Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/3130332e3233332e342e302f32322d3232203d3e203338303139.roa
File:                     3130332e3233332e342e302f32322d3232203d3e203338303139.roa (raw, json)
Hash identifier:          G3uzsK+ftbNUs4VTtZx4TroDdTxpDx+jmVLFQkNfjTo=
Subject key identifier:   B1:72:02:D5:FC:B2:F2:3D:BA:FD:18:10:10:3D:93:A2:4B:32:58:99
Certificate issuer:       /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Certificate serial:       3F292000E8843492BF4218EB0EA7B30DDD2C5411
Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/3130332e3233332e342e302f32322d3232203d3e203338303139.roa
Signing time:             Thu 25 Jun 2026 05:57:58 +0000
ROA not before:           Thu 25 Jun 2026 05:52:58 +0000
ROA not after:            Thu 24 Jun 2027 05:57:58 +0000
asID:                     38019
IP address blocks:        103.233.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 06:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:29:20:00:e8:84:34:92:bf:42:18:eb:0e:a7:b3:0d:dd:2c:54:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
        Validity
            Not Before: Jun 25 05:52:58 2026 GMT
            Not After : Jun 24 05:57:58 2027 GMT
        Subject: CN=B17202D5FCB2F23DBAFD1810103D93A24B325899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:f5:03:ec:70:dc:d0:70:06:37:93:93:6d:
                    70:9e:bc:ec:96:a1:63:12:1e:57:3e:71:66:74:05:
                    15:27:04:05:08:79:c4:ad:f4:40:02:68:88:a9:4b:
                    91:d9:ba:33:54:ad:ff:f0:ec:f8:76:61:22:67:d4:
                    0f:77:a8:b8:e4:1d:c0:f8:20:26:6c:d4:ff:45:af:
                    de:66:83:58:80:9b:96:af:60:0e:84:0a:a7:7b:da:
                    e2:02:7c:5b:25:b1:ee:f2:df:50:6a:76:1b:52:fb:
                    c6:71:c0:9f:f4:5b:df:29:f2:c4:1c:a5:09:f6:03:
                    87:83:5e:cf:d1:13:48:84:c5:c5:d6:de:f1:9d:d5:
                    89:46:e0:bf:27:34:84:b3:24:02:35:db:37:fa:5f:
                    a0:5e:d9:03:74:7b:d5:e1:98:f1:4a:31:02:32:c3:
                    f8:33:46:d5:f7:b2:24:5f:d8:d5:25:1d:5e:3a:d7:
                    5c:5d:91:31:cb:9d:b1:c5:d1:e8:95:5a:19:0d:a7:
                    91:72:ae:90:17:ab:bb:6c:40:98:01:43:ae:3d:68:
                    6e:d5:0a:3c:d0:54:f7:6c:e7:cd:50:17:0f:05:4f:
                    0e:19:db:12:96:8c:08:8b:8d:65:d0:90:7d:d3:d5:
                    46:59:cb:f0:d1:00:9e:47:a8:e2:b5:f0:50:44:71:
                    92:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:02:D5:FC:B2:F2:3D:BA:FD:18:10:10:3D:93:A2:4B:32:58:99
            X509v3 Authority Key Identifier:
                keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/3130332e3233332e342e302f32322d3232203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:5b:df:68:4c:d0:b6:c1:67:ab:8c:89:38:85:bc:13:95:
         89:6c:59:47:c6:35:74:fd:3b:8e:b8:5d:e1:2e:be:ba:02:72:
         61:fb:69:64:d0:78:3e:bf:6d:07:00:3f:c6:82:f3:47:4c:b5:
         01:60:81:d0:2b:c1:05:b8:99:11:52:11:fe:10:f5:11:fa:ea:
         12:a9:93:42:d2:e5:a2:0a:f7:d9:6b:62:e1:dc:47:32:d5:74:
         51:5d:c8:1c:0d:11:fc:00:8e:99:b9:e6:35:c9:21:ed:80:95:
         3c:30:02:fc:53:e0:05:21:53:9b:7e:57:ae:de:85:79:85:ba:
         94:53:83:ed:9f:58:7a:65:60:d0:ab:8e:e7:41:ca:cd:f6:ec:
         29:45:73:60:9a:91:03:03:28:4b:bf:7d:c2:f5:4a:bd:34:34:
         52:25:86:78:a0:a0:7d:82:9f:ee:b8:06:0d:22:5e:45:0e:7e:
         a4:5a:5d:56:b6:5e:2e:f8:b1:1b:a7:3f:59:2d:25:5d:fc:d0:
         ec:b9:9b:85:0a:8c:e6:8b:37:57:0c:95:64:6e:3a:02:e2:3d:
         f1:fd:c7:d1:46:e6:49:87:12:23:29:39:a4:cc:a0:e1:67:2f:
         a2:74:3a:be:2f:45:9c:e4:16:7b:95:73:b2:bb:3c:25:26:ff:
         8d:c9:7b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:59:05 2026 by rpki-client