Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3233332e35322e302f32332d3233203d3e2039383038.roa
File:                     3130332e3233332e35322e302f32332d3233203d3e2039383038.roa (raw, json)
Hash identifier:          eg07InefDbYtYvC0qwNH1aGmX43dJhze62b+g0+fftA=
Subject key identifier:   E3:85:A1:19:2F:95:39:FC:B4:8B:18:ED:CF:A9:9E:79:34:EB:71:52
Certificate issuer:       /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Certificate serial:       52C3FC146DE9E1CF5ECCD687989DD0B66EBF2AD2
Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3233332e35322e302f32332d3233203d3e2039383038.roa
Signing time:             Mon 13 Apr 2026 07:12:27 +0000
ROA not before:           Mon 13 Apr 2026 07:07:27 +0000
ROA not after:            Mon 12 Apr 2027 07:12:27 +0000
asID:                     9808
IP address blocks:        103.233.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c3:fc:14:6d:e9:e1:cf:5e:cc:d6:87:98:9d:d0:b6:6e:bf:2a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
        Validity
            Not Before: Apr 13 07:07:27 2026 GMT
            Not After : Apr 12 07:12:27 2027 GMT
        Subject: CN=E385A1192F9539FCB48B18EDCFA99E7934EB7152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:35:63:1c:20:34:c4:8b:02:fc:70:e7:22:
                    57:c9:0b:ec:e2:24:cd:82:a2:57:88:c1:b5:a7:6a:
                    7a:0c:b0:97:73:d7:db:1e:87:13:38:9a:0d:30:f7:
                    d6:17:df:86:55:06:fd:cd:8d:0c:23:66:4d:c1:b3:
                    24:9b:8c:63:d1:27:14:b1:2d:f9:ae:d0:f5:51:34:
                    e7:99:c4:b0:98:c5:e4:a9:0d:0d:17:48:4c:0a:03:
                    70:38:1c:1f:64:8b:cf:be:5c:79:1b:00:09:7b:54:
                    32:e1:ce:4d:41:d9:e0:b9:d6:24:9b:fa:35:72:94:
                    bd:76:5b:ff:ce:9b:e9:ed:64:40:01:87:c3:50:26:
                    9e:ba:96:f8:29:32:02:4f:7f:c5:89:57:7d:e6:58:
                    57:ab:b3:02:73:58:6b:b1:df:7f:f0:f8:77:de:46:
                    ea:c6:1f:fa:bd:fc:7c:ad:21:c1:44:16:df:39:5a:
                    b3:67:17:47:80:46:b9:cf:34:4e:08:16:e5:92:8d:
                    8a:f7:48:85:b5:84:3f:79:67:a1:0a:42:8b:87:24:
                    6a:4b:5f:cb:76:be:b0:c6:3e:01:eb:45:11:59:9c:
                    96:01:3f:36:98:4a:36:ed:8a:05:1d:b6:21:f3:b7:
                    f9:56:2c:d9:65:d4:e7:ee:d8:4c:41:da:f5:55:82:
                    ac:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:85:A1:19:2F:95:39:FC:B4:8B:18:ED:CF:A9:9E:79:34:EB:71:52
            X509v3 Authority Key Identifier:
                keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3233332e35322e302f32332d3233203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:ea:20:bb:e8:7c:22:92:fe:fd:03:63:45:df:bd:8f:20:95:
         d0:7e:91:a8:4e:03:91:46:39:20:90:f6:62:39:ea:bb:32:08:
         75:f7:15:df:ad:66:51:4f:00:ee:31:43:47:eb:0d:d8:c0:c9:
         87:14:dc:ff:06:ca:7e:9e:5d:8a:99:52:e8:63:f0:71:f6:a2:
         6d:a9:08:df:80:4e:a1:14:24:cb:5b:25:3e:52:f9:b3:a4:54:
         7d:1f:65:3b:ef:50:a1:3b:89:a3:9b:72:03:13:06:d4:57:e4:
         0f:82:7c:ec:c5:e3:da:53:11:99:7a:9c:95:5c:f2:92:40:27:
         93:51:23:f5:83:7c:c2:17:98:eb:bd:86:b1:20:d8:33:8c:a5:
         4c:ce:fe:b1:bf:ea:c4:66:15:1e:d6:1b:3e:ca:06:19:4b:fd:
         8d:ed:cc:65:9e:02:e7:6c:5f:a2:88:18:57:cf:9d:a8:a4:05:
         e4:25:6a:4d:b1:18:f7:09:a1:73:79:ed:a1:25:e9:e4:af:d3:
         10:eb:4c:1b:ad:60:21:43:d7:60:5a:e7:89:d1:ad:94:60:0f:
         28:8b:32:ed:ed:d7:c7:b9:0c:96:7a:51:da:79:a8:5a:dc:1f:
         90:7b:9d:56:1e:51:5b:6e:90:b9:dd:70:61:59:74:0f:10:45:
         8b:ed:45:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:24:38 2026 by rpki-client