Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa
File:                     3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier:          UbZlXkYS5JD2w5tzhTcuVZs6ibTL03kUiETJDoBxygU=
Subject key identifier:   67:81:AB:31:20:AB:2B:D5:C4:BB:A5:FC:3E:91:C4:8B:02:32:D5:EB
Certificate issuer:       /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Certificate serial:       185EE22808AAE3A4438B2F6E03702DEADF76A015
Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa
Signing time:             Fri 10 Apr 2026 05:25:53 +0000
ROA not before:           Fri 10 Apr 2026 05:20:53 +0000
ROA not after:            Fri 09 Apr 2027 05:25:53 +0000
asID:                     9808
IP address blocks:        103.110.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5e:e2:28:08:aa:e3:a4:43:8b:2f:6e:03:70:2d:ea:df:76:a0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
        Validity
            Not Before: Apr 10 05:20:53 2026 GMT
            Not After : Apr  9 05:25:53 2027 GMT
        Subject: CN=6781AB3120AB2BD5C4BBA5FC3E91C48B0232D5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:78:d7:f8:51:f1:2b:e4:29:9a:3e:f4:df:
                    6c:22:10:c2:3b:cd:e9:8e:5d:5b:a1:19:66:93:bb:
                    91:be:1b:34:f5:76:88:d1:3c:36:f7:5e:7b:dc:f0:
                    95:82:dd:a1:23:10:40:d8:85:5e:00:00:3d:c8:2d:
                    c5:4d:6d:53:9c:03:63:1f:d8:e7:81:a2:49:2e:f2:
                    ca:7a:9f:e2:62:f6:da:51:e6:87:e8:8a:86:d0:57:
                    4f:ca:0d:ed:16:1f:ae:e7:76:c2:db:77:59:91:ca:
                    81:c3:82:14:53:99:a4:bb:b7:1e:a0:01:d0:e2:50:
                    b8:05:0a:2d:ec:de:29:91:54:ea:2e:44:54:77:24:
                    61:72:01:a6:38:03:47:bb:c2:13:30:9c:e0:1d:ec:
                    1f:3e:ae:9e:09:4c:1e:13:00:c4:d1:a4:dc:8e:21:
                    5e:50:0e:40:f4:61:b4:5e:2a:5c:c6:7d:ff:87:49:
                    cc:c3:99:1c:aa:0b:42:e0:7d:c7:47:9a:7a:3f:a3:
                    0e:3b:b9:26:5c:c7:cb:75:c9:3b:00:e2:44:60:d1:
                    ac:e0:7c:da:f0:94:bd:6a:da:92:19:e0:b3:fc:cf:
                    e2:1b:d5:e6:c7:65:33:64:58:f1:bc:1d:c2:18:75:
                    17:8e:98:b9:0f:d2:47:70:1a:de:a7:fd:c7:d3:10:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:81:AB:31:20:AB:2B:D5:C4:BB:A5:FC:3E:91:C4:8B:02:32:D5:EB
            X509v3 Authority Key Identifier:
                keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:1a:09:f5:ba:5d:d0:26:2c:4d:27:23:ce:9f:18:67:92:f1:
         8b:05:1e:82:4d:ab:7f:da:4c:0b:5b:7a:e9:79:4b:eb:d9:8d:
         2a:71:a0:4f:77:7c:eb:94:df:48:30:cb:db:cb:22:2e:a2:10:
         cb:a5:2b:c9:b8:8d:77:17:cd:61:23:9e:31:5f:37:35:41:f6:
         2f:f3:41:49:8b:7d:be:57:3b:3b:36:48:ef:89:97:7b:f7:3c:
         7e:ae:e7:3e:84:a6:73:0c:16:03:1c:6b:bf:82:3d:bb:16:1a:
         5e:5b:2c:07:22:6e:8e:91:81:eb:4f:3f:41:94:ab:c6:cf:e4:
         41:30:a1:fc:aa:3e:d6:9c:e1:63:8d:15:ab:73:8d:3b:4f:15:
         09:75:68:a0:c5:c5:95:e9:e9:ad:c3:5f:18:20:82:98:fc:7b:
         28:60:5c:42:f2:3d:76:aa:f3:eb:d7:d5:e6:c5:4d:a8:00:c6:
         62:91:d3:fc:d0:c6:02:56:40:fe:76:c5:72:d8:03:99:19:3c:
         c0:3a:de:bc:a7:d5:6b:92:71:28:77:dc:a1:8d:5a:bf:a0:31:
         fe:06:f7:63:b4:84:25:94:92:89:e2:3b:99:0c:ad:90:e4:24:
         5b:ed:f5:f9:f2:29:71:dc:e2:82:c8:08:93:27:eb:b2:dc:fe:
         01:f0:b4:9c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:23 2026 by rpki-client