Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa
File:                     3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (raw, json)
Hash identifier:          hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=
Subject key identifier:   48:53:3F:53:D0:E1:F1:D9:4E:DB:FE:E8:03:80:89:0F:EF:B7:6C:F7
Certificate issuer:       /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0
Certificate serial:       6AF13793FEF8F03081BA0FA93ED701E4C34325A2
Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa
Signing time:             Thu 09 Apr 2026 07:48:20 +0000
ROA not before:           Thu 09 Apr 2026 07:43:20 +0000
ROA not after:            Thu 08 Apr 2027 07:48:20 +0000
asID:                     132536
IP address blocks:        103.116.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f1:37:93:fe:f8:f0:30:81:ba:0f:a9:3e:d7:01:e4:c3:43:25:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0
        Validity
            Not Before: Apr  9 07:43:20 2026 GMT
            Not After : Apr  8 07:48:20 2027 GMT
        Subject: CN=48533F53D0E1F1D94EDBFEE80380890FEFB76CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:92:0c:26:35:68:79:2a:2b:3c:a3:66:d2:44:
                    7e:06:66:6d:74:f7:dc:a6:35:62:c8:a6:f9:1e:26:
                    8e:4b:e6:6f:bd:46:4e:99:98:10:23:0b:d6:8b:a9:
                    88:97:78:51:57:38:dd:8b:bd:93:98:9f:bb:00:32:
                    18:66:da:6b:a8:4f:75:3c:14:24:9f:cd:4c:98:55:
                    a3:7c:eb:c7:cf:e6:84:55:8e:f7:08:0f:3d:1f:e8:
                    f9:69:6e:8a:48:b2:77:04:3f:74:6d:37:f8:e4:c8:
                    cb:e4:cc:f1:07:11:59:8e:c5:9e:b8:b1:a9:a0:a4:
                    74:5f:ee:07:58:b7:6e:4b:69:8d:b2:8c:c1:74:d4:
                    a6:4e:87:23:ac:19:9a:35:89:06:8c:33:0a:5c:46:
                    4e:a4:1a:15:72:94:71:30:a0:3b:0b:b5:98:1f:77:
                    8e:07:c1:ad:51:e6:d4:91:a3:f8:7d:c1:0f:f3:47:
                    0d:a3:72:60:c0:32:44:79:4c:88:02:9e:3d:f9:08:
                    af:b5:39:a3:29:0b:87:37:9c:82:50:e4:bb:47:a9:
                    a8:e9:94:96:15:78:60:89:7f:3c:8b:e5:0d:c0:4f:
                    06:89:35:1c:3e:f0:00:fc:21:77:87:48:f0:75:6c:
                    ce:d0:14:14:07:0a:3a:57:15:ab:92:69:42:b2:9d:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:53:3F:53:D0:E1:F1:D9:4E:DB:FE:E8:03:80:89:0F:EF:B7:6C:F7
            X509v3 Authority Key Identifier:
                keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:3c:60:08:a7:90:1f:42:19:8f:ce:4d:4b:80:31:2c:bf:3d:
         78:b5:d5:d1:da:3c:d3:dc:0f:ad:e3:df:76:10:fc:cf:13:6a:
         e4:39:73:1a:89:81:45:05:a5:ed:f2:1c:c5:4d:ee:85:d7:ee:
         7a:ad:25:c6:c8:d9:bb:51:99:c7:20:7e:7f:54:7e:64:ac:14:
         ee:7a:95:24:1f:c3:d7:32:ba:fc:ff:33:42:8b:86:36:4c:74:
         74:dc:f1:1d:68:9c:da:44:0c:70:6e:43:9c:62:10:cf:58:78:
         68:e8:21:98:bb:0f:8d:14:0e:84:ee:e8:fa:75:2b:cd:63:4e:
         59:e4:a3:c8:4c:f0:3c:8a:09:ea:9b:57:55:65:73:c0:0d:6e:
         8f:e3:7e:f8:6d:3a:bc:e0:08:09:e3:84:89:93:d5:70:94:6b:
         9d:d1:e4:2b:1a:12:67:c5:cc:81:78:47:8b:31:6c:80:ce:82:
         71:f9:ca:b1:b3:80:d7:64:ac:bf:c5:db:47:e5:f0:6c:3a:5b:
         3b:9f:85:b7:a0:ee:8a:7c:56:17:c6:d7:c1:c9:04:61:84:74:
         ce:13:ca:36:8d:b4:dd:11:0e:88:5e:e2:1f:87:4f:d4:cb:10:
         80:df:46:87:1c:0b:09:d2:8d:61:96:8d:9b:04:cd:00:aa:87:
         7b:6a:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:11 2026 by rpki-client