Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e38322e3232342e302f32322d3232203d3e2034383437.roa
File:                     3130332e38322e3232342e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier:          O5+B/XEcCM+Xw2RoaIuyBWOtgLer2JKjzqemuzrUt00=
Subject key identifier:   C7:F6:CC:53:E1:46:0E:C6:FB:F4:F6:C8:6A:6F:36:72:F8:A2:FF:E7
Certificate issuer:       /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
Certificate serial:       5C140A4D791BB6EC3D02D1C240140437E2E70F15
Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e38322e3232342e302f32322d3232203d3e2034383437.roa
Signing time:             Mon 13 Apr 2026 07:09:27 +0000
ROA not before:           Mon 13 Apr 2026 07:04:27 +0000
ROA not after:            Mon 12 Apr 2027 07:09:27 +0000
asID:                     4847
IP address blocks:        103.82.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 08:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:14:0a:4d:79:1b:b6:ec:3d:02:d1:c2:40:14:04:37:e2:e7:0f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6
        Validity
            Not Before: Apr 13 07:04:27 2026 GMT
            Not After : Apr 12 07:09:27 2027 GMT
        Subject: CN=C7F6CC53E1460EC6FBF4F6C86A6F3672F8A2FFE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:86:81:d3:c6:c1:08:a8:e9:2b:77:de:b7:
                    fe:53:ad:be:dd:fb:1e:d5:d6:3d:24:cf:ff:f1:a4:
                    5b:0e:62:b5:a1:fa:d6:59:eb:14:a5:0f:e5:d5:61:
                    9c:a9:b5:1f:5d:44:fe:7f:f2:24:4e:26:0c:2c:7f:
                    96:fc:ad:60:fa:3f:47:9f:f6:fc:ca:c9:ed:92:ec:
                    ad:f2:8a:1f:c5:67:7e:17:07:11:9a:1a:58:ba:67:
                    53:88:3a:1c:84:5b:74:6d:83:86:e0:46:d7:a5:b0:
                    ff:5f:0e:f1:cd:41:a3:cf:44:ef:a7:6a:d3:4b:af:
                    e2:f3:1d:ff:ed:f3:ea:61:56:21:07:ab:00:78:63:
                    36:05:9e:52:1f:6f:5a:3d:df:58:11:b4:53:ea:9b:
                    b6:f4:a6:ce:9f:d9:28:99:ed:bc:31:e1:55:c3:25:
                    52:b2:51:1a:55:ea:88:b5:c8:58:b7:d7:94:99:7a:
                    3c:ac:6a:5d:1f:18:91:90:d1:77:fe:c8:d8:4d:c7:
                    5a:54:42:a9:86:8e:9c:0d:36:7e:c8:c6:45:3f:7e:
                    ff:d2:91:34:bd:ef:91:31:c2:4a:dd:ca:1f:4b:af:
                    99:aa:a7:d4:0d:cb:bd:29:5f:bb:33:a3:99:7e:e5:
                    b9:52:19:a9:f5:7b:09:bc:12:88:7a:18:f0:68:99:
                    c4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F6:CC:53:E1:46:0E:C6:FB:F4:F6:C8:6A:6F:36:72:F8:A2:FF:E7
            X509v3 Authority Key Identifier:
                keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e38322e3232342e302f32322d3232203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:09:83:0e:78:99:6f:fd:f4:cd:5e:11:11:71:be:db:ac:d7:
         52:bd:a1:6c:f9:b8:f2:f2:84:bf:f3:54:c7:2c:e1:78:07:5c:
         ca:66:1b:af:a5:42:1b:aa:53:ed:32:ca:94:e9:7c:ac:df:b5:
         e7:c6:bc:ef:0f:58:d0:d6:7f:04:8a:32:a0:15:54:dc:9f:d6:
         a8:58:6d:98:2c:40:7f:20:42:48:ea:a0:e3:a6:bb:b4:d2:e9:
         97:14:89:f6:0e:2d:9c:e5:10:e7:dc:ff:a7:40:bb:c6:36:b5:
         24:d3:e7:c0:80:1a:40:05:61:f7:6d:c2:5a:62:52:3e:3f:80:
         99:59:07:88:99:f9:1a:7a:6c:1f:84:56:92:7e:1d:73:eb:1f:
         c3:a9:c2:e5:90:15:5b:b2:5f:4b:a0:ac:f1:6a:e2:dd:f6:10:
         2a:67:6a:59:9f:df:c8:1a:a0:3a:96:ed:3c:e1:78:7d:40:2d:
         c0:a0:57:9e:e6:b5:3c:87:ac:ef:39:a8:0b:99:6b:11:8f:42:
         57:e5:09:6b:c1:81:95:03:97:71:20:10:99:10:5e:c8:4b:d2:
         b3:bb:02:f9:b9:63:0c:d3:57:e5:4a:6c:d8:b7:25:a5:af:24:
         a7:a2:51:f2:22:a4:91:2b:a4:08:cf:d1:26:fa:a6:f1:a3:fc:
         bf:77:49:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:47:16 2026 by rpki-client