Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3234332e3133362e302f32342d3234203d3e20313333313138.roa
File:                     3130332e3234332e3133362e302f32342d3234203d3e20313333313138.roa (raw, json)
Hash identifier:          hDEp0YARAEOnqZzVlPeIKubc0oXNn24GWZFOasZ3+vo=
Subject key identifier:   A8:C1:61:7E:20:63:28:E1:83:16:E5:81:B8:FD:8F:D5:BB:73:3B:9C
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       5608339E543CA9D0003234F079DA5BB3C8E6E1F9
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3234332e3133362e302f32342d3234203d3e20313333313138.roa
Signing time:             Fri 15 May 2026 09:22:01 +0000
ROA not before:           Fri 15 May 2026 09:17:01 +0000
ROA not after:            Fri 14 May 2027 09:22:01 +0000
asID:                     133118
IP address blocks:        103.243.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:08:33:9e:54:3c:a9:d0:00:32:34:f0:79:da:5b:b3:c8:e6:e1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: May 15 09:17:01 2026 GMT
            Not After : May 14 09:22:01 2027 GMT
        Subject: CN=A8C1617E206328E18316E581B8FD8FD5BB733B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:40:af:67:51:bf:b6:41:6c:e8:12:2d:a5:
                    0f:5e:ae:3c:54:ad:47:32:22:0b:06:b4:c9:d6:35:
                    f7:ff:40:88:71:3f:01:7c:f5:e8:a9:88:d6:6f:1f:
                    1f:55:ea:dd:35:b1:6c:a3:04:8b:49:d8:5b:0f:65:
                    61:e5:6d:25:6c:bf:ed:8b:eb:0a:f0:84:02:fc:af:
                    f8:a1:37:11:43:5d:14:54:5c:64:fd:50:bd:21:60:
                    e2:8d:48:6c:30:f9:57:2c:78:f2:c6:b0:8b:39:91:
                    31:1e:02:6d:38:2f:e5:9c:5e:e0:21:83:20:ac:ab:
                    d6:85:f6:49:55:49:30:cb:43:00:e5:d1:45:bb:4c:
                    5c:bc:74:c3:7c:4f:f3:c9:9b:5b:45:f5:6b:1a:56:
                    89:83:8e:18:c8:08:b6:61:ed:81:40:d0:f4:c1:15:
                    50:a3:64:d8:fa:14:62:1d:41:01:64:06:db:11:44:
                    21:d3:70:95:4e:06:a8:5b:fd:bd:63:ab:7a:1c:eb:
                    a0:0c:84:e3:51:e3:fc:54:6c:8e:2d:d1:df:af:0a:
                    76:d3:1f:61:2f:4b:b5:9c:96:86:59:a5:82:27:db:
                    6c:ce:e9:eb:e1:9a:5f:9e:07:20:2d:54:52:9f:04:
                    3d:e1:63:cb:fb:13:d0:f9:49:8e:c5:a8:c8:12:8a:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C1:61:7E:20:63:28:E1:83:16:E5:81:B8:FD:8F:D5:BB:73:3B:9C
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3234332e3133362e302f32342d3234203d3e20313333313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:7c:50:44:a7:b9:5c:d6:82:f3:49:66:c9:3d:58:1e:fa:ee:
         24:a8:cb:07:be:af:4a:c8:15:9e:9b:be:15:0f:2a:62:d2:45:
         34:3d:33:3e:1a:cb:3c:c5:aa:54:37:25:62:5e:da:30:4b:a3:
         d4:f3:d4:57:8e:48:59:be:16:74:b8:0e:44:87:d2:c2:02:7c:
         10:67:01:d1:df:b5:6e:da:95:4a:3a:97:8d:bc:dc:86:59:ee:
         fa:ea:07:66:08:7f:ff:b9:c6:f9:36:9c:77:65:34:7d:d2:0d:
         2f:79:07:79:e9:81:90:80:31:dd:42:d2:95:aa:1d:20:96:a7:
         40:67:55:9a:27:00:3b:77:48:58:0e:0b:c9:91:57:90:58:6f:
         7b:c7:ad:55:52:9c:79:8d:e3:32:67:88:54:f0:05:cd:aa:65:
         87:ba:40:72:24:1c:86:9c:2d:a5:4c:4d:65:c8:c2:47:d4:18:
         78:f8:78:e3:26:37:61:5c:ac:09:8b:47:3f:3f:5c:15:81:7a:
         ae:88:50:40:a6:6d:9d:93:58:c0:14:9c:b4:e2:de:39:98:e6:
         4e:8a:5b:f0:85:86:d6:b7:39:a2:a5:b3:c9:cb:93:03:11:4f:
         79:f0:10:81:c8:29:f1:14:8e:ae:6f:95:27:fa:36:57:00:ca:
         63:97:e6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:57:06 2026 by rpki-client