Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/3130332e37382e3232382e302f32322d3332203d3e203536303436.roa
File:                     3130332e37382e3232382e302f32322d3332203d3e203536303436.roa (raw, json)
Hash identifier:          +pGX+4RF/lOQKxZj6NDh0Y4S1YBl+3XFNef0tyQCdFY=
Subject key identifier:   D3:13:A9:D6:3E:60:07:4B:33:BA:09:28:00:B0:89:3D:D2:4C:3A:93
Certificate issuer:       /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
Certificate serial:       48395F424B100BE5CA3B8AA64E807A8BC00B1321
Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/3130332e37382e3232382e302f32322d3332203d3e203536303436.roa
Signing time:             Wed 22 Apr 2026 08:50:51 +0000
ROA not before:           Wed 22 Apr 2026 08:45:51 +0000
ROA not after:            Wed 21 Apr 2027 08:50:51 +0000
asID:                     56046
IP address blocks:        103.78.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:39:5f:42:4b:10:0b:e5:ca:3b:8a:a6:4e:80:7a:8b:c0:0b:13:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
        Validity
            Not Before: Apr 22 08:45:51 2026 GMT
            Not After : Apr 21 08:50:51 2027 GMT
        Subject: CN=D313A9D63E60074B33BA092800B0893DD24C3A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:62:23:70:52:1b:f7:0a:0a:f8:f6:22:98:
                    e6:45:86:e8:87:a6:26:e9:28:db:3a:78:2f:42:10:
                    8b:7b:9f:0b:4a:93:92:f9:50:5c:2a:c4:32:5d:e2:
                    a1:ed:3f:ae:30:96:b9:e1:7c:38:b6:ce:da:0b:3b:
                    87:37:1e:50:82:65:6b:ca:7d:70:46:21:60:b4:23:
                    1e:7d:41:c3:e4:c8:b4:d6:b1:41:0a:c1:c8:43:a8:
                    5e:b3:1f:4b:b6:da:39:bc:22:c3:42:51:2f:cb:4f:
                    b7:1b:68:68:8c:2e:31:52:0b:68:3c:8a:b6:60:07:
                    78:81:7b:c4:03:f7:c4:54:dc:c3:d8:16:14:41:00:
                    9c:6a:05:ad:aa:a1:b1:a9:7b:5e:94:e3:c3:20:ad:
                    62:d1:6f:43:6d:41:53:70:72:b6:c8:4d:cf:85:5b:
                    8e:e4:eb:2d:27:99:02:0f:e3:27:a3:cb:3c:16:84:
                    25:a7:8e:8f:13:fa:cb:03:e8:d3:5c:bb:a5:40:a2:
                    de:08:5d:34:4c:49:a8:62:a3:0a:c9:a1:84:b6:10:
                    c8:04:25:8f:4f:1e:0d:b2:ad:48:3d:79:08:68:e4:
                    6b:ec:03:8c:a7:f5:41:b9:e3:93:68:12:1e:0c:d5:
                    c3:44:0b:1c:99:0a:a6:79:3a:e5:c6:3f:9d:aa:89:
                    10:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:13:A9:D6:3E:60:07:4B:33:BA:09:28:00:B0:89:3D:D2:4C:3A:93
            X509v3 Authority Key Identifier:
                keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/3130332e37382e3232382e302f32322d3332203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:1a:31:1a:61:3d:2d:cb:f2:42:d0:48:fd:9b:0f:73:9a:5a:
         e4:87:cd:0e:82:84:02:f6:dd:30:e6:4b:fc:37:47:49:c5:8a:
         86:d0:b6:1b:2c:b0:9e:b1:65:50:ee:fa:d4:3c:a1:95:cb:18:
         23:a7:64:6f:67:cd:c9:9f:69:23:57:f6:89:bd:27:23:b9:62:
         75:09:95:d8:ec:77:8e:df:83:d5:a1:ab:b9:1f:ad:94:ad:ff:
         5c:13:07:6c:42:f3:48:29:6b:4c:1b:7e:cf:eb:5e:bf:46:0c:
         ad:11:8b:5b:3e:2f:55:15:68:73:39:86:b2:02:71:67:b9:32:
         ed:d6:15:ed:5f:b5:8e:b4:eb:11:d8:3b:7a:e7:79:e8:dc:4d:
         8a:55:2a:09:54:34:31:9a:69:c8:df:b3:9f:68:fc:9e:b0:89:
         17:f5:15:de:f3:1c:00:17:e1:39:1c:11:47:c0:64:70:8f:a0:
         fe:6b:ad:1d:41:8e:db:a1:fa:f1:c0:dd:8f:e7:2a:0a:80:30:
         e9:6e:41:d6:20:bc:80:61:7b:2a:40:65:0a:93:0d:cf:1f:75:
         f0:b6:b9:9c:b4:54:db:10:db:a3:b9:79:e5:c2:fd:de:21:62:
         82:7f:fd:1d:5b:14:94:eb:0b:21:ba:9e:3c:42:dc:02:a5:6d:
         d9:c9:b1:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:04:38 2026 by rpki-client