Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/3130332e39302e3137362e302f32322d3232203d3e2034383038.roa
File:                     3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=
Subject key identifier:   17:5A:D3:DE:EB:7E:43:FF:2F:CC:B1:96:19:8B:39:9C:40:B6:92:FA
Certificate issuer:       /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645
Certificate serial:       022EE8AE31B6BD074D02618651D541A388FABC05
Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/3130332e39302e3137362e302f32322d3232203d3e2034383038.roa
Signing time:             Fri 24 Apr 2026 09:47:08 +0000
ROA not before:           Fri 24 Apr 2026 09:42:08 +0000
ROA not after:            Fri 23 Apr 2027 09:47:08 +0000
asID:                     4808
IP address blocks:        103.90.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 10:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2e:e8:ae:31:b6:bd:07:4d:02:61:86:51:d5:41:a3:88:fa:bc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645
        Validity
            Not Before: Apr 24 09:42:08 2026 GMT
            Not After : Apr 23 09:47:08 2027 GMT
        Subject: CN=175AD3DEEB7E43FF2FCCB196198B399C40B692FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:2f:d6:ed:5b:0f:dc:23:f0:d0:23:58:d7:
                    be:4b:4b:b8:98:33:86:d7:07:0a:78:f3:3c:e1:d7:
                    c7:e5:da:a6:a4:29:8b:e0:a7:c0:66:de:96:b4:79:
                    77:fe:3f:a3:ef:9e:ab:ec:e2:d2:6d:71:f9:f4:f6:
                    93:15:94:af:62:2c:d0:a6:60:3b:bc:14:df:8e:4e:
                    76:72:4a:38:cb:44:d2:e7:ee:e8:26:63:5f:ed:86:
                    5c:99:58:1c:22:51:57:42:79:55:58:44:6d:61:eb:
                    b2:21:3c:f3:0d:fc:2e:3a:f1:bb:40:a0:9f:f3:a6:
                    c7:70:92:54:4c:18:01:e7:56:af:5c:a6:90:d5:4f:
                    49:67:b2:38:75:2d:7c:a0:bb:ba:97:9f:57:50:1b:
                    1e:5f:c7:0c:d1:da:89:2a:5b:82:94:ea:9f:74:6b:
                    8e:4d:95:5e:ce:5b:2b:26:4d:9b:7d:87:e1:d1:9d:
                    e7:42:4b:6e:c7:d6:73:86:75:7c:aa:0e:90:72:ae:
                    c6:19:04:68:14:3f:b3:b4:5e:88:27:60:ae:b5:0d:
                    74:50:9b:ce:67:97:db:2b:fd:01:59:85:b4:4f:ab:
                    0d:be:9e:58:c0:b0:b0:0e:ce:82:22:28:93:26:c8:
                    37:ed:91:e4:95:6b:b2:de:06:8c:1a:e9:8d:75:f5:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5A:D3:DE:EB:7E:43:FF:2F:CC:B1:96:19:8B:39:9C:40:B6:92:FA
            X509v3 Authority Key Identifier:
                keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/3130332e39302e3137362e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:63:26:71:9f:27:6e:70:38:70:97:1f:b7:4e:4c:46:09:f6:
         b4:9a:46:6b:19:cf:64:e2:bb:a9:79:e8:56:34:07:8c:0b:b0:
         96:0b:bc:79:d3:cb:6f:ee:8e:4f:b6:df:e8:8a:1e:56:ca:a9:
         65:a9:45:69:6d:22:90:e8:28:43:c5:4a:99:d3:57:eb:0a:f2:
         63:de:0c:1b:6c:1b:aa:8d:b5:42:07:0a:ef:d4:5c:24:32:97:
         12:80:ae:4f:bc:73:93:e0:de:75:0e:24:97:51:37:e3:85:1e:
         d2:54:d4:02:21:97:ed:8d:44:e5:2b:45:ac:f2:87:b6:f0:30:
         33:7f:e2:c6:e0:f4:4f:53:9a:df:e8:67:7e:82:9b:3a:24:6a:
         ee:ef:ad:67:d1:6b:3d:7d:92:32:71:d2:5d:22:c9:9f:21:85:
         0c:9b:42:9e:df:0a:c0:96:62:d2:1a:07:b6:c8:ab:48:ba:c9:
         89:51:e7:90:c9:44:30:9b:74:ab:ac:fe:dc:97:b3:b7:b3:72:
         32:95:f2:85:25:4d:4c:6a:11:5d:80:ad:fa:e0:36:cb:ba:db:
         05:d1:a9:1c:a2:0a:b2:f7:71:cf:1c:f1:f4:46:c3:4b:ff:7d:
         7c:78:f5:93:5e:23:0d:30:cf:dc:21:43:fd:6d:31:50:09:b3:
         b7:ef:b1:73
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUAi7orjG2vQdNAmGGUdVBo4j6vAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5
QTJCRDY0NTAeFw0yNjA0MjQwOTQyMDhaFw0yNzA0MjMwOTQ3MDhaMDMxMTAvBgNV
BAMTKDE3NUFEM0RFRUI3RTQzRkYyRkNDQjE5NjE5OEIzOTlDNDBCNjkyRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cC/W7VsP3CPw0CNY175LS7iY
M4bXBwp48zzh18fl2qakKYvgp8Bm3pa0eXf+P6Pvnqvs4tJtcfn09pMVlK9iLNCm
YDu8FN+OTnZySjjLRNLn7ugmY1/thlyZWBwiUVdCeVVYRG1h67IhPPMN/C468btA
oJ/zpsdwklRMGAHnVq9cppDVT0lnsjh1LXygu7qXn1dQGx5fxwzR2okqW4KU6p90
a45NlV7OWysmTZt9h+HRnedCS27H1nOGdXyqDpByrsYZBGgUP7O0XognYK61DXRQ
m85nl9sr/QFZhbRPqw2+nljAsLAOzoIiKJMmyDftkeSVa7LeBowa6Y119Sg1AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUF1rT3ut+Q/8vzLGWGYs5nEC2kvowHwYDVR0j
BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB
QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5OTk0NjYzMTYwMzgxNDQxLzAvMzEzMDMzMmUzOTMw
MmUzMTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdasDANBgkqhkiG9w0BAQsFAAOCAQEAhGMmcZ8nbnA4cJcft05MRgn2tJpG
axnPZOK7qXnoVjQHjAuwlgu8edPLb+6OT7bf6IoeVsqpZalFaW0ikOgoQ8VKmdNX
6wryY94MG2wbqo21QgcK79RcJDKXEoCuT7xzk+DedQ4kl1E344Ue0lTUAiGX7Y1E
5StFrPKHtvAwM3/ixuD0T1Oa3+hnfoKbOiRq7u+tZ9FrPX2SMnHSXSLJnyGFDJtC
nt8KwJZi0hoHtsirSLrJiVHnkMlEMJt0q6z+3Jezt7NyMpXyhSVNTGoRXYCt+uA2
y7rbBdGpHKIKsvdxzxzx9EbDS/99fHj1k14jDTDP3CFD/W0xUAmzt++xcw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:20:28 2026 by rpki-client