Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098786411550605315/0/3130332e3137372e32382e302f32332d3233203d3e203234343030.roa
File:                     3130332e3137372e32382e302f32332d3233203d3e203234343030.roa (raw, json)
Hash identifier:          eIOwU8yx6OMZfLjHurq4NMmZhnkUD0AdLmcR7WuaHFk=
Subject key identifier:   38:82:E9:C0:61:5F:74:1E:DA:B5:B8:A6:BE:DC:DA:70:A0:71:4C:D7
Certificate issuer:       /CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794
Certificate serial:       0FE1BC81DE45B84E8AF6930113F71D9BD82B1EBE
Authority key identifier: 8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/3130332e3137372e32382e302f32332d3233203d3e203234343030.roa
Signing time:             Tue 21 Apr 2026 01:50:03 +0000
ROA not before:           Tue 21 Apr 2026 01:45:03 +0000
ROA not after:            Tue 20 Apr 2027 01:50:03 +0000
asID:                     24400
IP address blocks:        103.177.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 00:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e1:bc:81:de:45:b8:4e:8a:f6:93:01:13:f7:1d:9b:d8:2b:1e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794
        Validity
            Not Before: Apr 21 01:45:03 2026 GMT
            Not After : Apr 20 01:50:03 2027 GMT
        Subject: CN=3882E9C0615F741EDAB5B8A6BEDCDA70A0714CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:cc:19:bb:9a:70:b4:1a:45:64:3c:2a:4d:30:
                    87:ca:9a:2b:53:26:e6:b7:f6:ed:bd:f5:08:26:22:
                    79:a9:10:b6:13:67:51:9a:80:b2:9a:62:00:33:60:
                    70:82:65:ae:63:a6:2d:06:e0:06:db:3b:16:6c:1f:
                    fb:de:bb:8a:52:bf:98:33:42:77:d8:2f:15:34:d7:
                    8d:a4:cc:05:df:45:f6:ef:a1:53:34:80:cf:a8:b7:
                    61:b0:24:42:ba:9d:11:9b:8e:f1:86:65:4c:71:9e:
                    17:22:93:69:ba:62:4f:60:e0:8d:60:30:14:67:e2:
                    d2:c2:d9:bf:b9:82:fe:30:12:3e:68:1b:e3:d6:3c:
                    08:b3:61:43:ec:55:77:72:5d:94:bb:fb:c0:d6:6b:
                    de:5f:33:97:03:c2:5e:38:79:c3:a4:20:69:0f:28:
                    f9:f6:f8:e9:13:c8:fc:7a:11:0c:ac:a7:4b:33:ec:
                    68:0d:98:8b:ed:a7:49:9b:0f:32:2a:18:4b:55:b4:
                    78:f4:2f:1e:5c:8e:b3:82:9d:94:7f:15:d4:3d:aa:
                    37:e5:c2:4d:0d:41:16:eb:9f:0c:56:57:fc:21:a4:
                    aa:9d:e2:05:df:2a:e3:df:81:07:9e:11:31:ad:9e:
                    ab:03:ee:49:dd:2c:65:1b:66:e3:9b:a4:61:98:4e:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:82:E9:C0:61:5F:74:1E:DA:B5:B8:A6:BE:DC:DA:70:A0:71:4C:D7
            X509v3 Authority Key Identifier:
                keyid:8D:C9:C0:3E:9D:EC:6A:8F:91:CB:72:21:5C:9A:4A:9B:8C:68:17:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8DC9C03E9DEC6A8F91CB72215C9A4A9B8C681794.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098786411550605315/0/3130332e3137372e32382e302f32332d3233203d3e203234343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:3f:c0:15:85:2e:78:2d:9b:02:be:58:2a:91:14:6f:d6:fa:
         e5:1d:c3:86:68:c8:66:e8:4c:60:5f:cb:e3:ae:c9:7a:e8:e8:
         9f:9a:1c:5a:e2:eb:f9:ac:c4:ae:6d:62:b7:ab:4e:1e:d6:bf:
         b6:e3:0c:ee:76:8d:4a:60:1e:6d:3d:6a:2d:c3:2b:d9:92:04:
         72:ce:76:a3:64:6d:f5:a1:64:a9:b6:63:ca:5d:87:4f:26:03:
         77:9f:9c:f1:6d:ce:5d:ef:16:34:60:13:63:be:7b:5b:a5:6e:
         a5:7a:51:3d:93:78:84:90:5d:a3:ad:33:32:90:20:1f:9d:93:
         b4:bf:65:9b:b0:9c:ee:07:46:6b:06:64:a0:cd:4e:0d:f3:26:
         d4:d9:fd:63:19:2b:e1:a0:16:0a:ed:6d:ac:9d:33:18:4f:04:
         2f:ee:e8:37:32:36:44:e9:6e:7f:fd:86:b6:59:9a:ee:ec:9a:
         c3:9a:e8:81:b2:b9:e7:00:34:70:cb:02:41:26:7a:e8:3f:fe:
         84:16:38:8d:f4:39:10:39:a0:32:68:8e:e9:97:47:5a:d1:60:
         18:8a:ee:92:7e:40:8d:21:30:1f:12:81:81:57:9d:c6:58:85:
         26:24:92:10:eb:fe:7a:7a:f9:9a:e4:7f:a5:d6:ae:52:c9:c6:
         95:e4:9a:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:00:48 2026 by rpki-client