Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34372e302f32342d3234203d3e2034383337.roa
File:                     3130332e39382e34372e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          zhTFjsH+JPU0x4nK+LV7NlnnYyLvQckbF+E2sJc1+7w=
Subject key identifier:   1D:E1:AF:2A:9B:24:75:BF:03:D5:EE:47:13:2F:B0:52:C9:C8:78:4F
Certificate issuer:       /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B
Certificate serial:       2D294DD94D479DC9BE705E352793F6CF5D03934A
Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34372e302f32342d3234203d3e2034383337.roa
Signing time:             Sat 30 May 2026 01:57:38 +0000
ROA not before:           Sat 30 May 2026 01:52:38 +0000
ROA not after:            Sat 29 May 2027 01:57:38 +0000
asID:                     4837
IP address blocks:        103.98.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:29:4d:d9:4d:47:9d:c9:be:70:5e:35:27:93:f6:cf:5d:03:93:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B
        Validity
            Not Before: May 30 01:52:38 2026 GMT
            Not After : May 29 01:57:38 2027 GMT
        Subject: CN=1DE1AF2A9B2475BF03D5EE47132FB052C9C8784F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:44:21:60:b8:bb:be:7c:12:3f:7b:68:b1:
                    e7:b2:48:1c:1e:0c:46:1a:53:7d:94:69:1f:26:47:
                    7e:84:58:af:29:1b:dd:9b:6a:ac:1b:c0:b9:11:11:
                    15:2e:6f:fc:28:b6:6a:cb:d7:72:d9:8f:9e:54:c2:
                    4b:57:df:21:1a:8d:12:0f:48:e6:98:90:25:87:22:
                    fb:64:3d:26:16:a5:1d:49:58:65:a3:cd:db:6f:3e:
                    16:cb:5f:0e:0c:68:08:17:be:8f:19:f5:7b:ee:69:
                    af:5f:32:5c:3b:22:83:91:90:59:9c:71:3d:49:bb:
                    2d:17:20:20:98:d1:08:c0:2d:d9:77:5b:94:27:89:
                    06:5d:19:79:f6:04:fc:0f:c1:e1:b5:ee:21:75:09:
                    77:5e:d2:1c:b0:0e:b2:cf:53:88:07:72:1e:c7:35:
                    a5:19:e7:94:15:5d:45:a9:68:b6:00:65:fa:71:0e:
                    9c:6d:d0:36:40:33:e8:cb:84:eb:aa:cc:27:11:8a:
                    c7:74:89:b4:11:21:43:ab:fd:75:4b:08:6d:f4:44:
                    81:a6:1c:a1:eb:db:cd:f8:d5:33:e3:a8:1b:bb:a3:
                    fd:81:fb:de:e7:f8:21:36:42:c7:18:b3:39:82:d0:
                    61:be:e2:92:e9:74:6b:6e:85:12:c0:60:c6:fe:54:
                    1e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E1:AF:2A:9B:24:75:BF:03:D5:EE:47:13:2F:B0:52:C9:C8:78:4F
            X509v3 Authority Key Identifier:
                keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34372e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:b4:0d:db:0e:76:05:d4:6f:53:67:1a:d4:a3:d1:9d:f3:
         10:47:e7:30:3a:6a:91:7c:28:13:df:17:a8:49:4d:02:ed:41:
         dd:50:64:da:aa:c9:18:b7:f9:48:a0:1b:fe:58:0d:1a:c5:c4:
         d0:e8:dc:70:9a:1d:f1:46:94:ab:a0:46:b1:7b:c0:e9:42:dc:
         f9:1e:ac:e0:17:00:78:b3:3e:e1:a1:29:1a:68:c5:27:30:57:
         15:b5:83:a8:8f:e6:d1:88:f2:19:e2:35:c8:36:e5:fa:4c:2c:
         ea:50:32:dd:b9:3c:00:73:34:87:a9:b9:aa:65:d4:2c:ff:fd:
         8f:33:41:f9:8e:2b:4d:eb:60:04:29:7e:76:7f:e2:2f:4b:a5:
         2f:5b:8a:b6:8c:33:3d:d3:30:ec:9e:e3:63:69:a8:cd:e2:af:
         e9:01:30:bb:44:bc:48:f3:96:c4:04:96:ea:9a:f1:92:bb:b6:
         9a:da:92:5f:2c:5b:d7:fe:a4:bb:72:3a:4f:90:a6:c9:1c:36:
         fb:1c:95:f8:63:d3:a0:ee:a1:22:68:61:05:25:3e:f6:f8:fe:
         39:b7:2c:e0:7e:6a:62:2e:62:25:a7:b2:e8:57:07:65:4c:9e:
         a8:47:e8:d6:45:d2:ee:b5:4e:58:c1:7d:d0:96:ff:fb:0e:42:
         8f:15:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:29 2026 by rpki-client