Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203536303436.roa
File:                     3130332e38352e38342e302f32322d3234203d3e203536303436.roa (raw, json)
Hash identifier:          CPS8C3dlUFZkTHBbXy9+u513/OlouyaV/3BeZYhp7+k=
Subject key identifier:   87:09:90:CE:78:A2:6A:07:BA:93:EE:C0:15:85:05:80:11:B0:05:BF
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       4C6C58F8D66C35BAEC27C7DC1EE2F0D6A437D9A6
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203536303436.roa
Signing time:             Mon 20 Apr 2026 05:48:08 +0000
ROA not before:           Mon 20 Apr 2026 05:43:08 +0000
ROA not after:            Mon 19 Apr 2027 05:48:08 +0000
asID:                     56046
IP address blocks:        103.85.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6c:58:f8:d6:6c:35:ba:ec:27:c7:dc:1e:e2:f0:d6:a4:37:d9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Apr 20 05:43:08 2026 GMT
            Not After : Apr 19 05:48:08 2027 GMT
        Subject: CN=870990CE78A26A07BA93EEC01585058011B005BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:53:3b:a9:8f:d3:a7:ea:01:b5:8a:b4:55:
                    45:30:75:cc:2f:b6:9b:3a:2f:1e:4f:25:42:1a:89:
                    56:9f:e5:34:a3:39:fb:40:71:9d:85:a8:13:34:61:
                    c8:d7:29:fa:97:d1:a5:68:59:af:d9:77:1e:c9:ac:
                    24:64:bb:88:d5:5a:68:64:30:99:d8:11:e2:65:e4:
                    7a:f4:d2:23:60:08:aa:0d:7f:c1:6a:9f:64:63:5a:
                    7a:f9:00:9f:50:fa:b0:9b:d5:76:2d:0d:d6:8f:36:
                    05:be:ab:30:35:84:f9:29:15:69:14:80:03:34:50:
                    f3:f8:8d:f0:86:31:c1:b3:f2:a8:ba:74:13:08:b2:
                    49:4b:7f:90:4b:34:1b:d4:04:67:51:a5:a4:9a:b5:
                    f0:1d:b3:d0:46:a4:62:a8:7d:8f:d5:cc:ff:53:99:
                    2e:e0:d0:e8:9a:e3:79:7f:d6:19:9b:05:db:6f:26:
                    4f:05:67:5f:77:22:d2:1a:9b:8f:22:1e:38:2a:23:
                    e9:fb:f4:6a:97:72:fd:e4:7e:4e:72:44:18:15:af:
                    00:d3:ed:ca:23:49:84:85:a5:01:af:13:ea:51:39:
                    7e:f8:98:7a:fc:ca:a2:d4:0e:24:ae:9d:70:ad:f4:
                    ca:c7:f9:31:5d:18:1f:8d:9a:fc:0c:fd:8a:02:ac:
                    6a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:09:90:CE:78:A2:6A:07:BA:93:EE:C0:15:85:05:80:11:B0:05:BF
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/3130332e38352e38342e302f32322d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:34:59:8a:ba:22:0d:71:6f:c9:71:c7:8b:c1:0d:1e:1d:1b:
         72:4f:18:5a:c3:f7:18:12:46:74:b7:08:00:f7:c4:49:3f:5c:
         8f:01:b7:f2:fa:de:89:ee:7c:78:76:b9:95:69:a6:ac:01:61:
         60:4d:6a:5c:88:f5:a7:5f:fd:e1:b6:55:25:8b:63:d5:68:73:
         4d:e7:7b:6c:02:d6:ab:20:22:79:80:9c:b9:4e:9b:af:74:72:
         31:51:6b:ca:98:a5:99:04:fd:95:dd:b8:0d:8f:68:c2:83:37:
         ee:ae:35:b1:ce:1d:a0:00:12:d1:c0:3a:4f:48:98:4d:91:dc:
         7a:52:70:86:3b:63:ea:ed:1a:5c:b9:5f:34:65:d0:13:fa:fc:
         bd:9a:35:c7:51:7b:38:1a:cf:83:42:af:23:4f:d7:79:6c:57:
         ac:82:6a:75:7a:ce:71:9b:48:ce:ef:bc:a4:05:46:b4:11:26:
         3d:43:d0:7e:ad:a8:6d:58:da:c2:c2:48:dd:6f:e3:98:62:02:
         af:21:1c:a9:43:5b:7a:e7:a4:b8:82:47:a0:9e:b6:d9:1f:61:
         59:bd:4c:c5:96:3c:1e:c7:66:54:21:cd:87:d4:ab:fc:f7:9a:
         f7:31:8e:8d:ab:d2:9c:fa:dc:42:81:43:13:56:88:a0:b8:e0:
         24:0b:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:52:36 2026 by rpki-client