Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132362e302f32332d3233203d3e2034383437.roa
File:                     3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (raw, json)
Hash identifier:          X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=
Subject key identifier:   DA:9D:F4:55:75:3B:BC:25:04:31:F3:32:85:72:06:84:F4:91:B2:3F
Certificate issuer:       /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E
Certificate serial:       2004081A7690E36DEAC428B211DACEBF086BED33
Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132362e302f32332d3233203d3e2034383437.roa
Signing time:             Wed 22 Apr 2026 03:15:30 +0000
ROA not before:           Wed 22 Apr 2026 03:10:30 +0000
ROA not after:            Wed 21 Apr 2027 03:15:30 +0000
asID:                     4847
IP address blocks:        103.78.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 03:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:04:08:1a:76:90:e3:6d:ea:c4:28:b2:11:da:ce:bf:08:6b:ed:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E
        Validity
            Not Before: Apr 22 03:10:30 2026 GMT
            Not After : Apr 21 03:15:30 2027 GMT
        Subject: CN=DA9DF455753BBC250431F33285720684F491B23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:d7:d3:a0:39:81:e5:96:d6:66:2e:da:fa:
                    59:ec:8b:da:cc:72:5b:54:04:e9:d7:52:ae:ec:c4:
                    20:2f:71:af:f2:1d:db:41:f8:af:ad:f8:81:d5:54:
                    27:a1:81:3e:a3:84:fa:c5:b5:3c:bc:bb:15:2f:4b:
                    85:97:b5:01:ba:e9:b8:a2:b7:17:18:b2:ff:cc:8b:
                    f2:df:e4:11:7f:72:33:95:a1:2a:b6:da:8a:8a:c8:
                    f7:d4:0a:a1:65:c5:46:04:08:18:bb:fa:91:89:26:
                    ad:91:9b:dc:49:96:39:14:8b:aa:71:18:07:dd:a1:
                    27:60:05:12:6a:50:8a:86:6e:5b:76:00:20:a1:88:
                    95:8e:f7:4d:d7:a3:7c:ec:bc:22:34:43:1d:cf:04:
                    ee:71:c4:58:bd:ea:50:f2:5f:38:f8:59:83:51:75:
                    6a:b6:60:a0:4a:07:1c:4c:2a:8c:c7:f7:fb:81:f1:
                    06:56:2f:a8:c6:19:09:07:31:6d:18:0a:e7:f3:f4:
                    b2:d9:31:62:35:ce:4b:49:9c:73:dd:9e:5c:0c:6c:
                    b5:f3:9a:20:70:69:41:71:7a:40:c1:a2:23:3b:5f:
                    71:e7:18:6f:21:ba:46:6e:e3:2c:0a:35:88:e2:24:
                    c4:fd:f4:31:a3:dc:5e:7f:26:f2:98:03:b6:94:2a:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9D:F4:55:75:3B:BC:25:04:31:F3:32:85:72:06:84:F4:91:B2:3F
            X509v3 Authority Key Identifier:
                keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132362e302f32332d3233203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:7d:cd:20:e9:12:b2:b9:b8:e6:60:e5:46:31:1f:3a:b5:a3:
         fd:fb:62:ce:69:00:fd:c5:39:be:96:a2:49:17:c2:50:bc:ed:
         36:98:62:0d:32:33:6d:19:c2:92:47:70:9b:f4:35:22:cf:b1:
         39:94:01:06:0e:6a:9b:0d:32:d3:7d:f9:db:3a:2e:80:29:cd:
         d8:81:10:c1:5d:62:80:96:65:f9:db:b6:db:1b:1e:5c:31:47:
         bf:83:08:fb:2a:29:19:4e:ef:10:d3:8b:ea:cf:be:4e:81:8f:
         bb:20:6f:fe:7b:eb:e0:29:76:24:76:17:db:b8:f4:e3:5a:2b:
         6d:e3:72:67:1e:96:a7:f6:fa:ab:a3:86:6a:44:2a:cf:be:c9:
         44:60:bc:eb:52:a0:bd:c5:fe:4c:82:cf:c1:24:c5:e6:2f:5e:
         ac:a0:5f:1a:98:d0:65:3e:8c:cf:6d:71:93:32:82:cf:9a:9d:
         8d:f7:a7:5d:3c:77:6e:5c:12:91:3e:93:cb:20:7d:5b:a9:fc:
         eb:4b:23:a8:d1:ef:5e:d5:ec:7e:be:65:72:26:bb:50:b5:3f:
         20:82:89:60:d9:c0:c3:98:7d:6c:d7:33:5e:9b:3d:87:c0:9a:
         7b:35:e8:2b:7e:c5:8a:6c:1e:43:b2:c2:e6:71:f6:c3:96:67:
         9a:81:d2:e9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUIAQIGnaQ423qxCiyEdrOvwhr7TMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD
OEExOTUyRTAeFw0yNjA0MjIwMzEwMzBaFw0yNzA0MjEwMzE1MzBaMDMxMTAvBgNV
BAMTKERBOURGNDU1NzUzQkJDMjUwNDMxRjMzMjg1NzIwNjg0RjQ5MUIyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChY9fToDmB5ZbWZi7a+lnsi9rM
cltUBOnXUq7sxCAvca/yHdtB+K+t+IHVVCehgT6jhPrFtTy8uxUvS4WXtQG66bii
txcYsv/Mi/Lf5BF/cjOVoSq22oqKyPfUCqFlxUYECBi7+pGJJq2Rm9xJljkUi6px
GAfdoSdgBRJqUIqGblt2ACChiJWO903Xo3zsvCI0Qx3PBO5xxFi96lDyXzj4WYNR
dWq2YKBKBxxMKozH9/uB8QZWL6jGGQkHMW0YCufz9LLZMWI1zktJnHPdnlwMbLXz
miBwaUFxekDBoiM7X3HnGG8hukZu4ywKNYjiJMT99DGj3F5/JvKYA7aUKq1jAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU2p30VXU7vCUEMfMyhXIGhPSRsj8wHwYDVR0j
BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3
MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk3MDQxODE1ODQ1OTk0NDk5LzAvMzEzMDMzMmUzNzM4
MmUzMTMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWdOfjANBgkqhkiG9w0BAQsFAAOCAQEAsn3NIOkSsrm45mDlRjEfOrWj/fti
zmkA/cU5vpaiSRfCULztNphiDTIzbRnCkkdwm/Q1Is+xOZQBBg5qmw0y03352zou
gCnN2IEQwV1igJZl+du22xseXDFHv4MI+yopGU7vENOL6s++ToGPuyBv/nvr4Cl2
JHYX27j041orbeNyZx6Wp/b6q6OGakQqz77JRGC861KgvcX+TILPwSTF5i9erKBf
GpjQZT6Mz21xkzKCz5qdjfenXTx3blwSkT6TyyB9W6n860sjqNHvXtXsfr5lcia7
ULU/IIKJYNnAw5h9bNczXps9h8CaezXoK37FimweQ7LC5nH2w5ZnmoHS6Q==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:45:35 2026 by rpki-client