Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136342e302f32332d3234203d3e2034383437.roa
File:                     3130332e3138312e3136342e302f32332d3234203d3e2034383437.roa (raw, json)
Hash identifier:          10fv5/c0A/emtbT+P1+/CnJtQAqImCsBoWn6eI/rRsE=
Subject key identifier:   7F:48:FB:C9:61:E3:EB:9F:70:0C:F2:12:F9:0D:11:F3:57:EB:5E:49
Certificate issuer:       /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Certificate serial:       34738EB8402D57726E939EBB35E5EF69DF804DFB
Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136342e302f32332d3234203d3e2034383437.roa
Signing time:             Sat 10 Oct 2026 04:02:38 +0000
ROA not before:           Sat 10 Oct 2026 03:57:38 +0000
ROA not after:            Sat 09 Oct 2027 04:02:38 +0000
asID:                     4847
IP address blocks:        103.181.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 02:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:73:8e:b8:40:2d:57:72:6e:93:9e:bb:35:e5:ef:69:df:80:4d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
        Validity
            Not Before: Oct 10 03:57:38 2026 GMT
            Not After : Oct  9 04:02:38 2027 GMT
        Subject: CN=7F48FBC961E3EB9F700CF212F90D11F357EB5E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:f6:18:8e:fa:d7:c5:7b:6d:da:53:10:0d:
                    16:bf:bf:18:77:11:8d:f7:84:bd:87:fc:b0:75:ff:
                    41:60:f9:06:36:fe:21:35:21:0a:10:a1:a8:02:b5:
                    b4:78:56:da:14:99:fe:a7:23:72:54:e4:00:f4:89:
                    a8:40:c9:97:48:bb:69:11:33:a1:87:1f:c4:e2:c2:
                    38:57:7c:ad:ca:63:47:c9:32:1e:26:57:8c:4f:72:
                    41:bf:9d:af:27:a6:6c:b1:fc:27:d8:9d:79:98:7e:
                    dc:25:dd:16:38:bb:6c:35:ed:8f:85:e6:f9:7d:21:
                    11:aa:30:7b:bf:d8:b5:52:36:8f:fd:46:19:d0:79:
                    53:66:10:88:71:1f:b3:f7:33:a8:e4:f4:19:ac:3d:
                    ab:6c:5a:2d:ec:5a:72:09:9d:f5:fe:08:07:4d:cd:
                    9c:95:85:49:29:70:99:2c:0f:3b:0e:6f:a2:ec:7c:
                    69:5c:cf:9b:df:d4:b5:20:36:ff:39:10:b0:45:88:
                    a6:31:0a:96:fe:2b:68:64:14:05:f3:8c:5a:b2:b8:
                    c9:5e:42:4d:53:b6:88:bf:1a:c9:d7:20:08:3f:27:
                    13:bf:ba:a3:8d:16:85:7a:1a:94:ef:6d:bc:3d:cb:
                    13:11:e4:6d:08:bd:dc:06:50:6f:d6:41:bf:d4:49:
                    53:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:48:FB:C9:61:E3:EB:9F:70:0C:F2:12:F9:0D:11:F3:57:EB:5E:49
            X509v3 Authority Key Identifier:
                keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136342e302f32332d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:bc:67:6a:55:58:fc:63:3f:4c:5e:42:cd:f4:f8:85:0b:
         3d:df:e7:4d:de:d4:cc:63:da:21:e8:ee:c2:66:05:a2:c9:d4:
         b4:85:f0:8d:53:f6:93:1e:4d:04:37:34:60:d9:8e:13:58:57:
         27:0d:c8:dc:19:79:80:f8:12:a5:c7:c0:c8:38:fd:ab:43:b7:
         a6:b4:fa:df:1a:6b:54:1f:76:6b:8c:4e:2d:2f:32:c6:14:95:
         36:8e:17:3a:0d:bd:e4:01:9c:c2:64:d8:f5:52:b8:38:f8:6d:
         02:3b:25:56:14:ce:3b:e3:79:8b:70:5e:91:c3:55:74:74:b3:
         20:0c:c5:14:7c:f0:43:cd:18:98:4f:f0:26:44:3c:16:27:2d:
         ba:fb:07:cf:80:d7:c6:c9:54:c2:e9:57:a8:38:74:a7:0c:45:
         b4:c2:ba:82:5e:0e:3e:34:70:61:39:21:d3:42:c1:ba:14:12:
         35:2f:9c:9b:1f:7f:50:4c:e0:4a:a9:72:ae:44:7e:f0:8c:73:
         6d:d3:ad:21:66:df:58:2e:4e:2d:b8:40:4a:7d:6f:84:4d:4c:
         ac:21:94:80:38:b5:e6:05:1e:e3:4d:e4:ea:ba:dc:7a:15:60:
         55:22:5a:99:f0:48:a1:01:a4:9d:c3:34:63:25:9c:d4:e6:b3:
         b5:13:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:58:50 2026 by rpki-client