Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313533393131.roa
File:                     3130332e3138332e3132322e302f32332d3234203d3e20313533393131.roa (raw, json)
Hash identifier:          a8lzCqBoiIo29jxq23F0gEkFebEMyTyCXI9x6zyUtzk=
Subject key identifier:   D3:E3:DB:12:E8:24:3C:C5:AA:A1:CB:1F:92:37:59:9A:F1:41:34:7E
Certificate issuer:       /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial:       23B709F0A34958AD0EC6664AD36179B78732EF3F
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313533393131.roa
Signing time:             Mon 20 Apr 2026 06:38:34 +0000
ROA not before:           Mon 20 Apr 2026 06:33:34 +0000
ROA not after:            Mon 19 Apr 2027 06:38:34 +0000
asID:                     153911
IP address blocks:        103.183.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:b7:09:f0:a3:49:58:ad:0e:c6:66:4a:d3:61:79:b7:87:32:ef:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
        Validity
            Not Before: Apr 20 06:33:34 2026 GMT
            Not After : Apr 19 06:38:34 2027 GMT
        Subject: CN=D3E3DB12E8243CC5AAA1CB1F9237599AF141347E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:30:4b:f9:16:75:10:76:df:c7:d2:32:3f:
                    e3:c9:21:5b:b2:5d:f6:9e:af:78:e1:9e:d2:12:d9:
                    42:8c:41:a6:58:11:c6:88:0d:32:b7:46:93:08:82:
                    3b:74:6f:69:c8:ab:74:8d:e7:a9:fb:94:40:4f:9f:
                    79:12:fe:47:8e:b0:0e:f6:d9:76:58:9a:7e:05:94:
                    56:f0:7d:61:9a:43:0f:2a:6a:47:3a:58:c5:1d:e3:
                    4d:fe:f6:84:a5:35:a7:70:6e:87:b7:61:00:57:77:
                    67:a2:a8:2e:d4:cf:74:68:a8:c1:48:f2:77:44:7c:
                    b9:6c:78:89:f0:a6:fe:3a:f3:4f:0a:6b:ca:37:02:
                    ca:73:59:da:e2:82:eb:66:6d:91:1d:31:b5:87:5a:
                    a3:7c:63:c7:92:a5:1b:86:89:38:c5:73:e7:27:98:
                    a3:03:67:35:a9:d9:3a:83:11:cb:65:75:a6:28:b3:
                    f1:b7:f1:3d:35:27:9a:34:0e:89:d3:02:cc:c7:e4:
                    cd:4b:90:96:64:e1:1f:86:05:1d:0b:64:71:6b:b3:
                    20:7f:cb:f4:97:b8:a2:d5:8a:0d:5e:c3:b8:6b:36:
                    e6:82:d4:82:0e:f6:29:60:44:1d:df:10:44:47:46:
                    c1:b3:e8:2f:31:09:b5:62:5e:b5:65:52:ae:f0:bc:
                    6c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E3:DB:12:E8:24:3C:C5:AA:A1:CB:1F:92:37:59:9A:F1:41:34:7E
            X509v3 Authority Key Identifier:
                keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e20313533393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:1f:44:39:ad:45:6f:06:90:7e:77:f5:7f:89:85:79:8d:2e:
         ca:3c:b8:11:03:8b:58:78:04:f8:b2:db:e2:1a:af:f5:f7:5f:
         d4:3c:0a:08:7a:85:b4:59:16:51:2c:78:53:d3:28:d5:18:a8:
         cf:99:38:c0:19:d4:39:a3:0c:c7:42:f1:8f:12:8d:1a:5f:d5:
         c0:6a:6b:17:d1:d2:16:4f:03:2c:f2:01:a1:9e:c7:d2:6f:83:
         dc:6a:a6:4a:f5:63:03:b1:e1:28:cd:04:8c:a9:ef:70:8e:21:
         b7:85:7d:c8:a8:2a:fd:3c:ed:26:23:8a:3f:3f:cb:5b:e7:77:
         44:15:03:59:8a:1c:86:68:04:40:ba:b4:95:35:42:65:79:38:
         7e:cc:86:4d:b5:a4:da:3d:e2:ff:ba:95:10:ba:53:63:4a:60:
         f6:44:de:1b:36:a7:4b:8b:8a:79:21:b1:07:f8:0f:c9:db:19:
         0d:68:63:1f:b5:10:66:b6:7a:c0:84:81:73:eb:a8:53:99:12:
         e1:c2:47:cb:be:b9:a1:0b:57:d3:31:b5:5e:fc:72:83:8d:1c:
         34:47:1d:fc:ae:e1:8e:42:e6:ab:cd:b1:d7:ca:22:8e:99:25:
         f3:b2:66:2c:f6:a5:67:8f:0e:30:70:ef:cc:93:3b:ea:4e:c0:
         df:c2:40:2b
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUI7cJ8KNJWK0OxmZK02F5t4cy7z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB
QjhGQ0IwQjAeFw0yNjA0MjAwNjMzMzRaFw0yNzA0MTkwNjM4MzRaMDMxMTAvBgNV
BAMTKEQzRTNEQjEyRTgyNDNDQzVBQUExQ0IxRjkyMzc1OTlBRjE0MTM0N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhDBL+RZ1EHbfx9IyP+PJIVuy
Xfaer3jhntIS2UKMQaZYEcaIDTK3RpMIgjt0b2nIq3SN56n7lEBPn3kS/keOsA72
2XZYmn4FlFbwfWGaQw8qakc6WMUd403+9oSlNadwboe3YQBXd2eiqC7Uz3RoqMFI
8ndEfLlseInwpv46808Ka8o3AspzWdrigutmbZEdMbWHWqN8Y8eSpRuGiTjFc+cn
mKMDZzWp2TqDEctldaYos/G38T01J5o0DonTAszH5M1LkJZk4R+GBR0LZHFrsyB/
y/SXuKLVig1ew7hrNuaC1IIO9ilgRB3fEERHRsGz6C8xCbViXrVlUq7wvGzVAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQU0+PbEugkPMWqocsfkjdZmvFBNH4wHwYDVR0j
BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1
MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDk4NDkwNDk2NjE3MDIxNDQyLzAvMzEzMDMzMmUz
MTM4MzMyZTMxMzIzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMzM5MzEz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWe3ejANBgkqhkiG9w0BAQsFAAOCAQEAlB9EOa1FbwaQfnf1
f4mFeY0uyjy4EQOLWHgE+LLb4hqv9fdf1DwKCHqFtFkWUSx4U9Mo1Rioz5k4wBnU
OaMMx0LxjxKNGl/VwGprF9HSFk8DLPIBoZ7H0m+D3GqmSvVjA7HhKM0EjKnvcI4h
t4V9yKgq/TztJiOKPz/LW+d3RBUDWYochmgEQLq0lTVCZXk4fsyGTbWk2j3i/7qV
ELpTY0pg9kTeGzanS4uKeSGxB/gPydsZDWhjH7UQZrZ6wISBc+uoU5kS4cJHy765
oQtX0zG1Xvxyg40cNEcd/K7hjkLmq82x18oijpkl87JmLPalZ48OMHDvzJM76k7A
38JAKw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:05:11 2026 by rpki-client