Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235322e302f32332d3233203d3e2034383131.roa
File:                     3130332e3139322e3235322e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          uF3ukH+EASxan4sMRFpJ7wIzbqOkS0FupIgeX9PfEzc=
Subject key identifier:   FE:8F:1E:CD:B9:19:4D:6F:8A:E1:C5:23:05:28:43:77:16:65:96:CE
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       3A2551544F84DB022209339066AE370E742BA5EE
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235322e302f32332d3233203d3e2034383131.roa
Signing time:             Sun 23 Aug 2026 14:59:56 +0000
ROA not before:           Sun 23 Aug 2026 14:54:56 +0000
ROA not after:            Sun 22 Aug 2027 14:59:56 +0000
asID:                     4811
IP address blocks:        103.192.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:25:51:54:4f:84:db:02:22:09:33:90:66:ae:37:0e:74:2b:a5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Aug 23 14:54:56 2026 GMT
            Not After : Aug 22 14:59:56 2027 GMT
        Subject: CN=FE8F1ECDB9194D6F8AE1C52305284377166596CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5d:ce:13:c3:78:a4:03:29:2d:3c:b7:14:e3:
                    ee:39:33:9b:ee:b3:bf:d4:ff:54:8e:fb:4f:7f:5b:
                    ef:68:0d:71:33:09:c6:b2:20:be:18:06:c6:1f:ba:
                    5f:23:a1:fd:30:17:fa:32:97:d7:a0:25:34:68:1a:
                    83:c0:f2:38:6a:3f:bd:79:f5:5b:3d:23:48:de:dd:
                    a2:66:47:fd:5b:98:f9:35:2c:50:32:a0:88:d4:40:
                    7f:86:48:b5:ad:53:98:1b:af:ef:4d:f9:45:9f:f3:
                    5c:de:e1:85:48:0b:5c:eb:74:2e:e0:76:64:98:92:
                    65:67:35:d8:14:54:15:39:82:d8:40:5b:f0:e6:c4:
                    ef:a4:f9:ca:21:0b:cc:ba:71:5e:a5:f2:2e:8a:03:
                    54:7c:96:9c:bc:a1:91:ee:23:d0:28:03:3e:f9:d0:
                    c6:80:94:a9:e2:aa:ef:fe:bf:64:b3:f6:66:a0:c4:
                    3f:dc:f1:6d:03:fa:66:c4:7a:0d:db:af:e6:84:83:
                    62:69:13:34:87:4d:73:49:04:57:22:f9:36:bb:d9:
                    4f:bc:19:20:3b:4b:2e:7a:bd:10:06:28:0b:81:5d:
                    59:15:d3:12:74:d0:ca:04:f9:58:49:0e:07:8d:eb:
                    66:7d:04:e6:58:8d:78:ff:1b:24:ae:c6:69:79:ea:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8F:1E:CD:B9:19:4D:6F:8A:E1:C5:23:05:28:43:77:16:65:96:CE
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235322e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:34:14:0a:97:7c:03:7d:bf:1d:e3:18:22:f1:49:2d:a9:32:
         6c:b0:f0:6d:cf:e6:ff:a3:5d:32:67:ec:f2:14:e4:46:38:77:
         c0:34:6c:d1:ea:a3:5c:e3:fe:d9:d6:40:f6:b8:37:1b:29:13:
         fe:f8:be:3a:40:9b:5c:ae:da:dd:2e:d6:55:da:62:72:09:c0:
         ff:da:f1:4f:8a:2a:57:d1:d7:cf:da:38:4a:fa:50:17:da:41:
         4c:c3:21:70:fa:d2:54:03:3b:29:de:2f:55:d2:2b:53:1d:75:
         f8:f3:f8:0b:ad:db:97:cb:ce:3f:4c:c4:6d:fc:dd:cd:d6:30:
         80:60:91:46:a3:68:72:36:48:a3:7b:77:19:ee:6b:e7:51:0d:
         bc:1e:3a:1c:9a:a4:2a:a3:e3:57:c9:8b:79:ad:08:0d:19:7f:
         9b:ca:36:6f:f4:82:16:b7:c2:a7:34:05:25:55:0f:59:83:1e:
         45:7a:4d:cc:a3:94:64:2f:e2:83:e9:8f:f3:94:50:d5:20:62:
         1b:26:f8:14:d8:af:c6:e1:24:45:53:6a:50:76:66:cd:44:4c:
         f0:4d:4f:f7:f7:ca:1f:58:5b:f5:49:51:76:e4:f9:9c:ab:48:
         2e:86:e0:1e:01:16:41:21:27:f5:de:bb:e9:c0:d3:5e:c4:3e:
         3b:95:4f:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:43:22 2026 by rpki-client