Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3133392e3231322e302f32332d3233203d3e2034383437.roa
File:                     3130332e3133392e3231322e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier:          e6GCsFVGGlp6eECqnRxZdqJUWd+iVzHNj1jhEWNEqCA=
Subject key identifier:   90:7B:50:77:B1:E7:67:02:21:F1:1F:A2:14:41:E8:17:58:70:8B:C9
Certificate issuer:       /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
Certificate serial:       2FE340598445B14C4E45D3E688E1F76F2F5E89FE
Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3133392e3231322e302f32332d3233203d3e2034383437.roa
Signing time:             Fri 10 Apr 2026 03:50:19 +0000
ROA not before:           Fri 10 Apr 2026 03:45:19 +0000
ROA not after:            Fri 09 Apr 2027 03:50:19 +0000
asID:                     4847
IP address blocks:        103.139.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e3:40:59:84:45:b1:4c:4e:45:d3:e6:88:e1:f7:6f:2f:5e:89:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72
        Validity
            Not Before: Apr 10 03:45:19 2026 GMT
            Not After : Apr  9 03:50:19 2027 GMT
        Subject: CN=907B5077B1E7670221F11FA21441E81758708BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:ad:01:28:bd:6a:74:1c:1f:aa:a2:e5:b4:
                    0f:b0:7b:48:c8:5a:05:0f:2a:05:7e:32:67:79:45:
                    b0:10:52:72:55:1a:52:a0:76:33:10:3b:c1:67:d4:
                    b2:18:c9:9e:1a:c2:9a:4b:19:c9:0d:a9:7c:ab:de:
                    df:66:ce:d1:ed:8f:39:bc:25:83:91:16:a8:a3:1c:
                    0c:6d:f0:42:90:7f:ed:03:e5:1b:98:89:a6:f5:e0:
                    be:3d:ae:9f:a4:8b:60:8d:30:ab:6e:4e:95:01:e0:
                    b4:e2:26:1b:74:da:8b:09:b7:f6:74:f4:66:a7:69:
                    9e:68:17:68:61:76:09:d3:7f:b5:c8:9c:7f:b0:a4:
                    90:ef:4c:fd:3c:ee:98:06:2b:98:c0:a8:81:04:45:
                    dc:f0:b0:2d:83:1d:14:67:e4:ed:2a:ff:30:ff:bd:
                    d8:2d:50:93:55:71:7e:b5:0a:eb:ab:b8:4c:8e:2c:
                    1a:5f:fd:3b:f9:28:f3:3a:ee:28:7e:25:92:b1:c5:
                    2b:fb:c3:90:e9:24:ba:a9:08:c5:c7:e5:39:ee:b6:
                    12:5e:9f:62:a4:8c:9b:bd:c5:26:c0:e8:e7:9a:c5:
                    d6:5c:54:38:6f:07:b1:48:e3:3b:3a:63:7b:e9:a7:
                    c9:8b:43:4f:f9:c9:06:f8:90:31:86:b6:47:bd:86:
                    4f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7B:50:77:B1:E7:67:02:21:F1:1F:A2:14:41:E8:17:58:70:8B:C9
            X509v3 Authority Key Identifier:
                keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/3130332e3133392e3231322e302f32332d3233203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:22:65:36:76:7c:84:a1:ed:e6:bc:bb:57:63:c6:39:15:05:
         1f:0b:ec:a4:95:99:d6:b5:1c:a1:ba:47:5d:9d:9f:3b:5e:ca:
         6e:2c:6f:e0:bd:66:57:3a:0d:fc:e9:6f:f2:c2:ad:7f:09:67:
         a1:e2:ba:f0:c4:7a:c0:25:7c:9e:a4:dc:25:52:d7:cf:f5:b6:
         d8:5f:d4:aa:93:dd:51:a4:da:b6:73:db:33:c0:78:7d:db:25:
         0d:a9:82:6f:d6:d0:1e:26:12:37:cc:c6:ef:2e:9f:49:84:f9:
         b4:ca:e0:a1:b2:a1:6c:91:20:b0:53:80:81:35:60:30:3d:05:
         d3:97:9c:a1:d9:b0:16:cd:d8:7a:de:da:9e:20:4c:98:9e:4a:
         7a:ad:21:2b:49:64:38:f6:b6:6c:28:d7:cd:13:56:c9:ce:1e:
         e8:fe:25:c9:a0:76:e8:1e:d4:a2:da:4c:2f:0c:0b:ed:3d:00:
         0e:23:e5:02:bc:51:fa:06:ce:ce:21:e4:48:7d:c0:61:14:05:
         07:f0:a5:17:5f:bd:31:b1:c1:9f:b0:ae:6e:b8:37:24:c8:d9:
         59:9e:03:e0:2e:a4:c3:ce:20:d0:af:1c:1c:58:ac:19:6e:fe:
         e8:49:e1:86:97:7e:98:a7:f5:84:c9:e4:a6:37:2f:aa:3f:9f:
         ca:43:bb:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:21 2026 by rpki-client