Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32342d3234203d3e203536303430.roa
File:                     3130332e3231392e39322e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          3gVTJvqFMBZ26w23qfq9KpjLARbqr+vZzvoWgsVPAOA=
Subject key identifier:   1F:52:D1:B0:AD:43:B1:9B:C2:59:07:B5:0F:B8:CB:1B:00:0F:B1:B4
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       75A66F88D8E4CDA08EC1A34D54141B1A0793B104
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32342d3234203d3e203536303430.roa
Signing time:             Fri 10 Apr 2026 02:22:04 +0000
ROA not before:           Fri 10 Apr 2026 02:17:04 +0000
ROA not after:            Fri 09 Apr 2027 02:22:04 +0000
asID:                     56040
IP address blocks:        103.219.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a6:6f:88:d8:e4:cd:a0:8e:c1:a3:4d:54:14:1b:1a:07:93:b1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Apr 10 02:17:04 2026 GMT
            Not After : Apr  9 02:22:04 2027 GMT
        Subject: CN=1F52D1B0AD43B19BC25907B50FB8CB1B000FB1B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:b6:24:e9:fb:cf:c1:7a:08:a7:fd:0f:ad:
                    4c:38:5b:b7:d2:82:76:87:1d:2e:e1:91:74:44:fd:
                    35:63:d7:39:84:68:2b:99:89:a9:63:44:06:c4:40:
                    2b:65:3a:db:a3:ff:4e:3e:10:55:45:40:f5:84:18:
                    37:71:98:09:3c:a8:0a:e4:8f:1a:bc:02:e8:b1:e1:
                    df:b0:ef:8f:c5:e2:17:13:9e:35:15:72:59:f0:3c:
                    12:a0:2e:21:66:82:22:71:18:27:07:2b:ec:2f:d9:
                    c3:e8:a3:98:24:ea:5d:44:82:71:64:65:8b:68:96:
                    b3:5c:9c:4a:b5:81:cc:8e:92:de:25:dd:dd:0b:b4:
                    84:21:cb:12:a0:99:71:4f:11:68:5c:c0:01:b5:00:
                    36:56:f8:c1:46:47:16:1a:de:cf:9d:2c:f0:e9:f6:
                    9d:7d:a0:26:6a:fc:67:a3:b5:c3:9c:37:17:e5:13:
                    d8:7a:d6:c4:c9:f1:2c:34:51:41:79:0c:b2:2b:0e:
                    81:30:46:09:76:3d:c8:ea:c2:09:73:a8:88:6e:c9:
                    28:f6:a7:e1:d8:56:25:46:dd:1a:09:f4:13:f0:f5:
                    36:c0:23:97:ad:94:c7:6b:cf:52:7a:9a:0d:91:59:
                    7c:52:5f:8b:72:42:34:f3:92:f8:45:b7:d5:fa:32:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:52:D1:B0:AD:43:B1:9B:C2:59:07:B5:0F:B8:CB:1B:00:0F:B1:B4
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:c8:14:9f:dd:73:f1:56:c5:48:3f:4e:2d:8d:9b:05:4a:bd:
         2d:fc:e2:2d:6f:a2:4a:b8:96:d6:25:ad:59:f8:a0:9e:93:1d:
         e3:14:99:1a:db:42:d3:b5:6f:6e:28:f7:42:90:58:28:c2:53:
         45:d2:1d:fc:98:65:3d:75:e5:b4:d2:04:31:52:38:b6:cf:fa:
         da:ab:a3:37:6c:c1:bd:0e:98:d7:3a:ee:29:b8:78:cb:cd:e2:
         1e:13:af:ac:08:8b:38:39:0e:9e:3f:a0:59:5f:25:fd:9a:48:
         69:38:cc:da:23:14:60:f3:ab:57:51:d0:72:ec:0c:bb:5c:44:
         ed:bf:92:03:45:64:ae:08:dd:18:4c:08:16:63:57:3a:12:14:
         d3:22:bc:8d:de:8e:e7:50:19:dd:af:17:4e:d7:23:55:53:1c:
         78:fe:f3:62:41:a0:9e:74:d8:88:8e:88:a0:19:06:8b:7f:fc:
         58:c5:26:5a:ba:fe:63:99:f8:fb:35:80:6f:65:26:9a:96:41:
         1e:0c:e6:ce:5a:ba:6f:12:9c:c8:28:19:9b:cd:95:9f:be:57:
         02:f3:08:3f:b2:39:bc:8b:cc:4c:fa:a5:ac:4a:f3:b5:63:f3:
         ad:6b:87:fb:1d:59:66:52:3e:c7:42:1c:01:81:a5:74:a9:12:
         d4:5d:fa:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:34 2026 by rpki-client