Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa
File:                     3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa (raw, json)
Hash identifier:          VuVh96LZ9ENVQD/HGtz9Sl/s+j7OTeDSyuCpjWemmUw=
Subject key identifier:   80:52:B4:69:01:F9:F7:02:1E:63:1B:63:72:6D:BD:65:86:9A:4A:AE
Certificate issuer:       /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
Certificate serial:       0BE08A5BB333439C8F42A0D7910ECB1EB2046EF4
Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa
Signing time:             Wed 22 Apr 2026 08:50:51 +0000
ROA not before:           Wed 22 Apr 2026 08:45:51 +0000
ROA not after:            Wed 21 Apr 2027 08:50:51 +0000
asID:                     56046
IP address blocks:        103.101.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e0:8a:5b:b3:33:43:9c:8f:42:a0:d7:91:0e:cb:1e:b2:04:6e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
        Validity
            Not Before: Apr 22 08:45:51 2026 GMT
            Not After : Apr 21 08:50:51 2027 GMT
        Subject: CN=8052B46901F9F7021E631B63726DBD65869A4AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:0f:b6:09:d8:52:a0:50:a4:78:66:a0:8f:
                    d9:b6:35:1e:fa:9d:f7:cb:0d:50:74:27:3d:d2:7d:
                    fe:f6:7b:69:60:61:0e:9b:d9:28:7e:da:65:57:a7:
                    11:2c:c3:82:45:7d:2c:34:16:52:a2:e4:f2:d5:1e:
                    55:0d:8e:56:fe:11:74:b4:a9:bd:1c:35:bc:95:1c:
                    6a:64:35:ec:78:1b:79:2d:0d:28:e2:9a:42:ef:b9:
                    c7:e9:e2:58:df:85:f3:98:b0:c3:c9:c0:e5:80:2f:
                    b1:f2:1b:df:36:b5:25:51:fe:5a:02:da:84:2c:fa:
                    1f:c3:ba:18:6f:78:b8:8b:04:9c:93:b7:21:8a:8f:
                    d6:d7:01:49:0c:a2:f4:f4:9e:7e:51:15:2b:ad:5a:
                    a5:35:0d:ba:c7:0a:56:28:df:7d:02:98:75:da:98:
                    ec:7b:6f:e8:ec:8e:48:cd:41:d2:a9:21:89:f7:4e:
                    74:f3:a2:1e:69:21:3f:75:38:41:0a:fe:b0:2a:49:
                    87:a4:6b:c9:38:f7:5e:eb:6c:e5:96:c7:3b:a7:ea:
                    7b:3e:5a:6f:c7:80:16:da:ea:db:01:f2:2e:b8:60:
                    43:13:f6:1f:9e:68:b2:d8:3c:13:62:84:92:26:f0:
                    2d:12:3b:72:1a:b6:2b:a1:d1:18:86:fc:93:4e:c9:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:52:B4:69:01:F9:F7:02:1E:63:1B:63:72:6D:BD:65:86:9A:4A:AE
            X509v3 Authority Key Identifier:
                keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:76:f4:1b:b8:6c:17:32:70:71:2e:99:46:d6:da:41:72:9d:
         29:f5:e2:f6:cc:87:f4:be:ea:4a:63:bd:0e:51:c0:95:b1:77:
         e0:9c:f6:9e:9a:c4:04:2b:fd:b2:2f:27:da:e5:99:13:ab:39:
         dd:83:05:5c:da:d4:92:75:ad:70:ca:7b:6c:40:94:a7:89:44:
         8d:cb:0c:a4:7a:2a:8d:bd:ab:16:7f:61:85:1b:56:be:01:e7:
         87:0c:86:0b:62:1d:ee:e3:8c:6d:00:f4:dc:0f:74:14:02:b5:
         7a:85:c1:87:84:78:e9:d9:54:5c:a6:2c:97:2e:30:b3:8a:5d:
         32:6f:7a:c7:d5:68:c1:e6:d5:f9:40:c7:bb:64:e5:ed:78:ca:
         9b:b2:32:d1:3b:69:97:ce:c8:26:48:03:42:d2:4c:58:ed:b7:
         07:32:12:d6:89:98:07:4e:91:4e:28:22:fc:ee:99:a8:a0:f0:
         0b:91:e1:43:51:64:ce:dd:59:67:1f:c6:e9:b6:1e:cd:b6:19:
         c1:56:86:d1:ba:ec:b3:fa:6d:6e:c9:dc:3b:ad:c1:69:07:ce:
         d8:75:a6:5e:fa:e2:a7:7a:a2:ad:76:d6:f7:21:5f:cc:aa:4e:
         b5:39:c4:f8:35:74:48:e5:f6:90:ab:73:8f:f5:d6:5e:45:5f:
         4c:fb:2d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:05:30 2026 by rpki-client