Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e39332e3230342e302f32322d3232203d3e2034383437.roa
File:                     3130332e39332e3230342e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier:          c3GeuIs4VkQfLWWRwfzcWcUnDjF1Zl2LhsyNxr5DM1U=
Subject key identifier:   26:ED:73:E1:C1:88:EA:A0:9A:32:B0:A9:5B:FE:39:F1:74:C9:F6:EC
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       709066735A45F2B3A7923E3AB784577C4650B3A3
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e39332e3230342e302f32322d3232203d3e2034383437.roa
Signing time:             Thu 28 May 2026 07:42:47 +0000
ROA not before:           Thu 28 May 2026 07:37:47 +0000
ROA not after:            Thu 27 May 2027 07:42:47 +0000
asID:                     4847
IP address blocks:        103.93.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:90:66:73:5a:45:f2:b3:a7:92:3e:3a:b7:84:57:7c:46:50:b3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: May 28 07:37:47 2026 GMT
            Not After : May 27 07:42:47 2027 GMT
        Subject: CN=26ED73E1C188EAA09A32B0A95BFE39F174C9F6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:b3:93:a4:c4:85:86:ca:23:3f:70:77:91:
                    d2:a8:1c:a5:71:eb:41:d1:3a:c7:4f:4a:75:dc:16:
                    a6:4f:fa:05:9f:86:c8:19:61:60:24:aa:9f:48:79:
                    b8:57:cc:50:d7:27:b2:1f:5e:d2:08:49:2d:a3:6d:
                    5d:a1:8f:86:17:14:cb:c5:32:9a:50:45:44:85:95:
                    56:a5:47:5b:91:cf:77:84:5e:58:a6:1c:0c:59:f6:
                    1f:f4:73:4e:8c:72:ee:fa:04:dc:d7:26:ae:be:06:
                    5d:29:52:f0:19:8a:3b:ce:cb:b7:39:01:d7:24:8a:
                    5d:07:bd:c3:d5:99:01:f2:43:58:ae:32:54:30:6c:
                    0e:2e:52:cc:f6:12:34:47:21:ab:4c:64:5e:71:9c:
                    41:87:46:e6:56:5d:d0:29:c7:19:86:53:27:25:b3:
                    72:78:fd:43:3a:ed:2d:9a:fc:0e:3c:81:e4:d3:0d:
                    e9:f4:92:7f:33:97:3e:33:58:4d:7e:3f:ad:a4:7c:
                    49:17:07:37:38:ad:fe:e0:80:55:62:94:01:26:5d:
                    af:12:53:d1:be:50:9e:97:18:75:7b:61:52:0a:cc:
                    06:7b:ba:21:85:4f:da:c4:f5:2a:b8:dc:47:67:79:
                    3b:ef:0d:d5:55:8f:11:96:e2:c3:9d:6a:75:44:11:
                    2b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:ED:73:E1:C1:88:EA:A0:9A:32:B0:A9:5B:FE:39:F1:74:C9:F6:EC
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e39332e3230342e302f32322d3232203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:ae:a1:fc:1e:9d:5c:89:e7:45:bc:0f:d8:75:a0:6e:c0:23:
         08:ac:81:f7:1a:c5:75:07:73:14:2b:06:c7:9b:5a:78:dc:6e:
         c3:53:19:f7:e0:39:2e:54:0f:f9:e8:90:07:c0:f3:97:5d:73:
         55:8e:8d:d3:ac:37:ef:3a:26:e3:89:9a:4c:aa:68:1b:2d:14:
         b6:1d:31:cf:f7:4e:65:62:1f:db:f0:e3:2f:f0:19:97:15:bf:
         1e:9f:c1:68:5a:37:8c:5c:ac:eb:dd:1d:92:0e:58:d8:78:c3:
         a0:cc:56:a3:92:a2:f9:e5:1b:98:fe:18:d7:35:56:41:88:bb:
         c5:f3:56:3e:31:d7:38:04:ce:d7:d5:17:c3:17:1b:1d:42:31:
         01:ff:79:c9:cb:10:11:da:52:ca:e8:c1:a5:5a:f9:a0:0b:92:
         58:83:85:b8:53:b6:95:4a:b8:46:1f:bf:61:b3:ec:32:80:f9:
         14:3f:fe:cb:3c:50:4d:62:71:9f:6a:c5:2e:82:75:e3:14:26:
         39:04:d0:e3:48:1e:53:c3:7e:cd:a4:6b:f2:93:ce:40:8d:6a:
         25:5b:8f:81:6a:7e:cb:fa:2e:64:61:c1:a4:25:56:a5:76:ca:
         d5:38:68:56:3a:94:c9:41:d4:ad:66:bd:03:82:7a:d1:4e:b6:
         dc:2f:be:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:40 2026 by rpki-client