Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3130332e38382e33322e302f32322d3332203d3e20313336313838.roa
File:                     3130332e38382e33322e302f32322d3332203d3e20313336313838.roa (raw, json)
Hash identifier:          jQqLEWUxduW+9IQ9JLGbp8S9ysifXuIYjYCe/8hazZs=
Subject key identifier:   0F:5C:33:C6:BE:AB:50:79:ED:05:B9:1B:86:B0:46:89:25:40:84:29
Certificate issuer:       /CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
Certificate serial:       22247D3228325F57E67D69A37B22F063F9A53136
Authority key identifier: 0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3130332e38382e33322e302f32322d3332203d3e20313336313838.roa
Signing time:             Tue 21 Apr 2026 16:17:45 +0000
ROA not before:           Tue 21 Apr 2026 16:12:45 +0000
ROA not after:            Tue 20 Apr 2027 16:17:45 +0000
asID:                     136188
IP address blocks:        103.88.32.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:24:7d:32:28:32:5f:57:e6:7d:69:a3:7b:22:f0:63:f9:a5:31:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A37AC88E303F4BB834C180B06F250ADE69700BF
        Validity
            Not Before: Apr 21 16:12:45 2026 GMT
            Not After : Apr 20 16:17:45 2027 GMT
        Subject: CN=0F5C33C6BEAB5079ED05B91B86B0468925408429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:6a:d8:dd:30:a7:be:1e:bf:cb:43:c2:03:
                    80:fc:c0:e4:a0:98:3d:fa:f2:a3:14:8e:2e:ba:c1:
                    9a:8b:f6:42:22:e6:ef:ec:7c:ca:d1:b8:a4:b0:0c:
                    b4:1c:cc:c1:81:f1:f3:4f:73:f9:47:66:f1:49:ff:
                    e4:56:4a:03:1d:fa:eb:0d:9d:b2:de:e8:9d:ae:c4:
                    fe:31:f2:5f:80:3c:04:03:2c:a5:fd:53:ba:6a:ae:
                    54:6c:7d:7c:9d:cf:91:75:bb:9d:b3:da:5b:5f:32:
                    a5:d3:d6:d8:19:bd:8f:9e:8c:78:d1:c0:75:6d:68:
                    fb:45:87:ed:35:87:86:70:bc:f3:e1:c2:ea:9d:ce:
                    9a:fe:c4:fe:cf:38:7d:aa:c7:64:ba:8b:58:5e:09:
                    79:d1:c2:a8:52:d8:9f:8e:a4:e6:60:3a:20:db:93:
                    ac:c3:5e:d5:5b:4e:86:ab:57:08:6f:c9:c7:ac:65:
                    e8:5c:20:72:82:85:b5:ed:f2:fb:51:84:fd:ed:cd:
                    aa:dc:a1:8e:6e:28:a7:df:b3:9b:90:e5:97:61:53:
                    cd:0f:79:12:a4:4f:45:c0:fa:2b:0f:c9:e3:5b:ac:
                    9d:ee:68:b4:ab:43:f7:d3:2d:c5:05:57:26:0e:6f:
                    55:a2:c0:b1:af:09:9a:a4:f7:3f:12:d9:9f:83:61:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5C:33:C6:BE:AB:50:79:ED:05:B9:1B:86:B0:46:89:25:40:84:29
            X509v3 Authority Key Identifier:
                keyid:0A:37:AC:88:E3:03:F4:BB:83:4C:18:0B:06:F2:50:AD:E6:97:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/0A37AC88E303F4BB834C180B06F250ADE69700BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0A37AC88E303F4BB834C180B06F250ADE69700BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577269250/0/3130332e38382e33322e302f32322d3332203d3e20313336313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.88.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:6a:0c:3b:09:b9:94:80:a0:61:8c:21:20:a0:da:16:33:
         7d:92:c3:a1:90:41:ec:9a:c1:37:61:24:4a:de:f5:16:04:3d:
         ce:ea:9c:3e:5c:3f:51:34:29:f9:35:06:24:0c:24:db:15:2a:
         f3:39:e0:0b:b2:13:5b:e3:cd:9c:42:29:29:fd:75:1a:0d:fd:
         54:52:ac:46:36:bb:d6:60:5a:59:9f:26:0e:2e:13:06:53:12:
         c1:29:9d:b1:58:a3:bf:2c:9a:74:b4:30:94:ad:56:00:96:fd:
         37:fc:13:6f:f4:2e:9e:37:dc:c0:f6:f0:a4:d1:44:00:ee:4c:
         50:9d:ac:9f:e6:da:49:9d:e1:26:2c:d6:46:f6:d3:bf:f3:57:
         d9:08:81:9e:3b:62:5a:70:a5:4e:1c:79:a5:ed:8a:62:4d:10:
         4e:97:e5:26:30:36:b4:83:11:bf:c8:1d:dd:fc:c1:34:68:0d:
         2f:5e:d1:0d:2f:64:78:d6:3b:2a:8d:63:79:8c:83:3e:69:7a:
         a8:3f:bb:28:18:ab:06:1e:f7:2b:a4:db:8d:a2:9b:09:16:9d:
         e1:74:bc:5d:06:55:93:b3:c3:c6:cc:fd:fe:f8:49:c8:d6:9d:
         a3:d7:7e:c8:ed:ed:2c:0c:1e:50:52:8b:41:ee:36:40:99:aa:
         2f:11:44:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 18:03:36 2026 by rpki-client