Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa
File:                     3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa (raw, json)
Hash identifier:          k0p3/nNewVBB3I4Xi2DzJhfefzAjz+2hD/gHLx6KHWM=
Subject key identifier:   AC:DF:DA:40:FC:77:BC:8D:78:7E:A6:A3:94:39:8E:78:AD:A9:5A:5C
Certificate issuer:       /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567
Certificate serial:       22B09F623A008956D2D904EFD67CF31149BD2789
Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa
Signing time:             Thu 23 Apr 2026 07:06:54 +0000
ROA not before:           Thu 23 Apr 2026 07:01:54 +0000
ROA not after:            Thu 22 Apr 2027 07:06:54 +0000
asID:                     137702
IP address blocks:        103.221.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 01:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b0:9f:62:3a:00:89:56:d2:d9:04:ef:d6:7c:f3:11:49:bd:27:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567
        Validity
            Not Before: Apr 23 07:01:54 2026 GMT
            Not After : Apr 22 07:06:54 2027 GMT
        Subject: CN=ACDFDA40FC77BC8D787EA6A394398E78ADA95A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:af:16:56:b5:e9:95:d1:62:ad:93:2a:b4:54:
                    6d:0b:2b:4a:a2:cd:a1:51:d8:61:1d:8c:a0:b5:9f:
                    f2:76:ac:d3:e7:55:bd:45:9e:9c:1f:0f:6e:4e:58:
                    cf:f8:f5:b7:78:92:e3:42:a4:32:59:25:f7:b6:a9:
                    39:cd:77:12:2a:dd:fd:89:75:4d:2c:66:f9:27:32:
                    d1:ea:82:b8:d8:31:5f:54:f4:ad:42:5f:e0:36:ff:
                    69:4e:d0:ef:33:b2:6e:48:ad:98:6a:29:a8:39:05:
                    7c:01:58:56:be:31:d9:ff:78:fb:05:33:93:86:74:
                    38:6e:da:4d:9e:5b:ce:bd:56:a9:85:17:02:ad:49:
                    e0:6e:a5:47:8b:bc:2d:bb:e7:bc:eb:47:5c:57:d5:
                    4a:19:09:d1:28:39:f0:4a:96:b6:27:d4:2a:dc:1e:
                    59:49:cb:1e:d9:88:c0:d7:c4:98:eb:1c:3d:a2:8c:
                    55:f1:bd:c9:7e:0e:ac:0f:07:5a:f3:34:d1:35:97:
                    d8:b8:c5:4d:96:da:59:20:62:6c:d4:ea:94:8b:ff:
                    8c:62:83:dd:ed:a2:49:89:62:a8:25:ca:07:b6:81:
                    3c:a4:bc:6b:90:09:93:b5:e0:0e:37:60:df:2b:b3:
                    a1:e4:e0:cd:ae:bf:32:a4:89:66:fd:e3:29:70:79:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DF:DA:40:FC:77:BC:8D:78:7E:A6:A3:94:39:8E:78:AD:A9:5A:5C
            X509v3 Authority Key Identifier:
                keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3232312e3134332e302f32342d3234203d3e20313337373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.221.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:78:29:7d:0c:8a:d6:6e:89:88:27:89:86:c4:3b:60:92:1e:
         1d:9b:81:28:d4:61:22:ee:f0:e6:22:e4:b9:0d:0b:c5:05:4e:
         43:d9:76:a0:75:0c:5a:f9:7f:c7:da:15:3d:d6:3d:3c:58:c8:
         0a:3b:44:3f:ee:da:4b:cc:fb:bc:1a:fe:55:bf:33:cd:e8:fa:
         0c:a4:54:b9:ce:61:1a:7f:a4:89:a3:1e:fd:8a:1f:0c:eb:95:
         3e:79:50:d2:60:d6:a9:0b:ec:02:21:1d:ea:e8:6c:21:fc:22:
         2d:29:7b:c2:e6:8d:a9:07:8e:df:bc:3c:61:52:e8:40:b7:de:
         ec:bd:ca:0c:6d:b5:71:38:23:a7:20:ea:cf:dd:3e:15:f9:4a:
         64:2b:d0:6d:a2:c3:59:11:1c:6c:f6:73:c7:cd:2b:ea:51:b5:
         b2:fe:4d:70:37:ee:86:e1:cf:62:bd:aa:59:d6:5e:9a:fa:98:
         3e:8e:37:b8:cd:3f:1f:f4:8b:59:1c:8e:69:37:11:3f:12:74:
         9e:ea:c8:0b:44:3c:00:97:ca:94:50:52:60:10:fc:ad:4f:80:
         ef:6d:5f:34:5e:bf:4a:b2:4e:da:b1:ab:ed:3f:77:93:ec:52:
         10:f7:13:3f:38:22:7c:5d:e4:8f:59:13:b4:49:f4:df:eb:23:
         7d:d3:38:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:54:38 2026 by rpki-client