Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3138362e302f32342d3234203d3e20313331353036.roa
File:                     3130332e3135362e3138362e302f32342d3234203d3e20313331353036.roa (raw, json)
Hash identifier:          ik1O48XM7u2JMt3etk5nUA7G2hKXp5MXIhCGqQ732Ww=
Subject key identifier:   74:2F:98:3A:23:D5:E4:CB:85:4A:74:7C:57:2F:3E:F4:D3:21:41:AF
Certificate issuer:       /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial:       72FFDC42F0FCD3278DAB0BE1C78E3B01793FE1FD
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3138362e302f32342d3234203d3e20313331353036.roa
Signing time:             Thu 09 Apr 2026 02:00:17 +0000
ROA not before:           Thu 09 Apr 2026 01:55:17 +0000
ROA not after:            Thu 08 Apr 2027 02:00:17 +0000
asID:                     131506
IP address blocks:        103.156.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 19:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ff:dc:42:f0:fc:d3:27:8d:ab:0b:e1:c7:8e:3b:01:79:3f:e1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
        Validity
            Not Before: Apr  9 01:55:17 2026 GMT
            Not After : Apr  8 02:00:17 2027 GMT
        Subject: CN=742F983A23D5E4CB854A747C572F3EF4D32141AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:fc:23:f8:22:ca:aa:05:dc:19:1b:44:55:
                    43:9d:95:5b:6e:64:d7:1a:68:31:e4:17:45:22:b4:
                    08:b0:11:fe:2a:f6:53:86:bc:8c:50:b4:6b:cb:52:
                    38:44:c9:cf:06:06:e0:ca:7a:aa:4e:4e:be:a4:66:
                    e5:b7:70:d1:70:5b:95:44:78:2a:d0:09:fd:7a:bd:
                    b3:fe:83:bc:34:f3:3d:6b:0f:24:23:14:94:08:e8:
                    3d:8a:13:71:97:d6:5f:e2:8c:98:2a:05:47:ea:4e:
                    ad:ad:2d:74:98:f2:16:29:8f:8d:83:c3:2c:eb:3d:
                    48:98:e3:dc:49:63:36:c8:69:96:2e:6d:22:69:2c:
                    05:df:dc:35:30:a4:83:ac:96:16:4e:bf:44:fb:db:
                    13:36:3d:86:71:12:9b:55:1e:17:3e:54:74:a1:2f:
                    7e:32:62:5a:eb:9a:27:64:da:f1:6f:a3:5b:a2:e9:
                    2a:ce:89:58:e1:cb:39:63:a3:ef:85:54:5f:c9:80:
                    61:cd:04:1f:02:cb:11:ce:35:fd:7e:62:df:73:02:
                    74:79:d4:9f:15:b0:7e:11:60:cf:5f:69:38:13:30:
                    c3:b9:c9:27:3e:96:ec:a5:52:12:dd:57:9f:05:c6:
                    6f:82:c7:ac:d5:ce:7b:cb:d5:b0:37:be:89:93:75:
                    94:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2F:98:3A:23:D5:E4:CB:85:4A:74:7C:57:2F:3E:F4:D3:21:41:AF
            X509v3 Authority Key Identifier:
                keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3138362e302f32342d3234203d3e20313331353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:af:74:2e:b2:28:bc:38:38:36:67:88:12:4b:ec:ec:68:98:
         28:3d:a5:45:79:c9:61:d9:f8:fa:40:89:b7:99:95:67:44:b2:
         d7:bf:0f:f2:6a:70:64:c7:06:67:fa:7d:51:54:09:84:d1:9c:
         e6:00:36:80:3a:5a:2b:ac:dc:b9:53:5b:92:46:92:17:ff:e5:
         f5:51:33:50:6c:54:36:af:94:87:41:ca:17:79:5d:22:82:e1:
         6f:88:97:e9:e8:01:b3:fb:a9:ea:7b:61:95:c0:c6:fc:8d:c5:
         6f:e1:46:21:c0:c5:d2:c5:17:c9:9c:d4:f3:81:bd:0e:5b:7f:
         3f:e1:f7:14:ff:2d:41:9e:70:28:16:7e:e4:14:96:e6:2f:dc:
         88:d7:9e:4d:ce:6d:d8:8c:d1:20:dc:cc:7d:29:98:8e:6f:5c:
         a2:a2:5b:67:46:2d:77:05:78:b2:ba:c4:61:c0:3e:ef:b2:46:
         0a:d5:8a:e6:b9:40:cf:ef:e9:52:12:82:66:f3:52:95:04:18:
         3b:bc:ba:ca:01:2b:65:a6:a3:09:a0:04:56:c9:02:46:e9:01:
         9c:38:7d:20:09:0a:eb:6b:9c:98:38:c0:f0:9e:1f:d5:e1:08:
         19:3a:a1:09:29:35:47:18:5b:32:7b:da:37:26:16:0d:9f:f7:
         0a:0f:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:31 2026 by rpki-client