Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/3130332e34342e3137362e302f32332d3233203d3e2034383437.roa
File:                     3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier:          ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=
Subject key identifier:   7F:07:7B:0E:8A:67:F6:4E:FF:35:B6:2B:5D:87:4C:4D:AA:4A:17:3C
Certificate issuer:       /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Certificate serial:       7E543070926E7C982E06C1AFD5644B8201022BC7
Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/3130332e34342e3137362e302f32332d3233203d3e2034383437.roa
Signing time:             Mon 13 Apr 2026 06:22:29 +0000
ROA not before:           Mon 13 Apr 2026 06:17:29 +0000
ROA not after:            Mon 12 Apr 2027 06:22:29 +0000
asID:                     4847
IP address blocks:        103.44.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:54:30:70:92:6e:7c:98:2e:06:c1:af:d5:64:4b:82:01:02:2b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
        Validity
            Not Before: Apr 13 06:17:29 2026 GMT
            Not After : Apr 12 06:22:29 2027 GMT
        Subject: CN=7F077B0E8A67F64EFF35B62B5D874C4DAA4A173C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:62:42:aa:4e:8c:20:b7:ae:de:b7:92:2f:ed:
                    03:e1:e3:90:60:b7:87:16:be:3c:95:86:8c:db:dc:
                    c3:87:dc:35:82:c0:8f:8d:56:3a:10:fb:9b:8e:9f:
                    2b:da:22:5a:b1:9a:7b:3e:c1:02:25:6b:6a:97:d0:
                    b5:b8:d8:ab:bf:2d:70:82:03:a5:25:8c:00:39:0e:
                    d3:56:51:8b:2a:91:2f:e3:cb:cc:97:c5:a3:8a:39:
                    ee:50:cc:9d:79:af:e9:e9:36:f4:8f:3c:1b:35:af:
                    2e:4b:15:74:d4:2d:66:b1:66:0d:6b:75:70:cd:a8:
                    c8:02:68:28:96:85:5d:cd:45:f1:1b:5d:0c:ec:e7:
                    d3:f1:cd:bf:20:50:61:b5:1f:88:7e:1f:9e:8d:3b:
                    c6:2f:0e:af:dd:43:f4:ef:6b:57:80:74:d0:f1:05:
                    89:25:6c:47:3f:b5:18:ec:f7:11:f1:d2:e8:a2:fe:
                    9a:f2:05:c4:74:7b:fc:ac:1e:74:db:7a:c9:c7:a8:
                    a7:37:97:b5:e2:ba:bd:c2:14:d5:ba:1a:18:c6:cd:
                    f8:38:08:9a:ae:36:15:b6:8a:df:5c:0a:c4:99:33:
                    b7:87:27:89:70:2a:ee:f4:ec:50:d1:ec:b1:04:2c:
                    a8:2d:04:0b:d8:3b:41:fb:ba:fd:55:92:96:b0:b4:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:07:7B:0E:8A:67:F6:4E:FF:35:B6:2B:5D:87:4C:4D:AA:4A:17:3C
            X509v3 Authority Key Identifier:
                keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/3130332e34342e3137362e302f32332d3233203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:08:08:5b:3d:fa:19:7d:6d:ea:ec:3b:10:dd:b8:29:a2:64:
         ad:2e:86:9f:ba:e0:bb:65:85:f0:dd:60:1b:4f:61:85:0e:9b:
         a9:41:7e:0d:04:42:02:f3:e1:4b:bf:14:2b:29:19:12:a4:ec:
         ea:b2:2b:c3:08:08:1d:b6:7a:96:27:a3:b5:9e:fa:ef:64:d0:
         84:d1:85:22:d8:92:b6:3b:73:c4:f5:d2:cd:83:64:bf:d0:78:
         30:a6:76:ac:c5:84:50:01:e8:a6:ef:60:85:84:2d:cc:61:f8:
         c0:2d:de:43:eb:22:3b:8e:e0:f6:d2:8f:cd:3a:a6:f5:b6:32:
         a6:38:a5:93:41:a1:62:c6:de:79:05:8a:8c:d3:0a:a6:bd:06:
         b0:70:10:80:5a:76:8a:46:ee:70:aa:4e:e7:d9:40:4e:74:a9:
         e7:a0:7a:43:dd:9c:a3:48:ab:f2:e8:07:2f:f5:f8:a0:cc:e7:
         cd:e9:f4:79:40:af:cb:84:83:29:df:2a:f9:e7:e1:cd:ae:f2:
         38:74:cf:40:1a:09:9e:3e:9b:03:f3:0f:1f:20:7b:8e:db:2d:
         6c:a5:26:e9:f6:55:ed:b9:bc:e1:16:a3:c3:c8:2f:4d:79:58:
         d2:29:82:23:b5:60:f8:1a:6b:0a:db:63:bc:d8:6b:55:4b:56:
         28:a2:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:13 2026 by rpki-client