Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa
File:                     3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa (raw, json)
Hash identifier:          IN2IWp9b73L95UufodS/94IdWqlYTDWZOnKKI30WHGM=
Subject key identifier:   EE:B0:55:67:82:D4:C8:91:BE:BD:E1:E1:76:6B:5E:7B:17:BD:59:86
Certificate issuer:       /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Certificate serial:       0BEB579497463CCBF07AAA034159BF14724F7ECF
Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa
Signing time:             Wed 22 Apr 2026 06:18:51 +0000
ROA not before:           Wed 22 Apr 2026 06:13:51 +0000
ROA not after:            Wed 21 Apr 2027 06:18:51 +0000
asID:                     4816
IP address blocks:        103.238.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 21:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:eb:57:94:97:46:3c:cb:f0:7a:aa:03:41:59:bf:14:72:4f:7e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
        Validity
            Not Before: Apr 22 06:13:51 2026 GMT
            Not After : Apr 21 06:18:51 2027 GMT
        Subject: CN=EEB0556782D4C891BEBDE1E1766B5E7B17BD5986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:77:64:4a:22:18:3c:3b:81:1a:85:2b:7a:
                    e9:c1:e0:b6:07:88:b5:7d:7a:16:e0:9f:06:b0:d0:
                    cc:ba:73:7e:2a:2b:35:a7:1d:30:4b:10:26:05:13:
                    72:1f:54:b0:db:fa:03:25:a1:ea:fb:86:40:9a:05:
                    14:56:9a:32:21:f1:0b:72:ea:8c:f2:e9:a3:7a:31:
                    1b:02:d3:04:d8:a0:43:47:ce:9b:b0:cd:61:11:3d:
                    c3:b2:b9:39:e9:b4:0b:65:8d:c2:80:8d:4b:f6:ac:
                    41:f8:3a:58:97:ad:ef:ec:fa:82:4d:55:8b:45:f4:
                    f1:74:58:5a:43:37:dd:05:f7:97:3b:a6:18:21:0c:
                    23:34:a8:8a:9e:22:1a:88:c6:ab:9f:dd:d0:21:22:
                    86:7c:66:11:0e:cb:d7:96:d6:f5:22:22:b7:2f:18:
                    d0:06:9b:7e:17:10:e8:b8:b8:1f:dd:7d:24:7e:2a:
                    97:97:7a:f6:54:31:45:63:12:07:bf:08:d7:ea:a5:
                    58:1f:9d:41:60:a2:50:44:1a:e2:2a:20:73:55:64:
                    1a:31:42:be:19:44:44:b7:cc:86:f0:1e:0d:9c:13:
                    f4:c1:2b:4c:18:ad:40:74:7b:60:e4:c8:9a:61:bb:
                    c2:e5:d4:ea:81:29:c8:d2:b5:d4:62:5a:ad:18:c8:
                    04:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B0:55:67:82:D4:C8:91:BE:BD:E1:E1:76:6B:5E:7B:17:BD:59:86
            X509v3 Authority Key Identifier:
                keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:ce:8d:86:70:2d:cd:51:4d:61:f5:97:56:87:df:70:37:
         3e:e8:ac:68:93:88:c3:b8:94:a0:e8:a7:cf:b1:d8:53:be:33:
         c4:41:63:e4:aa:9b:27:38:50:4c:85:56:48:91:91:30:9a:9d:
         dd:8b:a3:47:6b:3f:97:55:a3:c6:b3:66:95:2c:b4:2c:ab:c6:
         7e:f4:2f:7e:4d:97:3d:06:f4:e6:96:45:a5:d0:0f:0d:b9:04:
         ac:b2:d2:b8:78:c2:da:35:f1:8b:38:d5:76:ef:07:a4:9e:95:
         c1:b9:da:17:54:fc:91:3f:6a:94:bd:b2:29:19:34:f2:4b:34:
         e9:05:ce:3c:9d:40:28:f1:15:39:86:48:94:56:21:05:b2:35:
         3a:64:08:b2:e3:fb:f9:1b:24:39:90:f5:8b:82:43:dc:56:3c:
         39:ef:27:86:17:62:8b:11:5c:e6:a7:80:9c:05:05:fc:e9:0c:
         c8:9f:df:8c:bd:3f:27:01:37:f4:1d:b8:57:cf:ae:78:1d:58:
         9b:3b:36:59:9a:a9:04:52:c8:2f:fe:c0:1c:96:1f:8c:e2:91:
         d4:fb:6d:19:01:8a:b4:7f:7f:4a:ec:bb:bf:ee:b2:d9:54:a8:
         b3:59:a0:57:df:12:96:ec:7e:3f:f2:7c:9f:d9:1c:65:a7:99:
         52:0b:cf:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:50:49 2026 by rpki-client