Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3130332e3136332e34362e302f32332d3234203d3e203538353139.roa
File:                     3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (raw, json)
Hash identifier:          tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=
Subject key identifier:   8D:DC:1E:F6:27:56:F9:19:1E:C9:8C:88:68:7C:0F:52:10:2D:C7:D2
Certificate issuer:       /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial:       1F6F4A82D518460D89FE3B258CB0D6E7309E52AB
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3130332e3136332e34362e302f32332d3234203d3e203538353139.roa
Signing time:             Thu 09 Apr 2026 05:09:21 +0000
ROA not before:           Thu 09 Apr 2026 05:04:21 +0000
ROA not after:            Thu 08 Apr 2027 05:09:21 +0000
asID:                     58519
IP address blocks:        103.163.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 22:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6f:4a:82:d5:18:46:0d:89:fe:3b:25:8c:b0:d6:e7:30:9e:52:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
        Validity
            Not Before: Apr  9 05:04:21 2026 GMT
            Not After : Apr  8 05:09:21 2027 GMT
        Subject: CN=8DDC1EF62756F9191EC98C88687C0F52102DC7D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:75:16:99:f8:2e:47:44:0b:64:81:23:70:
                    dc:4f:b1:30:e0:85:f5:81:d6:2c:6b:eb:0e:2b:a1:
                    b5:e9:b3:b7:68:74:e2:94:9e:67:ca:48:71:af:e5:
                    5d:69:a6:69:0d:e7:8b:34:36:9c:d2:1f:5b:c6:f9:
                    26:49:12:a7:6b:8f:8b:73:1e:c4:d1:7d:ec:23:30:
                    d4:38:5a:ca:3a:f9:7a:bf:ea:a4:48:5d:17:6e:12:
                    cd:32:92:eb:8c:e9:66:d5:0f:d8:82:15:db:66:99:
                    e7:30:61:b4:07:41:8b:8d:ba:e6:96:72:e7:de:ee:
                    1b:f7:9d:b9:f3:2e:6c:5c:27:ea:34:ab:4c:30:b9:
                    f2:9e:03:2c:42:e5:5d:50:26:f7:b7:c1:02:a9:e8:
                    ce:d6:05:fd:ee:7a:7c:6f:b1:50:fa:0c:80:17:58:
                    03:b0:ab:8b:23:e2:f0:21:bc:0a:4c:4c:00:50:fc:
                    6c:a6:fb:1c:20:f1:aa:f3:af:63:14:bd:29:b4:cd:
                    98:5d:8f:12:cb:33:39:ba:3f:a3:3d:35:0d:41:99:
                    e3:60:cc:8e:0b:56:54:22:99:82:d1:f2:c4:38:04:
                    a1:4d:42:31:2d:9c:fd:1f:55:3b:df:d9:23:aa:34:
                    e8:e6:e3:6f:2b:8c:d4:1f:e3:17:55:a3:f2:5e:28:
                    f3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DC:1E:F6:27:56:F9:19:1E:C9:8C:88:68:7C:0F:52:10:2D:C7:D2
            X509v3 Authority Key Identifier:
                keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3130332e3136332e34362e302f32332d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:f7:f8:f5:29:4f:0d:25:1f:d4:91:79:0b:a4:01:88:85:1f:
         2f:df:1d:36:fe:42:e5:e0:73:84:fa:31:7d:7b:a5:ea:54:17:
         0e:87:55:77:68:2e:5f:0b:24:7a:20:02:fc:c6:b1:17:eb:31:
         9b:5c:d0:d8:49:94:cf:2c:63:92:6b:a8:c8:55:2f:c8:0e:06:
         fc:d0:de:63:16:95:ea:1e:0c:42:e9:60:c4:2b:98:e7:c6:27:
         ba:97:48:bb:07:55:9d:0f:04:79:91:d9:1d:00:40:da:e4:40:
         13:38:b9:5f:8a:26:61:b9:46:09:47:56:b1:7e:8e:22:07:8f:
         29:5c:0d:87:8b:a4:75:30:9d:68:c1:84:52:18:fa:23:22:40:
         d7:94:a5:dc:a1:47:8c:65:1c:98:7f:26:6f:31:0c:fa:03:74:
         d8:a6:89:71:ef:22:ef:31:9d:58:11:c3:5a:5e:97:44:78:c8:
         3f:85:2d:3e:d7:7a:7d:32:de:e3:09:f3:e0:04:d8:37:9e:47:
         d4:06:65:22:54:65:82:ee:af:29:8f:d3:32:a1:1c:1e:80:ff:
         90:61:2c:3f:66:c9:fb:4e:fe:b0:b8:fd:12:6c:89:13:95:d6:
         97:c3:59:fa:22:b5:98:30:97:28:69:70:73:ee:6e:f9:a0:7f:
         a4:c9:03:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:14 2026 by rpki-client