Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34342e302f32332d3233203d3e2034383337.roa
File:                     3130332e39382e34342e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier:          tTKPvO7SOlxvX1io84XyLrLA9rPw8JaSNHbGiEviwd4=
Subject key identifier:   08:0C:56:FB:A4:26:1D:5E:D9:3D:BF:01:CE:D8:C3:04:93:A3:20:DC
Certificate issuer:       /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B
Certificate serial:       417ED25DD2DBCA378E2F7254364073316B731AB0
Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34342e302f32332d3233203d3e2034383337.roa
Signing time:             Sat 30 May 2026 01:57:38 +0000
ROA not before:           Sat 30 May 2026 01:52:38 +0000
ROA not after:            Sat 29 May 2027 01:57:38 +0000
asID:                     4837
IP address blocks:        103.98.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7e:d2:5d:d2:db:ca:37:8e:2f:72:54:36:40:73:31:6b:73:1a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B
        Validity
            Not Before: May 30 01:52:38 2026 GMT
            Not After : May 29 01:57:38 2027 GMT
        Subject: CN=080C56FBA4261D5ED93DBF01CED8C30493A320DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:05:4b:f0:d1:53:38:8d:c9:3c:d0:f6:e5:41:
                    17:85:40:6d:03:13:df:a1:5a:84:6f:79:71:b6:40:
                    a1:71:c8:71:ae:3a:01:36:26:08:3d:b3:9f:e8:78:
                    d1:60:3a:ad:9e:e8:71:c1:e8:f3:54:e5:e7:7a:69:
                    33:24:32:95:0f:4e:74:a5:c7:8e:de:8f:83:42:59:
                    a1:fb:21:dc:81:9f:6f:0a:c4:e3:67:66:00:43:bc:
                    ca:02:06:c6:ce:05:53:77:00:10:ce:07:de:90:8f:
                    76:4d:c2:cc:82:0c:9a:7a:d5:fd:aa:b5:0b:0b:5e:
                    bb:71:8e:55:35:00:6b:1b:e0:79:be:73:bd:a1:71:
                    18:1c:db:ee:0d:e0:37:29:50:ba:97:60:6e:72:9a:
                    a8:b8:77:66:e2:20:7c:24:ad:28:93:5e:8e:81:44:
                    d9:88:5e:f0:25:11:4c:3e:af:1b:e8:bb:ed:c9:10:
                    ba:ab:1f:7c:36:ee:08:4d:db:45:3b:d5:83:f6:b7:
                    8f:9a:d8:73:8e:28:84:10:a7:d3:a5:9e:b1:b2:7d:
                    1c:47:90:f2:06:2b:06:8c:ea:55:a2:34:4d:3f:16:
                    83:58:67:ab:9b:42:6c:be:bc:5c:40:7f:9b:71:a4:
                    2a:f0:0e:60:7c:74:2e:68:a2:23:46:1b:c1:23:f7:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0C:56:FB:A4:26:1D:5E:D9:3D:BF:01:CE:D8:C3:04:93:A3:20:DC
            X509v3 Authority Key Identifier:
                keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34342e302f32332d3233203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:d7:a5:cd:46:f9:b8:00:94:ff:c2:0e:4a:22:6e:71:ad:
         c6:4d:86:07:a6:49:55:5e:2f:d4:21:14:65:28:dc:e1:a7:b4:
         21:a9:ee:de:38:f8:24:20:b6:de:79:59:50:ee:06:0c:75:a4:
         63:ec:63:df:3d:d9:49:4e:e0:07:3a:e8:22:34:f1:42:85:75:
         5d:0d:5b:37:f1:52:c4:37:52:35:bd:9e:07:0c:3f:ab:1b:df:
         ca:9a:92:e1:47:29:6b:ad:93:96:c2:11:36:eb:1a:85:6f:0f:
         d8:eb:47:e2:14:36:a4:62:bc:66:63:b0:9e:9d:23:64:f9:1e:
         42:ed:36:ec:12:ae:15:6b:ab:29:ad:59:e9:21:e0:57:ef:8a:
         2f:e5:d2:a0:46:04:65:b3:48:0e:0f:45:7a:e7:92:98:81:d3:
         65:b5:66:3c:fe:b4:84:27:e0:84:6c:17:e1:4c:37:12:59:74:
         a7:6b:8d:73:04:53:16:b1:59:c5:da:c0:65:e3:b9:1c:0d:a8:
         95:a9:ac:03:c9:2b:43:22:50:c4:b9:a7:b6:be:c3:bf:34:ea:
         d3:bd:5c:d1:b2:ea:e7:49:54:5f:ae:c9:38:7e:27:80:6b:b5:
         2a:ef:e6:59:2b:aa:2b:70:b0:ba:47:64:15:be:10:48:e2:38:
         ec:46:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:24 2026 by rpki-client