Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3130332e33362e3232302e302f32322d3234203d3e203538353139.roa
File:                     3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (raw, json)
Hash identifier:          cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=
Subject key identifier:   B9:3E:1D:D8:D2:20:01:9B:E4:43:8D:8E:76:6F:67:43:49:6F:DD:C5
Certificate issuer:       /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
Certificate serial:       31D96D0615688DBF34999C546725FB0E077C0472
Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3130332e33362e3232302e302f32322d3234203d3e203538353139.roa
Signing time:             Thu 09 Apr 2026 05:09:20 +0000
ROA not before:           Thu 09 Apr 2026 05:04:20 +0000
ROA not after:            Thu 08 Apr 2027 05:09:20 +0000
asID:                     58519
IP address blocks:        103.36.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 22:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d9:6d:06:15:68:8d:bf:34:99:9c:54:67:25:fb:0e:07:7c:04:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9
        Validity
            Not Before: Apr  9 05:04:20 2026 GMT
            Not After : Apr  8 05:09:20 2027 GMT
        Subject: CN=B93E1DD8D220019BE4438D8E766F6743496FDDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:fa:c7:bb:2f:70:58:47:0d:db:18:4f:10:
                    7d:81:75:53:cc:f6:d7:3f:33:eb:65:c5:ad:1d:70:
                    ac:e7:c3:d9:75:4d:86:1d:b8:34:21:89:c2:a8:9e:
                    f9:48:25:83:3e:52:57:e2:57:17:df:c4:65:3d:8b:
                    75:ef:58:36:cb:09:e8:4c:74:8a:75:48:86:a4:17:
                    83:21:2e:63:ec:b3:0c:64:a9:55:61:4b:1e:7e:aa:
                    03:bf:65:75:63:4e:40:94:4b:52:92:02:fd:82:68:
                    8e:b4:0e:f9:f7:36:dc:52:b0:5b:cf:4e:bc:b2:3f:
                    be:ba:a8:ac:e4:65:7a:da:6b:f3:d6:7e:e0:13:b9:
                    7b:cc:30:07:56:c5:52:bc:e2:18:af:11:19:44:9e:
                    97:16:b2:68:40:8f:27:42:cd:81:71:4c:74:40:2c:
                    1e:ec:26:86:f2:d3:02:9b:01:58:8d:cc:5a:7c:0e:
                    7c:91:fc:a3:22:db:1d:4d:8c:71:4f:ba:9f:ec:21:
                    0b:78:6b:7b:83:fa:72:0b:b9:7a:5f:42:7a:6a:37:
                    eb:49:ed:64:34:6c:e8:20:2c:a5:84:ad:ba:6c:a6:
                    68:c4:a6:30:f8:7f:6f:96:3f:d3:16:8c:44:f9:2a:
                    1e:12:5c:95:e3:3b:73:30:42:e5:dd:70:38:bf:04:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3E:1D:D8:D2:20:01:9B:E4:43:8D:8E:76:6F:67:43:49:6F:DD:C5
            X509v3 Authority Key Identifier:
                keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/3130332e33362e3232302e302f32322d3234203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:db:01:19:3e:86:cb:52:9b:4b:e3:85:59:c4:8a:b7:b6:c4:
         73:05:7c:fd:95:53:33:9b:8a:78:55:cd:31:02:04:73:09:80:
         2e:ea:15:51:45:e4:5c:9f:0b:b6:7d:1c:98:a3:e9:8b:59:d0:
         fc:ca:0f:fb:94:7b:c8:00:ed:a7:5a:e8:b9:af:a6:26:f5:10:
         51:53:28:d0:f5:61:80:c4:ac:4c:34:ed:7c:1d:cc:33:a0:3b:
         b7:c4:45:c1:4b:47:11:8f:f1:02:eb:2f:fe:d0:3c:59:ae:4c:
         79:f2:85:23:59:b5:0c:45:08:e8:80:aa:f2:4e:80:35:4f:4b:
         24:6b:06:5e:57:4d:ca:ed:b7:9a:2d:09:01:a7:d7:97:55:d0:
         82:11:bf:e4:8a:e1:8c:a5:a3:5a:bb:77:3d:b6:18:a8:2f:25:
         68:34:0d:44:cb:ed:d9:3c:b8:94:b4:d8:9b:b2:37:5a:d3:bc:
         01:a7:7a:08:d8:18:bd:12:0f:8e:9c:9f:2d:8e:df:b5:04:97:
         91:45:53:ce:ab:d5:dd:9f:9f:17:92:f7:4a:cb:a4:94:00:85:
         59:81:a1:79:24:87:6a:12:55:08:d0:78:5e:4e:5f:48:20:ea:
         ef:e7:7c:4f:f9:21:03:22:c0:95:cb:98:1a:97:a8:36:75:cf:
         7f:ba:c1:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:30 2026 by rpki-client