Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/3130332e3137302e342e302f32332d3233203d3e2034383136.roa
File:                     3130332e3137302e342e302f32332d3233203d3e2034383136.roa (raw, json)
Hash identifier:          YfS7Kt8clW/eJGF52X+YXAfT1z1Tx1XMXPtb2Qa9vKU=
Subject key identifier:   3B:05:5D:0E:35:87:27:61:78:D7:BA:39:97:CC:B0:AD:81:0B:45:6D
Certificate issuer:       /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC
Certificate serial:       61B93DACFF839CB702FDEF617EE2D6330800E30A
Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/3130332e3137302e342e302f32332d3233203d3e2034383136.roa
Signing time:             Thu 28 May 2026 07:08:05 +0000
ROA not before:           Thu 28 May 2026 07:03:05 +0000
ROA not after:            Thu 27 May 2027 07:08:05 +0000
asID:                     4816
IP address blocks:        103.170.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b9:3d:ac:ff:83:9c:b7:02:fd:ef:61:7e:e2:d6:33:08:00:e3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC
        Validity
            Not Before: May 28 07:03:05 2026 GMT
            Not After : May 27 07:08:05 2027 GMT
        Subject: CN=3B055D0E3587276178D7BA3997CCB0AD810B456D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b8:ee:a0:c0:94:db:12:96:2c:1c:c3:c8:ef:
                    db:90:2f:ad:a1:47:88:66:0d:10:11:84:3f:11:a1:
                    f9:3e:13:b0:c6:4d:ad:23:32:c0:f4:52:1a:10:3e:
                    c7:e8:36:80:f9:57:97:71:b0:70:da:3d:b0:88:a4:
                    cb:39:ee:4e:67:4e:f7:32:9b:c4:16:e9:5f:17:a9:
                    7a:f1:7f:1c:1f:33:68:f9:2e:57:04:4f:93:90:80:
                    99:72:0c:c6:23:e7:b9:09:47:ee:d0:75:e1:f1:30:
                    4b:80:79:16:d0:a2:e6:da:f6:ee:97:f0:6d:74:5f:
                    fb:22:07:fe:8e:3d:75:d3:13:bb:0b:b9:c6:c5:c6:
                    d9:e0:74:ce:9b:0b:88:05:19:e4:29:c4:dd:fb:6b:
                    ab:02:71:3a:37:a5:41:82:f8:46:1f:03:75:23:fc:
                    56:80:ea:e0:98:d5:8f:77:77:9d:f7:7c:66:85:8c:
                    4a:32:36:69:0e:47:63:b4:cc:58:d3:2a:9c:a2:a3:
                    23:af:72:25:61:a8:f9:79:2a:e0:1c:24:07:e6:6c:
                    b5:c6:52:75:2e:8b:e0:ab:0f:08:c5:73:e5:b6:85:
                    44:7b:89:b8:f6:ec:6e:cb:66:c9:88:d3:a5:f6:0e:
                    a2:3f:96:5f:90:7b:75:5e:da:43:65:b3:83:eb:a3:
                    32:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:05:5D:0E:35:87:27:61:78:D7:BA:39:97:CC:B0:AD:81:0B:45:6D
            X509v3 Authority Key Identifier:
                keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/3130332e3137302e342e302f32332d3233203d3e2034383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:db:9c:8d:78:7e:df:ef:59:fe:e6:f3:07:00:9d:0f:d2:95:
         5b:e3:a3:ab:91:50:ed:36:02:e9:52:8c:22:01:f1:9b:30:e2:
         88:54:c8:e1:74:b9:03:44:b2:04:8f:68:5c:02:8d:40:73:39:
         4a:e2:39:e3:c4:f8:b8:1b:db:e5:bb:58:53:99:db:69:62:b4:
         d1:77:aa:fe:aa:ac:2b:20:41:f7:f0:d5:e4:ad:43:76:21:32:
         24:15:b6:50:a0:62:00:24:67:6f:6d:f2:f6:b9:cf:72:b1:31:
         3c:cd:53:48:bc:f2:56:d6:d2:b8:be:ce:d9:3c:3a:f3:16:21:
         9e:33:98:78:1d:8c:83:98:bf:6d:6e:12:6e:b5:17:5c:18:7f:
         9f:09:a4:00:be:e3:6b:6e:e2:9b:8e:13:f6:60:51:6d:31:6c:
         5f:da:f7:d6:55:e0:74:df:c0:0a:30:f8:46:b8:47:38:35:c4:
         94:49:0d:82:26:cd:84:6e:9c:62:e2:d7:e2:33:e3:45:f1:c9:
         79:4e:1d:c5:25:ab:cc:58:78:72:60:a3:53:6e:3e:4e:9b:65:
         51:c3:bb:b1:07:0c:ae:69:94:c6:5c:b3:6e:eb:43:4b:09:cd:
         ca:c0:24:6c:1a:f8:20:3c:05:88:84:39:6c:06:e5:20:90:d7:
         bf:99:20:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:33 2026 by rpki-client