302f32342d3234203d3e20313331353036.roa
File:                     3130332e3135362e3137352e302f32342d3234203d3e20313331353036.roa (raw, json)
Hash identifier:          TKD32MInttw+NgzjjWoQCJHcrxNGZXX84Cw5hNESL/M=
Subject key identifier:   69:CB:19:DC:72:A8:D8:2D:C9:34:5E:7D:52:78:4C:F7:CD:59:5F:54
Certificate issuer:       /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial:       3CE3582E34BAF47C9DB319F8DB7A83F5A9E7686D
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3137352e302f32342d3234203d3e20313331353036.roa
Signing time:             Thu 09 Apr 2026 02:00:17 +0000
ROA not before:           Thu 09 Apr 2026 01:55:17 +0000
ROA not after:            Thu 08 Apr 2027 02:00:17 +0000
asID:                     131506
IP address blocks:        103.156.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 19:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e3:58:2e:34:ba:f4:7c:9d:b3:19:f8:db:7a:83:f5:a9:e7:68:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
        Validity
            Not Before: Apr  9 01:55:17 2026 GMT
            Not After : Apr  8 02:00:17 2027 GMT
        Subject: CN=69CB19DC72A8D82DC9345E7D52784CF7CD595F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:c7:88:7a:05:6c:bd:7c:e5:c7:f8:45:3e:
                    ac:cc:07:c1:5b:5e:51:3f:fd:7a:cb:0b:30:39:44:
                    9a:fc:80:87:76:8b:84:4f:08:a4:40:22:e9:21:ca:
                    46:d9:d1:f6:5d:54:3d:0f:50:b2:8a:f7:f9:83:f1:
                    af:03:dd:9d:37:b1:21:76:5a:ac:64:3a:a9:95:d5:
                    7a:8c:92:55:4b:4d:66:4c:72:ec:08:26:2a:9b:25:
                    8c:e4:1a:0a:17:ca:59:b0:50:b9:75:84:73:66:3a:
                    a3:31:2e:b7:79:29:d9:cd:7d:74:92:42:92:6c:b9:
                    65:77:2e:e6:c8:dd:c4:f5:9f:6b:1f:18:aa:35:7b:
                    ba:f0:d9:a6:19:e6:4c:df:84:62:70:ea:56:36:94:
                    6a:91:43:98:20:13:8f:f6:80:cd:9e:0d:36:7e:77:
                    58:be:ee:df:5a:c1:cc:48:a5:2e:f7:9f:fa:5d:fc:
                    7d:84:95:6e:5b:c7:d8:3e:a1:86:21:fb:50:de:06:
                    57:c3:f8:dc:31:e1:8a:13:2e:54:13:8e:ae:7e:c0:
                    a9:ee:74:f2:f8:44:04:88:c6:5b:19:3b:f7:1a:05:
                    f3:f5:12:57:1b:07:6f:62:34:98:d3:7d:62:76:aa:
                    8b:76:80:25:36:0e:1d:7e:9f:91:eb:a0:d3:fe:5a:
                    27:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CB:19:DC:72:A8:D8:2D:C9:34:5E:7D:52:78:4C:F7:CD:59:5F:54
            X509v3 Authority Key Identifier:
                keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3137352e302f32342d3234203d3e20313331353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ab:e7:b6:9d:bd:f6:47:d9:ca:d7:b0:91:28:f7:72:d6:00:
         78:b2:9e:8a:d2:40:cc:92:7d:a6:6b:91:87:d1:5a:e5:5f:a7:
         1b:53:80:78:92:fc:a1:6f:91:3b:e6:87:4c:82:78:63:d2:60:
         fa:bd:c6:e2:c0:14:9b:31:2f:1a:77:98:f9:4f:e5:3e:33:f9:
         55:eb:5c:50:ac:71:35:7f:c5:3d:83:33:32:b5:b6:3f:b2:50:
         25:fd:e5:35:be:81:30:f5:45:02:74:97:a0:ca:b6:de:4f:06:
         82:63:38:c2:fa:7c:22:ca:24:56:95:32:da:29:50:2a:fa:b5:
         c1:42:d2:9a:f7:3b:35:d6:5f:9c:4e:e9:24:74:ec:8c:e8:f8:
         f8:c6:c7:9b:9e:02:4d:bb:ad:ae:7d:a3:a8:2d:73:63:e7:56:
         25:4c:f0:60:b5:57:e7:f5:98:af:c0:ea:53:06:85:ac:08:0e:
         61:d9:4b:b2:66:e1:05:d0:a7:dd:f5:a0:5c:ab:50:c0:a1:e0:
         d2:6b:0b:46:4c:c0:b0:19:1b:9f:23:36:7d:35:dd:c3:4f:de:
         eb:76:76:44:a9:3f:17:1f:ae:af:49:7e:90:6a:2b:7b:f2:52:
         68:e6:9f:b4:74:1b:27:14:1b:b1:1a:04:22:7e:7a:1a:3b:d3:
         f2:7a:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:32 2026 by rpki-client