Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e20313331343833.roa
File:                     3130332e38352e38342e302f32322d3234203d3e20313331343833.roa (raw, json)
Hash identifier:          E/J1F3R5MG7zDozz3Tj19GdCZrQLSsVqj6L5OudoYxw=
Subject key identifier:   51:BA:7E:73:7B:E7:42:9A:98:F8:9D:4E:92:78:43:48:C3:65:FC:AB
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       16BDCDF847023279B63E582B67A45CD189E2723C
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e20313331343833.roa
Signing time:             Mon 20 Apr 2026 05:48:08 +0000
ROA not before:           Mon 20 Apr 2026 05:43:08 +0000
ROA not after:            Mon 19 Apr 2027 05:48:08 +0000
asID:                     131483
IP address blocks:        103.85.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:bd:cd:f8:47:02:32:79:b6:3e:58:2b:67:a4:5c:d1:89:e2:72:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Apr 20 05:43:08 2026 GMT
            Not After : Apr 19 05:48:08 2027 GMT
        Subject: CN=51BA7E737BE7429A98F89D4E92784348C365FCAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:06:9f:57:65:4d:4e:d4:23:cd:01:2f:2f:
                    36:bb:04:b3:dc:2b:bb:6b:50:ed:cf:dc:2d:ec:9d:
                    4d:1a:bc:4f:8e:0c:49:cc:93:2f:2d:db:b3:2e:59:
                    b3:f1:9a:cf:97:75:bb:3d:af:9e:ff:be:ba:bd:65:
                    01:c2:81:95:5a:90:32:e8:ef:12:df:e7:b9:d7:07:
                    4f:df:b7:f1:d9:3f:fe:ef:93:01:d5:59:dd:5f:ff:
                    6c:f4:a4:84:aa:0f:cd:e2:38:c0:bb:f7:15:80:6a:
                    a1:32:27:4d:08:65:24:e6:0d:3c:23:ad:f0:87:7a:
                    26:9c:83:52:31:3d:c7:e3:52:1b:d5:90:58:8c:18:
                    de:0e:36:47:23:a0:31:f0:e4:6e:10:06:44:c0:df:
                    0b:77:ff:f2:66:f7:fa:86:49:f0:e9:63:9d:17:25:
                    90:1d:1c:28:19:92:97:e9:2b:c7:b1:48:01:15:76:
                    81:75:22:d5:66:d5:a7:d8:9f:d1:a7:a8:b3:8f:68:
                    0f:4d:34:da:31:22:b2:19:b8:26:f0:72:1c:79:6f:
                    a3:6d:e2:be:a8:79:04:8d:88:29:2d:68:5d:3a:b8:
                    50:d7:4a:66:f8:4b:70:87:6b:c5:c8:69:f9:2a:52:
                    2c:ef:a2:89:01:3d:c0:de:89:a9:e8:ff:1d:e9:e6:
                    43:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BA:7E:73:7B:E7:42:9A:98:F8:9D:4E:92:78:43:48:C3:65:FC:AB
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e20313331343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:ee:92:8b:b3:c6:fc:82:a9:23:69:5e:50:78:1c:0a:e9:9b:
         1d:12:91:9d:b4:2e:42:8e:4c:88:9f:d2:9c:90:30:63:53:9a:
         0c:bb:67:09:88:01:47:ee:31:2a:9d:da:0f:4c:d1:21:31:8f:
         34:cf:f0:f6:ae:d3:cf:1a:85:cb:03:20:c0:33:a6:5c:34:89:
         27:3d:27:00:53:f5:95:a1:40:02:f2:8b:30:22:50:dd:04:1a:
         89:26:7c:94:cd:42:41:40:c9:6e:f8:4c:a3:de:14:f8:a2:4c:
         6d:67:af:ca:fe:57:94:45:ad:ad:52:bb:fe:4e:22:bc:99:a3:
         89:f1:99:c6:2b:27:2f:4c:ea:cf:e2:cf:dd:a3:a8:4a:2a:36:
         a7:e6:53:d4:2b:ee:9c:27:10:86:10:bf:3c:7b:4a:f0:af:b4:
         ba:8d:97:3d:03:2e:25:2c:13:d9:63:4f:ed:8a:94:b1:7b:8a:
         ef:1d:a0:1d:9d:d4:42:b4:41:dc:1b:84:44:7e:50:28:82:b7:
         44:dd:8e:c3:cd:66:40:00:ef:66:fc:86:6a:81:3b:7e:94:55:
         e2:d5:73:d6:72:21:ef:11:a5:f2:ba:fb:d4:ef:e5:2b:75:57:
         fe:39:55:9b:8d:eb:82:e6:b5:ae:a4:ef:90:cc:84:0b:f1:9a:
         b3:b6:94:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 22 02:54:49 2026 by rpki-client