Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3130332e37332e3230382e302f32322d3232203d3e2039383033.roa
File:                     3130332e37332e3230382e302f32322d3232203d3e2039383033.roa (raw, json)
Hash identifier:          XVSUK5eRG5UoKF6vo6V6ln8vvFKzxdIbxy8TV6MFmbo=
Subject key identifier:   14:11:C5:E7:A6:92:6A:2F:99:E8:81:06:9B:3F:AC:25:35:AF:7A:35
Certificate issuer:       /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial:       09757E943D63A4C6F8A5D21B8B6EF7A08841225D
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3130332e37332e3230382e302f32322d3232203d3e2039383033.roa
Signing time:             Mon 13 Apr 2026 04:12:32 +0000
ROA not before:           Mon 13 Apr 2026 04:07:32 +0000
ROA not after:            Mon 12 Apr 2027 04:12:32 +0000
asID:                     9803
IP address blocks:        103.73.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:75:7e:94:3d:63:a4:c6:f8:a5:d2:1b:8b:6e:f7:a0:88:41:22:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
        Validity
            Not Before: Apr 13 04:07:32 2026 GMT
            Not After : Apr 12 04:12:32 2027 GMT
        Subject: CN=1411C5E7A6926A2F99E881069B3FAC2535AF7A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:d6:2f:66:24:79:5a:bb:93:d0:aa:72:63:
                    1f:6c:2a:e0:d6:58:00:96:fc:86:59:5a:68:4a:c9:
                    e0:93:e7:29:5d:27:a9:09:82:38:8a:d3:7d:76:fb:
                    74:30:d7:8e:f9:da:61:d8:0c:75:40:ed:b1:12:bf:
                    07:e3:83:8d:af:9b:d6:dd:97:84:cd:0b:e8:fa:6d:
                    a5:57:f3:f9:f8:c5:76:23:16:6d:c7:92:89:af:57:
                    ce:76:ca:57:db:d8:d5:50:75:8b:dc:2a:89:4b:56:
                    fd:55:a9:cf:37:ed:e8:5b:93:4d:ee:1a:e7:67:c4:
                    ed:28:61:69:7b:6a:83:0d:18:38:be:8f:16:44:c0:
                    98:56:bf:e5:c0:60:fd:be:3f:07:4d:3f:ab:e1:8e:
                    17:6d:67:bd:6f:c0:bb:99:59:0c:dc:30:5e:c7:ef:
                    0e:53:1b:45:0b:cb:c5:f9:7b:52:34:e6:ee:8f:b5:
                    4b:ae:32:b1:7d:e2:a2:c0:e9:4a:68:ef:d9:4c:07:
                    2f:04:44:e8:76:bc:e1:fc:86:ac:d2:6c:06:32:7b:
                    00:d6:77:00:f7:86:a1:f9:1a:16:83:aa:12:45:f9:
                    c2:74:08:98:07:e0:01:32:8b:4b:21:df:1e:71:5f:
                    94:95:3c:01:35:93:4e:39:ce:5c:b8:75:41:20:07:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:11:C5:E7:A6:92:6A:2F:99:E8:81:06:9B:3F:AC:25:35:AF:7A:35
            X509v3 Authority Key Identifier:
                keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3130332e37332e3230382e302f32322d3232203d3e2039383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:47:13:39:96:78:7e:b7:46:01:39:97:6e:ba:31:62:8c:fc:
         26:70:1c:6d:ff:0d:59:eb:71:9c:31:1a:da:1f:90:6b:af:fa:
         e5:b2:79:67:c7:a0:92:c2:0b:38:04:28:3e:a1:a1:45:02:71:
         f8:06:6d:99:81:5f:8c:60:a6:d0:b3:f3:05:b3:2c:7a:b1:81:
         59:8b:69:d2:ea:0b:e9:5a:ca:49:ad:d1:df:89:78:a7:76:f0:
         f0:40:96:ee:e0:a3:76:1a:8a:41:ba:91:36:bf:b5:f4:50:42:
         85:c6:4a:ec:9c:af:9e:5e:80:7e:f8:df:92:d2:25:ba:4d:c1:
         4f:2f:7d:3c:29:41:09:86:9b:b3:e4:68:24:06:43:e0:39:c0:
         cf:07:15:c1:98:fb:d7:cf:19:cc:32:6c:5e:82:d1:b3:dc:8d:
         bc:cf:ec:ef:82:65:96:d3:79:27:da:b3:1b:9a:c4:b0:b5:49:
         ed:bb:8d:c1:56:09:66:3a:15:9b:45:9f:1f:74:f3:a0:e9:59:
         10:0f:1a:65:f5:69:12:6d:eb:37:1d:50:a2:46:0c:ce:55:b2:
         11:0d:37:87:50:e1:77:1a:a2:6c:12:6e:48:94:75:3d:2e:31:
         75:9c:8e:30:11:36:03:74:03:9b:e5:74:3a:12:e0:b2:a0:43:
         b8:5b:30:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:22 2026 by rpki-client