Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203233363530.roa
File:                     3130332e38352e38342e302f32322d3234203d3e203233363530.roa (raw, json)
Hash identifier:          6zRZofU/EXd1Ir3F0v4JnVrefxN0vGbXM25qC+brQ8I=
Subject key identifier:   B7:9E:72:5D:A5:42:0A:16:3E:EF:05:8C:18:07:8A:15:86:46:AC:CF
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       7C74699DF19BDE804A8AC0DDBA873AF5B3FCEB52
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203233363530.roa
Signing time:             Mon 20 Apr 2026 05:48:09 +0000
ROA not before:           Mon 20 Apr 2026 05:43:09 +0000
ROA not after:            Mon 19 Apr 2027 05:48:09 +0000
asID:                     23650
IP address blocks:        103.85.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:74:69:9d:f1:9b:de:80:4a:8a:c0:dd:ba:87:3a:f5:b3:fc:eb:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Apr 20 05:43:09 2026 GMT
            Not After : Apr 19 05:48:09 2027 GMT
        Subject: CN=B79E725DA5420A163EEF058C18078A158646ACCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:70:a4:62:c0:41:1e:a5:4a:d3:92:b2:7c:
                    4a:9a:b4:fa:b7:41:bb:a0:87:16:8d:4a:94:25:8e:
                    b1:a1:5e:17:a8:53:4c:54:e5:eb:d4:18:15:37:3d:
                    84:a2:09:9f:3b:44:ed:04:fb:b4:53:76:82:1f:b0:
                    7d:0e:28:e9:e4:51:5b:33:81:0c:21:a1:b4:25:11:
                    46:91:28:c3:5e:73:8c:cd:51:88:5f:60:4d:ce:a5:
                    23:2b:86:1f:58:1b:16:ba:0a:23:93:de:fc:8e:39:
                    08:09:6e:f2:4b:ef:d9:d4:28:91:50:56:8c:24:0e:
                    ae:5d:8d:fb:5a:8c:7a:18:94:8a:87:48:60:5b:60:
                    72:e3:06:fe:9e:64:22:4d:9b:72:ba:b0:c7:1c:6c:
                    88:43:a1:c4:24:72:f2:3a:e9:ee:ee:58:22:ba:e8:
                    81:24:76:7f:10:59:68:af:2c:0e:d9:1a:32:cc:80:
                    a2:65:a2:c2:99:4b:40:82:e8:67:8a:fb:3d:bd:aa:
                    da:e0:45:e8:f0:fb:16:4f:15:68:8f:0d:83:25:2f:
                    81:33:20:cf:f1:7f:7a:47:05:f2:30:8e:c0:31:e5:
                    12:89:e3:c3:ff:2f:43:7d:66:86:f1:3c:0c:84:eb:
                    ec:71:9d:05:a2:2b:45:8a:04:86:a1:61:e3:46:dc:
                    b1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9E:72:5D:A5:42:0A:16:3E:EF:05:8C:18:07:8A:15:86:46:AC:CF
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:c8:05:94:7f:96:28:ab:4e:de:c7:6c:98:af:40:5b:50:aa:
         d7:90:d5:c6:55:6a:8f:b0:78:74:eb:10:e1:e2:92:fb:6a:00:
         34:2d:bb:4a:97:f7:67:ee:2b:74:71:67:a3:af:99:df:d3:89:
         ac:7b:df:19:57:07:a0:ac:43:57:5c:61:a0:a6:1d:24:bd:7f:
         11:22:34:ef:2a:7f:89:0a:53:0c:7a:6f:71:66:8a:37:b5:67:
         05:08:a9:78:66:73:b6:82:5d:93:4e:ba:fd:bd:54:cf:c3:5f:
         95:60:24:ea:b5:83:cd:4c:cf:b4:b0:07:f8:f1:5a:08:48:08:
         92:54:14:c9:f8:ca:5d:0f:44:1c:49:e7:9b:0f:f6:2b:6b:ac:
         cf:ca:c6:58:7b:b8:95:9f:bd:36:e3:b3:be:f0:2b:53:1c:34:
         63:22:62:3b:7f:71:ca:a3:1a:80:c8:4c:24:23:d0:38:e7:80:
         05:9f:51:05:0f:35:3c:37:70:e1:db:a6:f5:3d:fd:08:34:35:
         b0:4e:02:25:56:87:21:4d:cf:2c:f9:d2:09:16:3b:19:da:5e:
         1b:ab:85:4c:7e:94:61:27:84:7e:c7:9f:89:07:6c:5e:ad:7b:
         b0:dd:43:d1:0d:38:55:a8:03:cd:9b:b1:b6:0b:4e:87:9b:9e:
         48:e3:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:53:53 2026 by rpki-client