Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094515575008264194/0/3130332e3133322e32322e302f32332d3233203d3e2034353338.roa
File:                     3130332e3133322e32322e302f32332d3233203d3e2034353338.roa (raw, json)
Hash identifier:          bPfhyE3NurWKuPgCHuUHhPC6wIz7uEMqQqLhKcT37MU=
Subject key identifier:   03:F3:A1:50:84:A1:A7:55:16:5B:3E:97:2E:EB:F8:34:18:29:CB:EB
Certificate issuer:       /CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
Certificate serial:       7A5E5672514E0F6716E2EE4C7A62A6B435C80541
Authority key identifier: F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/3130332e3133322e32322e302f32332d3233203d3e2034353338.roa
Signing time:             Thu 09 Apr 2026 07:05:05 +0000
ROA not before:           Thu 09 Apr 2026 07:00:05 +0000
ROA not after:            Thu 08 Apr 2027 07:05:05 +0000
asID:                     4538
IP address blocks:        103.132.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 02:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5e:56:72:51:4e:0f:67:16:e2:ee:4c:7a:62:a6:b4:35:c8:05:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F360D54AD10E3C89DA06AC0AF4E83E769B23E977
        Validity
            Not Before: Apr  9 07:00:05 2026 GMT
            Not After : Apr  8 07:05:05 2027 GMT
        Subject: CN=03F3A15084A1A755165B3E972EEBF8341829CBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1d:4a:22:57:d5:e1:c5:98:b7:d3:9d:60:f4:
                    f2:30:fd:95:5a:c5:0b:1a:ad:39:d6:ca:6a:61:12:
                    7c:0c:b7:c1:ea:77:4c:b4:59:86:9b:c7:a0:43:f3:
                    6d:d0:db:e1:07:14:6c:aa:c8:33:63:71:46:ac:b7:
                    b9:db:46:60:7c:71:f0:28:0d:cb:78:b5:f1:31:ae:
                    d2:06:39:d8:ef:ec:dc:b2:19:dc:4b:8f:ce:be:15:
                    80:d1:2a:ea:fc:4d:6e:d4:b3:68:f9:bd:5a:81:76:
                    69:94:27:a7:73:4f:e3:7b:a5:57:4f:4b:09:47:8e:
                    cf:dc:b9:dd:11:c6:01:d7:cc:42:6b:5f:36:38:3f:
                    89:48:85:a5:f1:f8:c6:76:fe:fa:d6:7e:fe:88:76:
                    0d:cb:ce:96:e9:f6:49:69:91:f0:e2:2f:06:75:54:
                    47:84:a2:5d:4d:b8:1b:fa:e1:9b:13:c2:b1:3f:0d:
                    11:b3:7a:ff:8d:c9:5c:f1:84:ed:e3:e5:0c:37:97:
                    e7:30:83:2b:72:37:27:af:1d:46:a2:ce:0d:e4:38:
                    5b:a7:dd:24:91:5c:fa:70:17:ee:40:b5:b5:5b:4a:
                    72:6d:7e:e4:90:2c:fe:00:69:1a:7d:aa:b3:f6:83:
                    cc:ed:ae:c4:bf:5d:24:96:cc:ab:6f:f6:67:14:bb:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F3:A1:50:84:A1:A7:55:16:5B:3E:97:2E:EB:F8:34:18:29:CB:EB
            X509v3 Authority Key Identifier:
                keyid:F3:60:D5:4A:D1:0E:3C:89:DA:06:AC:0A:F4:E8:3E:76:9B:23:E9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F360D54AD10E3C89DA06AC0AF4E83E769B23E977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094515575008264194/0/3130332e3133322e32322e302f32332d3233203d3e2034353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:33:ad:f4:f1:83:ab:8f:08:bc:a9:5b:19:61:9b:83:b8:f9:
         0d:14:14:1f:b0:93:89:1c:a3:38:61:47:33:9a:8a:47:a5:c4:
         d9:0e:8a:47:0c:66:81:97:73:ef:2b:04:fa:0f:8f:b3:71:f5:
         92:83:54:71:a2:48:ef:35:8d:92:6a:86:95:78:1f:4e:fe:58:
         5d:76:fc:29:30:3d:77:58:c8:ca:57:e2:d9:34:df:b7:dd:e1:
         0f:d2:0c:aa:aa:ef:dc:1c:42:6e:06:2d:4f:5e:f2:4c:61:88:
         5f:14:3c:6b:08:f8:01:70:b6:ab:a8:b3:e5:d5:5d:b4:d2:65:
         38:69:2a:f2:c2:05:25:57:6d:71:15:4c:a7:9c:1f:6a:fc:b1:
         d7:8b:7a:84:81:83:0f:03:2f:8f:95:67:7e:bb:90:41:6f:31:
         6f:09:19:74:b7:0e:d1:d1:f5:48:15:55:97:0c:6e:9e:ea:7b:
         20:63:4d:dd:2b:89:e1:3e:0c:b9:62:43:35:96:9f:27:17:c7:
         4e:17:39:4c:87:24:a1:2c:02:50:06:3c:0d:8a:f0:03:49:d1:
         83:4f:31:ff:4a:82:ad:fa:3d:2c:c4:e2:e9:3f:15:02:c9:9a:
         3b:b4:96:52:d7:30:6a:7a:81:4c:74:1c:4f:dd:96:c6:2e:80:
         3c:37:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:25 2026 by rpki-client