Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e322e3231322e302f32322d3232203d3e20313339313336.roa
File:                     3130332e322e3231322e302f32322d3232203d3e20313339313336.roa (raw, json)
Hash identifier:          YN7YgRi2mRIaq5c5106LZDoyKZ3EpsCyTPUZhpV1GfQ=
Subject key identifier:   48:74:A9:B2:7F:C7:AD:AC:68:E3:8F:79:87:CF:DE:05:E6:87:28:08
Certificate issuer:       /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial:       38DF9E1DBA9BA47175EFA35650426B4A824EE596
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e322e3231322e302f32322d3232203d3e20313339313336.roa
Signing time:             Wed 19 Aug 2026 09:09:43 +0000
ROA not before:           Wed 19 Aug 2026 09:04:43 +0000
ROA not after:            Wed 18 Aug 2027 09:09:43 +0000
asID:                     139136
IP address blocks:        103.2.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 15:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:df:9e:1d:ba:9b:a4:71:75:ef:a3:56:50:42:6b:4a:82:4e:e5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
        Validity
            Not Before: Aug 19 09:04:43 2026 GMT
            Not After : Aug 18 09:09:43 2027 GMT
        Subject: CN=4874A9B27FC7ADAC68E38F7987CFDE05E6872808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:36:d6:b5:75:0f:eb:6c:18:69:1d:fe:57:72:
                    57:b7:23:c5:8e:3d:a1:cd:39:23:00:fb:9d:ce:ba:
                    69:5d:03:8e:d3:66:79:f5:82:51:29:61:e2:a2:8a:
                    64:60:c2:84:58:ad:b9:6c:20:53:ea:c9:c9:3f:f4:
                    19:c2:16:9d:46:ce:b2:b2:27:6c:5e:1c:26:e7:e4:
                    cc:cb:2c:2d:dc:37:1e:16:b5:8e:bc:d7:d8:0e:c9:
                    9c:c8:eb:76:f2:d1:99:4a:e9:a8:e1:fd:1f:d8:85:
                    1b:3d:fe:97:a9:6c:eb:82:8a:77:87:a1:db:f3:7a:
                    be:d5:6e:43:c6:06:7c:a2:02:56:31:88:24:5f:7a:
                    db:9c:09:20:17:64:ad:cb:30:4a:b3:4d:e9:08:95:
                    ca:b9:f0:64:b0:5a:32:c6:63:a4:ef:ab:31:c4:de:
                    3e:a3:76:eb:cb:e1:36:ee:8d:98:16:cd:f6:ee:69:
                    3b:ea:6f:b1:d3:e8:7b:0a:14:68:bd:73:72:f9:76:
                    b3:d6:92:33:40:6c:60:e0:f4:7a:fc:bd:1a:35:82:
                    ba:a2:5f:4f:e3:bf:5a:5f:25:28:c3:d2:e3:05:c8:
                    e6:84:e7:be:c7:66:b9:a9:83:cd:ea:65:b6:ee:7c:
                    f1:f1:2f:36:b2:1e:c6:d9:68:ac:a8:af:13:1e:cd:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:74:A9:B2:7F:C7:AD:AC:68:E3:8F:79:87:CF:DE:05:E6:87:28:08
            X509v3 Authority Key Identifier:
                keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e322e3231322e302f32322d3232203d3e20313339313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:e0:74:e2:16:fb:5c:77:9a:d9:9f:e7:e3:59:17:37:95:22:
         25:f6:6d:99:06:ad:6c:b7:6d:4b:db:79:88:c6:d7:89:af:33:
         40:c7:8c:bc:2a:2a:dd:1e:53:60:6c:37:c0:91:fc:21:0f:dc:
         37:0d:c2:86:9a:60:1e:dd:40:15:4e:30:9a:c6:51:09:18:38:
         3a:1a:e3:93:7c:d1:47:56:02:8d:3c:30:1a:9a:74:5d:16:62:
         e9:4d:5b:a2:4a:73:c4:2c:c7:ba:d4:e4:11:85:38:43:13:8f:
         b8:b3:9a:e4:b3:cb:16:7f:55:5d:d3:ff:d5:06:e6:1c:77:ec:
         87:48:7a:1e:b0:73:2b:21:c8:9f:ba:ee:51:ca:dc:f3:91:aa:
         dd:41:a6:c2:d0:78:ff:db:4d:15:98:de:71:37:01:06:c8:24:
         99:62:a1:cd:7c:01:8a:c2:ad:33:67:25:3c:55:73:f6:e7:c5:
         a6:7f:e8:cc:1d:b6:ff:0f:4c:61:69:c7:3f:f6:d3:fa:d8:94:
         a7:c7:22:90:aa:d2:c1:50:54:27:e7:87:f4:63:01:f8:49:0b:
         24:a4:86:d9:22:f5:36:22:7e:c7:de:f9:be:d2:0b:41:90:ba:
         44:18:1f:52:af:22:64:81:80:03:d8:bc:7d:61:63:4e:dc:e5:
         52:72:97:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:08:04 2026 by rpki-client