Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e20313533393131.roa
File:                     3130332e3138332e3132342e302f32332d3234203d3e20313533393131.roa (raw, json)
Hash identifier:          x3Yq/zr6n3jksb9K0qH6wx/J5yv5qF5RJzz8wf9ZdZ0=
Subject key identifier:   23:58:CB:91:0C:24:C5:00:16:8F:09:34:E3:09:30:26:41:6E:19:59
Certificate issuer:       /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial:       28578A8C370A515F78A202460755D412B0F96DAD
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e20313533393131.roa
Signing time:             Mon 20 Apr 2026 06:53:03 +0000
ROA not before:           Mon 20 Apr 2026 06:48:03 +0000
ROA not after:            Mon 19 Apr 2027 06:53:03 +0000
asID:                     153911
IP address blocks:        103.183.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:57:8a:8c:37:0a:51:5f:78:a2:02:46:07:55:d4:12:b0:f9:6d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
        Validity
            Not Before: Apr 20 06:48:03 2026 GMT
            Not After : Apr 19 06:53:03 2027 GMT
        Subject: CN=2358CB910C24C500168F0934E3093026416E1959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:0f:52:9b:53:2a:51:f4:45:f0:58:b4:81:
                    be:29:64:ae:f0:13:ff:16:ba:3f:7a:41:69:14:64:
                    fb:da:3b:10:f8:8e:51:9a:a8:20:77:31:79:d0:74:
                    86:4f:e9:6f:4b:5c:24:a8:ff:03:22:29:f5:28:ae:
                    a7:d6:c4:02:c4:c8:18:87:f8:fe:ec:c6:3a:a8:16:
                    77:00:0f:cd:e8:de:f2:27:1e:d8:4c:f6:c4:43:8c:
                    5e:63:df:75:24:e9:bf:e6:66:cc:73:42:74:82:ef:
                    78:4b:f9:67:41:05:b2:db:df:27:2f:6a:1a:96:89:
                    29:28:f6:da:a9:6f:d0:6b:06:6c:cc:92:d8:cc:14:
                    da:97:57:a1:75:7f:ed:b3:f4:7e:5e:0f:2b:00:de:
                    ff:74:97:25:4d:56:0e:cb:e9:e2:db:c5:e4:17:3c:
                    2c:8c:03:36:38:79:72:30:8e:63:9d:c5:d0:f9:0d:
                    a2:fb:4c:cf:2f:f6:5a:72:8d:17:0e:e5:e8:1e:c3:
                    a6:09:5e:bf:10:1f:2a:be:dc:01:e4:5f:5d:fd:5b:
                    78:b0:0b:bb:ba:29:45:0e:ae:1e:07:12:66:e6:04:
                    24:5e:b0:fd:62:3b:b4:e3:5e:47:b4:8c:f3:d4:82:
                    7b:7f:f5:52:9e:45:e4:f4:af:98:4f:5f:2e:69:9a:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:58:CB:91:0C:24:C5:00:16:8F:09:34:E3:09:30:26:41:6E:19:59
            X509v3 Authority Key Identifier:
                keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e20313533393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:00:6e:f8:07:d0:2c:35:3b:4c:3a:ce:d5:c1:66:de:fa:a8:
         00:a3:2d:7e:9a:eb:44:d0:cc:1b:51:ef:3d:66:e0:c6:65:58:
         83:e5:00:07:0c:a3:4e:10:d5:f7:6d:e9:59:14:9d:0a:f9:17:
         03:a4:f6:56:a0:ac:e8:40:95:42:d8:ca:f1:81:21:9f:a6:4b:
         cf:3a:95:48:8e:e7:4e:c4:31:b4:aa:e5:c7:8e:7a:f6:be:c8:
         1a:f5:8f:d1:58:c2:df:87:19:95:30:f7:6e:f4:06:b2:0d:91:
         f2:0d:b1:50:59:75:e9:f3:66:dc:d5:46:3b:78:d4:eb:28:fa:
         df:24:82:a2:e8:5b:bf:a2:ed:68:e7:0c:77:ba:75:e4:7e:f5:
         68:e2:6e:d6:5b:cd:1f:f5:df:d4:4c:2b:a0:20:2b:7b:4e:34:
         93:97:42:65:ef:4b:e8:ab:da:d2:6a:48:13:39:89:7a:b9:8b:
         21:93:bc:a4:b0:d2:4f:56:20:df:52:22:51:ca:37:c8:9a:9c:
         87:82:c5:46:fc:78:1c:94:91:a9:1b:c5:1f:80:b6:67:d1:ae:
         a4:26:3f:e8:56:f1:7c:9c:a0:93:46:da:73:b1:b0:02:f3:ba:
         ee:bd:2c:fd:2b:1a:0f:f5:5f:79:41:76:2c:7c:8f:de:02:18:
         09:39:00:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:04:05 2026 by rpki-client