Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e203233363530.roa
File:                     3130332e3138332e3132342e302f32332d3234203d3e203233363530.roa (raw, json)
Hash identifier:          SRdX0eoAfTBEFW/KA/KlOdg6+nDXveHTfI/p8qEbXQA=
Subject key identifier:   83:9B:A3:14:EF:6E:7C:43:81:CC:87:30:BF:0E:38:86:C4:9F:4B:26
Certificate issuer:       /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial:       77B2774A577CF30F4EE8DA5F8616046AE4C56A73
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e203233363530.roa
Signing time:             Mon 20 Apr 2026 06:53:03 +0000
ROA not before:           Mon 20 Apr 2026 06:48:03 +0000
ROA not after:            Mon 19 Apr 2027 06:53:03 +0000
asID:                     23650
IP address blocks:        103.183.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b2:77:4a:57:7c:f3:0f:4e:e8:da:5f:86:16:04:6a:e4:c5:6a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
        Validity
            Not Before: Apr 20 06:48:03 2026 GMT
            Not After : Apr 19 06:53:03 2027 GMT
        Subject: CN=839BA314EF6E7C4381CC8730BF0E3886C49F4B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:42:40:a0:f0:41:cb:c0:4b:17:bb:1d:ff:b8:
                    6a:24:4e:d9:b4:b6:f7:fe:5d:b1:9c:0b:92:3e:3f:
                    d3:31:b7:32:58:a1:eb:e3:c7:f5:18:81:2b:8e:8a:
                    75:b1:ad:dc:9d:8d:02:7e:a0:c7:a9:f9:57:c9:72:
                    96:ce:e4:05:74:18:4e:f0:6d:45:c2:24:b7:5e:1d:
                    b0:ce:68:e6:19:73:79:4e:2b:b2:66:86:4d:fe:7c:
                    75:58:cf:ca:bc:e4:f2:23:26:e9:07:b0:4a:de:b5:
                    e3:0f:e2:0e:e6:fc:80:17:2b:10:48:a2:88:6b:6d:
                    c0:12:56:4a:2f:89:f0:9e:b2:c9:bc:61:66:e0:66:
                    78:8b:ae:68:41:42:f4:5d:2e:8d:2d:99:aa:df:19:
                    94:85:aa:2b:c7:0a:21:e3:e7:a9:18:e8:c3:be:ce:
                    2e:db:b2:69:5e:b6:94:5a:0b:3e:22:ba:b7:a4:51:
                    f8:9e:72:6c:59:0c:e3:de:28:3f:c7:86:9d:64:e0:
                    eb:0d:d1:3f:06:95:db:3f:26:6f:f3:13:a2:39:ec:
                    aa:92:01:28:fd:b9:25:3c:68:37:0e:e6:cd:ed:fa:
                    c4:ef:cb:1d:20:4f:96:45:c8:72:33:e7:d2:20:f0:
                    d3:34:fd:21:ed:01:30:94:47:69:07:08:d6:7e:26:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9B:A3:14:EF:6E:7C:43:81:CC:87:30:BF:0E:38:86:C4:9F:4B:26
            X509v3 Authority Key Identifier:
                keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:44:80:c2:74:72:08:71:b4:2c:01:c9:a5:82:d4:d2:c0:
         16:b5:01:c2:95:c2:68:5b:0f:9d:e4:ea:50:ff:9d:9f:8d:6c:
         e8:6a:ac:f3:d7:73:e1:44:87:b9:20:44:3c:11:09:47:ac:45:
         fa:f1:91:2f:08:ef:19:2c:79:b9:70:d6:66:c6:8d:49:58:d5:
         40:d6:39:4b:85:6c:ee:96:99:14:69:82:99:ab:b1:9a:6f:92:
         2f:a8:ea:4e:02:5a:81:25:17:75:e6:4c:ee:da:f2:fa:45:06:
         a1:67:58:0e:db:5e:8c:db:8f:8c:98:fb:07:85:55:7e:97:96:
         9d:3e:97:27:6c:3e:c0:90:11:e2:c8:95:fe:77:2a:32:c7:37:
         24:a8:ec:ae:ff:a5:f2:9b:07:98:50:5b:2b:cb:73:ef:1d:63:
         53:a4:0d:39:c8:12:fc:76:6d:e2:4e:da:d5:ef:30:71:34:3b:
         ad:ac:0a:32:b9:aa:e4:29:90:8a:ca:4a:e3:2e:14:32:15:fa:
         7e:ec:d1:ea:c0:ed:01:69:77:c5:f5:a6:36:f2:a4:27:ca:6e:
         6d:5f:e4:ba:49:67:00:83:11:e4:6a:d8:c7:5f:e0:51:3e:d2:
         26:75:59:37:29:f7:dc:60:54:92:47:83:74:c6:e5:6e:c5:9c:
         4f:e8:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:14:11 2026 by rpki-client