Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa
File:                     3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (raw, json)
Hash identifier:          WGwlggEA/VToCSJYpNCYp9yhY8Qy1CeB0bd66AUxvDk=
Subject key identifier:   39:20:CB:5D:7A:5C:A5:E7:6B:45:A8:2C:C1:E9:EF:97:CB:76:61:46
Certificate issuer:       /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Certificate serial:       0A8AB106FB4100027C1A710E6AA669233094AD23
Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa
Signing time:             Fri 10 Apr 2026 05:25:53 +0000
ROA not before:           Fri 10 Apr 2026 05:20:53 +0000
ROA not after:            Fri 09 Apr 2027 05:25:53 +0000
asID:                     38019
IP address blocks:        103.110.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8a:b1:06:fb:41:00:02:7c:1a:71:0e:6a:a6:69:23:30:94:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
        Validity
            Not Before: Apr 10 05:20:53 2026 GMT
            Not After : Apr  9 05:25:53 2027 GMT
        Subject: CN=3920CB5D7A5CA5E76B45A82CC1E9EF97CB766146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:04:16:3c:5c:e1:21:bb:05:55:06:05:76:
                    84:7c:40:fc:6e:02:be:11:eb:f2:b8:a6:46:a6:f5:
                    2c:b0:e8:1d:01:ad:d5:b7:1a:d7:c7:cc:3d:f3:27:
                    fa:22:55:5d:50:a1:b1:19:14:1f:40:be:1e:be:1d:
                    3b:84:6c:f0:45:01:0d:83:88:47:fe:18:b4:aa:0e:
                    ec:e4:b8:a3:8c:59:d9:ed:9e:ca:ac:59:fb:54:1b:
                    2e:9b:0e:6e:1b:c4:75:c2:35:1a:37:2f:da:98:36:
                    a7:c8:32:11:c8:07:8b:cd:78:95:f1:a7:80:da:91:
                    c4:c1:73:56:6d:1b:f3:05:f3:af:72:1e:59:f9:fd:
                    b7:06:97:4b:dd:89:a5:0f:17:97:f9:0f:b0:1f:a2:
                    aa:a1:c6:44:65:18:80:d9:2d:0c:9e:c0:85:c5:92:
                    b2:9e:9f:e9:61:0b:82:4a:1c:65:b7:5b:ca:bc:96:
                    e6:b3:4e:0c:95:19:d9:0c:a9:7d:d8:37:f9:71:79:
                    cd:9d:5c:c7:3c:e1:9a:d7:fe:6a:c8:67:ce:65:45:
                    6d:98:0a:bf:78:21:04:3e:45:5a:44:6d:ff:f0:43:
                    71:ae:cc:54:6a:55:e1:b9:96:55:87:f2:93:87:3c:
                    5d:e2:a8:60:86:64:5f:27:9d:09:dc:67:e2:df:00:
                    e4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:20:CB:5D:7A:5C:A5:E7:6B:45:A8:2C:C1:E9:EF:97:CB:76:61:46
            X509v3 Authority Key Identifier:
                keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:97:e9:c5:28:3b:7c:68:37:ca:c8:04:f9:78:fa:eb:b3:d0:
         24:ff:22:85:55:bb:3d:21:c9:80:ff:55:a8:bf:fc:3d:5f:de:
         6c:c4:ff:6b:96:6f:14:6e:9a:c4:82:0a:2e:14:e3:9a:8d:b4:
         f6:9b:8f:61:26:d1:f9:1d:83:9b:4f:92:f7:79:14:64:df:66:
         78:d1:ce:40:38:a3:9a:1a:71:35:72:84:f0:a6:66:82:ac:45:
         28:79:05:b7:2c:ff:b4:1a:a3:9f:1b:26:d6:27:53:fb:92:25:
         89:21:b0:4a:2f:b9:5c:42:49:8c:0a:e5:d1:d7:33:25:46:b2:
         9d:e5:4b:8f:37:3c:b3:6e:b2:a3:91:da:9e:46:90:49:5f:c2:
         f3:6c:df:3e:ae:be:32:94:11:4c:63:fd:cc:4d:43:80:50:82:
         5d:19:56:f3:ed:71:c0:8f:5d:d0:e1:43:80:2f:d2:25:58:b6:
         3c:96:ee:94:36:3c:3d:77:ed:39:0b:04:5e:88:6a:4e:5b:7c:
         2c:cf:b4:92:f9:b7:9d:70:0b:f3:52:29:f5:a2:80:53:27:a6:
         b7:54:61:c2:7c:2c:13:a5:d5:6f:86:9f:40:b4:d0:60:d9:35:
         08:4a:16:c3:6f:a1:51:a8:d5:fd:f1:56:93:c4:8d:3b:2e:3e:
         2b:55:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:33 2026 by rpki-client