Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3136382e302f32332d3233203d3e20313331353036.roa
File:                     3130332e34342e3136382e302f32332d3233203d3e20313331353036.roa (raw, json)
Hash identifier:          NGHyyVe1ZgVxAGSZW6VmuWYHgHfAbSJonRRmVYLMOXs=
Subject key identifier:   57:5A:C9:55:B6:7C:A2:3E:A9:0F:EB:BB:0F:99:D1:55:75:CB:B0:4B
Certificate issuer:       /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial:       721AE16D4C146290C919FD9365B81962E3F0B878
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3136382e302f32332d3233203d3e20313331353036.roa
Signing time:             Thu 09 Apr 2026 02:00:18 +0000
ROA not before:           Thu 09 Apr 2026 01:55:18 +0000
ROA not after:            Thu 08 Apr 2027 02:00:18 +0000
asID:                     131506
IP address blocks:        103.44.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 19:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1a:e1:6d:4c:14:62:90:c9:19:fd:93:65:b8:19:62:e3:f0:b8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
        Validity
            Not Before: Apr  9 01:55:18 2026 GMT
            Not After : Apr  8 02:00:18 2027 GMT
        Subject: CN=575AC955B67CA23EA90FEBBB0F99D15575CBB04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:80:6e:f7:72:f7:35:17:9a:c1:41:e4:a1:
                    b6:13:99:a6:ec:ea:e7:32:69:73:5e:3e:25:23:15:
                    5d:2f:6c:39:c2:33:51:4a:1e:6d:0d:25:02:8c:45:
                    f7:7b:be:f1:7a:03:a2:bc:99:bd:49:3f:ab:89:a2:
                    9b:dc:af:ce:04:02:32:7d:12:7a:79:57:80:1c:f5:
                    85:e5:f2:92:96:99:17:99:1b:69:dd:c5:09:e6:58:
                    d5:35:6c:99:cd:b5:4a:0e:34:19:1c:b1:28:58:e4:
                    64:62:61:9a:91:85:ad:46:7f:2a:ba:fb:00:ee:83:
                    46:c5:e3:1e:6d:b5:ea:ef:53:03:bc:e9:ec:21:a5:
                    85:4a:d0:5d:fa:32:8a:52:70:1e:e6:ba:4d:01:07:
                    ae:b7:75:c1:61:3f:73:a3:46:20:45:78:97:1f:f9:
                    d8:34:24:4d:83:43:d8:46:aa:a1:ee:32:2e:66:0d:
                    d3:ef:dd:8a:f3:12:2e:34:c6:d4:4e:16:11:78:22:
                    2d:39:c5:27:0d:99:f1:72:11:00:00:53:ab:40:13:
                    c5:e8:24:dd:98:19:d8:e5:03:81:5d:17:4d:8e:66:
                    3b:fb:9e:a2:a4:c4:f4:9c:9a:f7:79:7b:c4:fd:7d:
                    95:f6:50:d0:93:6d:37:ca:77:18:b2:84:6c:d9:b2:
                    65:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5A:C9:55:B6:7C:A2:3E:A9:0F:EB:BB:0F:99:D1:55:75:CB:B0:4B
            X509v3 Authority Key Identifier:
                keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e34342e3136382e302f32332d3233203d3e20313331353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:61:a9:10:99:ee:be:bf:b7:55:ae:fc:ef:3b:a6:07:8e:1e:
         8b:d3:eb:78:26:4c:24:d8:d3:8c:12:c4:f2:a9:b9:df:ac:5a:
         2b:f1:74:29:bc:35:52:98:fa:0b:37:d2:6d:13:d6:4e:c9:d6:
         66:94:8c:86:30:c5:49:8e:85:6d:aa:81:86:d2:c0:71:15:df:
         9e:07:76:31:37:d8:c4:1a:a6:54:7d:8b:31:70:1a:5e:6b:bf:
         3e:2d:0b:36:6d:eb:3b:12:c0:89:27:e4:97:5a:59:f1:ef:f3:
         b5:0e:74:9a:b3:d8:f5:2f:52:ca:65:01:07:df:75:af:ac:a4:
         d7:ea:d2:a1:a6:35:3d:c6:2e:45:23:aa:4c:42:ac:5f:94:c9:
         6b:17:cd:4a:31:50:bf:dc:1a:39:9d:6c:59:c9:a6:df:b1:cf:
         9b:39:f3:8a:93:fe:c0:52:ec:15:f8:e8:e2:63:48:40:11:1d:
         04:ed:5a:83:b9:b0:4d:98:37:37:4b:1a:69:45:f0:40:10:20:
         e9:0f:54:fe:f0:a1:c4:a3:41:9c:cf:94:90:11:a4:31:63:fb:
         e6:2b:55:15:21:a5:8e:80:a5:57:c5:ba:e8:83:ad:0a:f2:4d:
         f0:e3:8a:9a:33:82:93:d7:f2:92:3e:25:a2:27:e5:d5:c1:0b:
         59:27:6c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:13 2026 by rpki-client