Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3133302e302f32342d3234203d3e2034383437.roa
File:                     3130312e39362e3133302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          ztj4TIPHcK5ivl+9NmAGeK2Itc9Oqt+5hlO18neMVjM=
Subject key identifier:   09:49:CA:F1:15:B3:8D:B0:09:F9:80:FA:0C:D5:EE:17:D2:7C:FF:44
Certificate issuer:       /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB
Certificate serial:       7864DBC41CC9B29FA4A4DD8734B6BA3D8DEDF929
Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3133302e302f32342d3234203d3e2034383437.roa
Signing time:             Wed 20 May 2026 03:53:23 +0000
ROA not before:           Wed 20 May 2026 03:48:23 +0000
ROA not after:            Wed 19 May 2027 03:53:23 +0000
asID:                     4847
IP address blocks:        101.96.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 02:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:64:db:c4:1c:c9:b2:9f:a4:a4:dd:87:34:b6:ba:3d:8d:ed:f9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB
        Validity
            Not Before: May 20 03:48:23 2026 GMT
            Not After : May 19 03:53:23 2027 GMT
        Subject: CN=0949CAF115B38DB009F980FA0CD5EE17D27CFF44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:4b:21:8d:25:31:af:73:29:21:57:80:6b:
                    db:2a:34:ed:ad:5f:e2:d8:e3:45:10:e2:40:ec:72:
                    00:94:56:1f:93:89:b7:53:b3:46:66:46:99:da:9e:
                    21:06:08:6b:c3:8d:b4:3a:06:d2:bb:22:85:45:f1:
                    7d:77:b8:a5:a9:8b:4f:06:76:7c:04:48:b6:46:10:
                    97:d8:56:bc:21:09:f6:a6:8f:57:a1:5d:6a:6e:e2:
                    cb:c5:09:96:d0:fc:f6:e9:4d:36:16:fa:8a:15:6c:
                    27:26:ac:eb:6a:df:11:52:07:4c:c3:bf:ba:d8:8c:
                    bf:12:1f:53:d3:97:c2:c6:33:f8:da:41:6e:cc:ca:
                    9b:63:6b:b0:4c:ce:a4:fd:73:76:fa:65:e9:b6:5c:
                    ef:b7:25:f1:6d:7d:69:0c:40:47:1d:7d:17:d4:22:
                    9e:9e:ff:a8:68:58:7b:c5:79:19:f6:a6:42:af:8c:
                    d5:34:70:a0:88:51:cc:11:39:ad:7d:70:19:d2:f0:
                    ab:91:53:d3:6d:66:7f:07:9e:13:07:fd:78:30:69:
                    3d:a4:89:5e:57:58:78:16:2f:68:4d:97:2f:82:2b:
                    e7:f4:c8:19:7e:bc:d1:74:3a:c7:b9:02:7d:98:95:
                    2c:90:2f:f7:93:41:69:53:7e:98:73:32:0a:ae:80:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:49:CA:F1:15:B3:8D:B0:09:F9:80:FA:0C:D5:EE:17:D2:7C:FF:44
            X509v3 Authority Key Identifier:
                keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3133302e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.96.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d7:d6:0a:8e:f4:3b:b3:58:d2:ac:58:f5:dd:b4:0f:22:4f:
         fc:aa:e4:ba:b2:cd:1a:c7:7d:59:f9:e1:bb:64:8d:b9:6d:98:
         09:9c:b0:34:fb:84:0e:ae:3b:aa:1f:1c:36:2f:e6:b3:74:4c:
         f7:12:2d:9c:c1:d2:d0:e2:62:c1:f6:60:ca:76:0f:ba:8c:7d:
         6c:a5:13:a0:3f:38:05:75:28:73:ca:45:b1:cf:85:12:79:90:
         78:3f:8d:15:56:1e:27:a3:86:c9:16:52:ee:95:f3:36:e6:e6:
         5c:35:93:1e:93:cd:57:d0:90:17:12:d0:4d:fd:dd:6c:0a:53:
         2e:c5:17:6c:e2:9c:29:17:22:27:a4:ab:07:77:a1:40:21:78:
         32:23:52:01:81:ac:eb:a7:34:c6:ed:2c:d3:7c:37:3a:e3:cf:
         39:85:d0:f9:d9:b3:4a:66:b2:d6:12:3c:fa:c2:5e:cb:e8:8f:
         7b:55:88:e1:3d:b8:3e:a6:89:df:22:86:9e:0f:a5:58:2c:7c:
         2a:92:27:40:fc:89:6b:3a:61:c5:a6:ab:35:12:5b:64:5e:f3:
         73:85:57:81:bd:af:eb:22:a5:b9:dc:2f:ee:d1:be:2d:59:9a:
         0a:06:69:df:99:4b:c2:19:4e:52:a8:0c:c2:98:9b:9f:db:e6:
         bc:c6:82:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:30:03 2026 by rpki-client