Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/3130332e37382e3232382e302f32322d3332203d3e2034383337.roa
File:                     3130332e37382e3232382e302f32322d3332203d3e2034383337.roa (raw, json)
Hash identifier:          61L5aR5bgll/4iVZjJp7bD1aBZNc1/iMX2m/DXeH6tQ=
Subject key identifier:   C4:3F:46:E9:35:72:5C:5C:C8:FE:00:0D:91:84:91:FB:3A:1F:F5:C6
Certificate issuer:       /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
Certificate serial:       722945FE73A4529E21CD8B9FE30B60D9B747779A
Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/3130332e37382e3232382e302f32322d3332203d3e2034383337.roa
Signing time:             Wed 22 Apr 2026 08:50:51 +0000
ROA not before:           Wed 22 Apr 2026 08:45:51 +0000
ROA not after:            Wed 21 Apr 2027 08:50:51 +0000
asID:                     4837
IP address blocks:        103.78.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 02:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:29:45:fe:73:a4:52:9e:21:cd:8b:9f:e3:0b:60:d9:b7:47:77:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
        Validity
            Not Before: Apr 22 08:45:51 2026 GMT
            Not After : Apr 21 08:50:51 2027 GMT
        Subject: CN=C43F46E935725C5CC8FE000D918491FB3A1FF5C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:83:b0:fd:d7:92:65:4d:51:00:cb:51:bc:
                    7d:b1:37:41:72:d3:b5:92:d5:30:01:8c:93:8d:19:
                    0c:03:3d:30:e2:fb:08:5c:96:bc:e6:16:d7:68:94:
                    5c:b0:10:b5:73:57:0b:73:d6:e3:bd:48:a0:ce:f4:
                    10:c3:89:ed:58:23:a9:af:df:de:d8:34:26:6d:28:
                    49:4d:be:45:98:bf:b9:4f:b3:65:d1:71:85:65:9e:
                    f6:c8:ca:2a:47:6b:97:da:cd:a5:f5:06:f7:b4:44:
                    48:79:71:61:40:d7:ed:76:1f:4d:75:7b:b3:dc:ee:
                    9f:8e:f4:fa:0f:13:90:82:c6:6b:13:dc:67:aa:25:
                    a2:24:d0:36:81:92:0e:d4:80:bf:5a:5f:06:c2:99:
                    f0:ec:e8:a0:79:6a:73:ac:be:9e:9d:58:d3:b1:e5:
                    8b:c5:1d:5d:ec:95:53:31:7d:bc:fe:be:85:a6:a5:
                    61:b6:63:17:c7:cf:f9:ba:14:52:61:7f:f6:df:c8:
                    b0:38:6f:8a:0a:9a:83:88:06:df:13:44:17:09:b9:
                    ba:d0:b0:10:34:54:17:40:f9:95:71:98:18:44:80:
                    38:6c:e7:74:38:c7:48:6b:b1:85:ca:e0:5d:31:34:
                    ab:96:ae:55:77:ae:a2:e5:4a:2c:2e:dc:d5:f8:66:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3F:46:E9:35:72:5C:5C:C8:FE:00:0D:91:84:91:FB:3A:1F:F5:C6
            X509v3 Authority Key Identifier:
                keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/3130332e37382e3232382e302f32322d3332203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:8a:1c:4b:82:25:be:2e:39:63:0a:16:fb:ac:db:0d:60:7b:
         b4:f5:7b:18:b8:f0:e9:4e:3e:3e:ba:6f:5a:e0:d0:32:cd:2c:
         21:1b:40:a6:ae:3b:69:f1:a2:49:ed:8a:9b:76:02:c4:6f:9d:
         c4:c6:33:dc:e8:7f:13:2b:5e:51:61:ed:22:d8:12:dc:4e:8f:
         25:79:ef:be:50:b4:96:9f:83:aa:30:d4:a1:40:40:ec:16:a6:
         bf:68:c7:1a:62:56:f1:6a:d5:7a:96:0f:33:e1:43:75:63:0e:
         c2:d4:56:83:ce:75:e0:78:e4:b5:e8:87:eb:04:39:d0:43:01:
         31:d1:b0:29:6f:67:28:1f:0c:52:0b:a9:f2:72:9a:ef:41:d1:
         fa:36:5b:04:f0:ad:93:04:7d:e0:2f:1b:a7:0a:09:f6:72:62:
         0f:77:7f:bc:39:e5:ea:34:69:26:a5:51:8e:41:72:2f:d9:5e:
         d5:38:b6:c0:e0:3e:aa:67:3a:11:7d:28:c2:dc:46:d5:1e:41:
         be:7e:9f:52:7c:d1:28:8f:97:15:01:aa:f6:21:a4:22:06:a0:
         89:4f:bd:ab:b0:a9:be:83:76:32:86:dc:40:92:10:f8:78:52:
         c0:50:ad:ad:09:16:cc:05:4b:8e:41:71:90:0d:25:78:48:d8:
         52:7c:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:39:12 2026 by rpki-client