Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa
File:                     3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa (raw, json)
Hash identifier:          2aUtg9N7ABlvs59nOCLfFgQksoT6ePMcy7K6msG3ND0=
Subject key identifier:   59:B9:15:F8:67:FE:E4:C7:CE:0D:39:29:74:DA:BB:D9:C8:40:94:BE
Certificate issuer:       /CN=C7470BC41735EF04A8D35A523E87865C640FD17A
Certificate serial:       0C6C76D964BBB59A603D53259579A34AAB02A54B
Authority key identifier: C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa
Signing time:             Thu 23 Apr 2026 06:44:35 +0000
ROA not before:           Thu 23 Apr 2026 06:39:35 +0000
ROA not after:            Thu 22 Apr 2027 06:44:35 +0000
asID:                     134768
IP address blocks:        103.114.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 09:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6c:76:d9:64:bb:b5:9a:60:3d:53:25:95:79:a3:4a:ab:02:a5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7470BC41735EF04A8D35A523E87865C640FD17A
        Validity
            Not Before: Apr 23 06:39:35 2026 GMT
            Not After : Apr 22 06:44:35 2027 GMT
        Subject: CN=59B915F867FEE4C7CE0D392974DABBD9C84094BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:5d:48:98:1b:8f:df:7b:02:c3:3d:14:33:
                    e7:b9:20:ad:eb:3e:4c:4f:fc:d2:a4:a8:cf:a0:fb:
                    a4:39:95:04:21:b9:ea:37:28:8d:b1:ff:4a:a5:13:
                    96:e0:d6:71:45:d8:f2:79:de:ce:bc:f4:75:94:d5:
                    0c:a4:5a:43:ce:b3:b1:79:36:4e:05:f3:d2:03:cb:
                    08:57:2c:8e:d8:64:ff:8a:2c:c8:f0:6b:26:33:a9:
                    2f:fe:f8:6a:af:09:e4:45:de:10:26:6e:d8:f4:d5:
                    1e:7e:15:1b:c3:87:45:a0:00:cd:8b:8e:14:a0:11:
                    d2:75:a9:4b:42:60:28:c9:95:4c:2f:1d:64:f9:75:
                    71:a3:ba:3b:6f:3b:06:77:6f:80:7a:d5:5e:a7:41:
                    47:46:0b:2d:a5:19:ad:fa:70:3c:c4:cc:62:ae:66:
                    88:b7:2a:ed:d6:6d:38:62:8f:a7:5b:6f:72:3d:3d:
                    32:85:c1:16:45:58:2a:44:37:b2:24:f1:de:87:80:
                    2d:c1:d9:bc:1c:9d:92:72:ca:9b:38:a1:bb:56:e2:
                    18:bc:a1:c5:2d:13:2c:84:a2:33:55:05:b5:6c:75:
                    9d:d2:c1:15:02:f2:1a:64:ff:38:67:48:62:12:72:
                    b0:75:16:84:9d:ce:8d:95:2c:d8:14:37:2f:39:6e:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B9:15:F8:67:FE:E4:C7:CE:0D:39:29:74:DA:BB:D9:C8:40:94:BE
            X509v3 Authority Key Identifier:
                keyid:C7:47:0B:C4:17:35:EF:04:A8:D3:5A:52:3E:87:86:5C:64:0F:D1:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/C7470BC41735EF04A8D35A523E87865C640FD17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C7470BC41735EF04A8D35A523E87865C640FD17A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096329455162425347/0/3130332e3131342e3130322e302f32332d3233203d3e20313334373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:0f:d9:d6:10:dd:e3:ed:46:e4:c7:4e:88:74:42:1f:48:1d:
         40:f9:5b:7e:87:37:c0:64:5f:18:c4:00:2d:51:74:9c:0f:94:
         3b:a1:65:9a:0b:23:6b:92:2e:ad:6a:9c:83:32:3f:39:b0:94:
         ab:c3:52:d6:9b:26:8a:d5:98:67:8e:cc:ae:7e:c8:a9:73:0e:
         48:52:cd:11:2e:51:e9:88:7d:c8:80:2f:c5:9f:b4:7f:99:ce:
         ab:8f:e4:ef:d2:0c:13:6f:82:f1:b5:c7:e5:a2:94:87:af:0f:
         ca:68:bc:41:47:2a:e7:48:e0:e6:90:82:c7:7b:62:e1:b3:04:
         c7:43:63:01:9f:1b:73:25:55:f4:ca:d0:77:74:c6:39:e2:70:
         da:9e:d3:ad:a5:39:05:4e:3d:d1:fa:df:56:71:cc:cd:e0:a9:
         4f:6e:5a:8a:e8:b3:6b:ea:96:66:8c:44:96:28:fe:d6:16:d3:
         70:09:f5:e0:9f:f8:7e:08:f2:70:44:3a:13:e3:27:55:3b:0a:
         cb:4f:f4:11:25:a9:bb:66:5d:2f:e7:0d:33:a5:61:13:c4:76:
         44:bb:d5:19:21:ca:a4:71:1f:92:eb:9d:df:f4:35:ca:b5:71:
         a8:f3:94:3c:cd:b1:e1:d9:9a:23:4d:cb:bb:f8:28:46:92:45:
         c8:74:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:03:09 2026 by rpki-client