Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa
File:                     3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa (raw, json)
Hash identifier:          lsrzndSzvKrAzDedBm5JI0kwRdMSHBdacpcdFEbqeWw=
Subject key identifier:   D7:CC:8F:4A:0E:0C:81:D8:8F:DB:2D:60:B9:01:6D:33:0B:18:32:A1
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       6B32DFCD0AF1B2EB162DB40DB9CAF178C50CCE25
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa
Signing time:             Fri 10 Apr 2026 02:21:09 +0000
ROA not before:           Fri 10 Apr 2026 02:16:09 +0000
ROA not after:            Fri 09 Apr 2027 02:21:09 +0000
asID:                     135061
IP address blocks:        103.95.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:32:df:cd:0a:f1:b2:eb:16:2d:b4:0d:b9:ca:f1:78:c5:0c:ce:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Apr 10 02:16:09 2026 GMT
            Not After : Apr  9 02:21:09 2027 GMT
        Subject: CN=D7CC8F4A0E0C81D88FDB2D60B9016D330B1832A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:f7:77:0a:8a:c8:8a:90:1a:97:1a:1d:ed:
                    02:62:16:26:c0:f7:84:fe:c2:ed:a6:7e:e6:31:83:
                    e5:60:78:8b:6f:6f:45:9e:98:16:e6:1c:7c:04:e1:
                    1a:3b:62:19:63:b8:da:6e:95:ea:1c:6c:7d:6a:bf:
                    f0:ad:2d:06:4a:75:30:8e:f8:dc:13:4b:1d:d1:b4:
                    49:5c:70:13:51:3c:53:0b:c7:27:a4:e9:e8:5e:40:
                    fd:d8:06:f5:e2:e8:08:df:72:ed:07:48:56:47:46:
                    5b:03:15:76:4b:fc:62:f1:c3:0d:8f:c9:a9:2d:f8:
                    1d:f5:6b:03:15:14:58:df:e7:bf:ed:5d:ac:ed:cc:
                    25:f6:cd:d7:9e:c1:a6:aa:64:2d:e4:c3:a2:86:32:
                    bb:ec:b8:e1:62:57:6d:e3:5f:3f:a1:7b:a3:ea:b9:
                    ee:2c:fc:18:d4:0e:44:e0:3c:d9:b4:1a:f9:f6:f4:
                    1e:d9:82:30:97:6b:ef:46:72:26:44:4d:03:1f:e5:
                    fc:11:0b:7c:13:fe:36:c1:48:a6:d2:f9:86:6a:4b:
                    1c:01:3f:f0:3a:ea:23:2c:3e:1e:1b:de:ca:e5:37:
                    f0:35:f5:09:73:b0:da:cd:8b:a6:7e:bd:47:51:b7:
                    29:d7:51:f9:78:65:18:a1:41:17:b8:14:d9:b7:47:
                    bd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CC:8F:4A:0E:0C:81:D8:8F:DB:2D:60:B9:01:6D:33:0B:18:32:A1
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235342e302f32342d3234203d3e20313335303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:cd:66:5f:69:12:ed:b3:fa:7e:32:79:a1:7d:37:d4:aa:c5:
         7f:0e:de:a1:98:ea:09:b6:79:ba:ee:5b:87:b8:4f:2c:00:33:
         d8:70:f5:63:f9:62:67:55:da:b8:19:d8:62:ec:4d:67:fe:1f:
         4a:64:d7:c8:ac:f1:91:df:01:6f:e5:4c:0e:16:1a:ec:75:3c:
         9d:1d:2e:a8:70:60:9a:c3:f8:e0:60:95:eb:51:c6:cd:d2:4d:
         73:3d:55:c2:75:10:85:12:3a:cb:e6:fc:06:e6:e5:f0:0a:5f:
         b5:d5:d9:7b:4b:23:69:d2:59:69:48:06:b2:3a:86:76:27:fa:
         2c:2b:5a:f7:74:d5:a5:a1:b1:b7:be:3a:3b:37:48:ae:72:54:
         09:1e:82:73:c8:cf:1c:32:64:f0:d1:69:57:92:1f:f5:21:ed:
         a7:e8:ff:8c:99:25:22:84:f3:d4:4a:c2:6c:23:b6:34:ec:f3:
         8c:89:17:ea:86:64:46:e5:78:bb:83:65:37:d0:27:0f:30:30:
         35:99:0a:8b:06:9d:2b:93:bc:ff:93:21:15:64:40:4a:07:4d:
         45:01:c0:67:f9:d3:9f:8d:a0:4e:4a:c5:b3:20:65:bf:7c:32:
         8e:e5:78:b6:5c:30:45:45:c7:28:c5:0a:41:8f:74:04:7f:b6:
         11:4e:cb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:42 2026 by rpki-client