Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233322e302f32342d3234203d3e20313333313138.roa
File:                     3130332e3232342e3233322e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier:          9hhMonjplFYAmoymYCwh0ofY0dNHCdZ96X9bsd6bt8k=
Subject key identifier:   DA:51:70:98:45:3E:87:A4:5D:2D:92:0F:EA:04:14:D7:FB:C8:56:01
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       7A8A99BCF361435F2F194C07B8B442B7E74D69D6
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233322e302f32342d3234203d3e20313333313138.roa
Signing time:             Fri 15 May 2026 09:40:18 +0000
ROA not before:           Fri 15 May 2026 09:35:18 +0000
ROA not after:            Fri 14 May 2027 09:40:18 +0000
asID:                     133118
IP address blocks:        103.224.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8a:99:bc:f3:61:43:5f:2f:19:4c:07:b8:b4:42:b7:e7:4d:69:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:35:18 2026 GMT
            Not After : May 14 09:40:18 2027 GMT
        Subject: CN=DA517098453E87A45D2D920FEA0414D7FBC85601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ed:70:fe:18:96:aa:b0:b6:fb:0f:5c:22:0c:
                    5f:4d:4d:fa:b1:3d:fc:29:de:0a:a3:89:0c:3f:a4:
                    41:41:9d:a4:3c:39:47:05:bc:04:eb:22:36:10:b5:
                    af:d6:6f:a0:b3:15:62:e3:e8:04:00:90:62:75:d5:
                    1e:e3:5d:5b:60:6d:58:76:15:2e:da:27:35:4a:ec:
                    be:73:a3:1e:c3:49:ff:c7:02:a2:d4:96:ff:39:ff:
                    71:d4:5e:1b:5e:db:eb:46:f3:ee:0f:92:a4:34:e2:
                    ec:f9:e8:ab:5a:67:c5:09:80:0f:19:4f:4e:81:eb:
                    c7:90:e9:bd:b1:5b:cc:5f:98:31:a0:ad:aa:d4:df:
                    29:d7:8e:29:2f:a6:a1:b4:2b:92:20:a5:1c:f7:3d:
                    3b:73:d0:98:a3:70:d2:a7:44:4e:cd:3b:d8:2e:4d:
                    ba:29:e3:c8:0d:a8:56:26:37:a4:91:86:fb:65:2b:
                    5c:01:49:89:fc:bb:dd:85:c5:51:a4:87:5d:32:f5:
                    4b:49:d7:bf:cc:4a:ea:3b:0b:9c:47:ff:f6:67:d7:
                    a0:c3:31:90:f7:a9:d5:95:fa:a4:7f:e6:a0:26:33:
                    ad:56:bb:2e:be:5a:f3:9d:cc:25:ff:99:1a:1e:17:
                    ae:68:e7:03:df:6c:28:af:53:d7:12:fe:f4:ff:bc:
                    f8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:51:70:98:45:3E:87:A4:5D:2D:92:0F:EA:04:14:D7:FB:C8:56:01
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3232342e3233322e302f32342d3234203d3e20313333313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:82:2d:3b:9f:ab:12:ca:77:8e:14:21:e0:b1:52:48:e6:74:
         f7:a1:e4:04:6d:09:a4:13:f0:18:07:0a:79:66:f9:60:79:3a:
         8e:62:48:69:17:33:77:db:15:70:51:4b:7f:31:7f:30:33:fd:
         28:21:73:e2:5e:f1:b3:fb:bc:6e:8e:2f:01:30:e6:81:36:64:
         70:c2:1d:a5:4e:ed:50:97:ca:0a:09:0d:a9:55:c3:05:b0:15:
         38:30:3f:03:58:61:af:21:d2:39:82:bc:96:d4:6e:72:71:6b:
         a3:81:18:94:67:c3:ed:72:0b:8b:33:f3:51:ed:0b:78:c6:d6:
         f1:15:a5:a8:64:e9:87:e8:fa:c7:18:d1:33:a9:f2:7a:d1:81:
         80:8d:da:b5:0c:60:a7:ee:8a:87:4e:ab:ce:f9:0c:bf:4a:e1:
         22:84:dd:16:f8:e4:89:46:e6:dc:63:9f:9e:f5:c3:91:8a:9a:
         f0:80:1a:f1:e8:04:df:34:8a:59:a8:3c:90:c0:2d:24:6d:57:
         a4:2e:92:7f:9a:e0:e4:1a:cb:ae:4e:93:9b:fd:b0:19:b5:cf:
         4d:cf:df:cf:3d:d6:7e:e8:ce:47:a8:52:2e:ec:ae:25:f1:e4:
         9b:86:0a:d4:b5:2f:7d:1e:30:93:86:32:73:cb:c3:d5:44:0a:
         2e:9a:b8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:30 2026 by rpki-client