Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/3130332e3131302e3133382e302f32342d3234203d3e203539303132.roa
File:                     3130332e3131302e3133382e302f32342d3234203d3e203539303132.roa (raw, json)
Hash identifier:          74p3eAG8K0Xrv2nNxKKWTueHZVFekMZMwv9gE8TOGl0=
Subject key identifier:   37:BF:F2:48:11:7E:E4:AA:A9:F4:90:CF:DE:C7:ED:84:1B:2E:43:25
Certificate issuer:       /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Certificate serial:       7B246132A53AEF5D524899D3D52A29AF7041B7B9
Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/3130332e3131302e3133382e302f32342d3234203d3e203539303132.roa
Signing time:             Thu 23 Apr 2026 07:47:12 +0000
ROA not before:           Thu 23 Apr 2026 07:42:12 +0000
ROA not after:            Thu 22 Apr 2027 07:47:12 +0000
asID:                     59012
IP address blocks:        103.110.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:24:61:32:a5:3a:ef:5d:52:48:99:d3:d5:2a:29:af:70:41:b7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
        Validity
            Not Before: Apr 23 07:42:12 2026 GMT
            Not After : Apr 22 07:47:12 2027 GMT
        Subject: CN=37BFF248117EE4AAA9F490CFDEC7ED841B2E4325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9a:74:cf:23:a0:5d:39:fa:b2:84:79:28:81:
                    6d:32:e2:5b:cc:aa:44:c2:7a:b0:df:b7:f1:15:05:
                    70:bf:9c:95:aa:60:8f:28:46:98:e6:f4:b5:36:57:
                    41:e5:52:ff:ec:79:57:2b:b9:d9:30:0f:ae:2b:19:
                    82:e5:2d:22:51:62:4f:1b:5c:91:a3:7d:ff:6b:41:
                    56:67:7c:ba:2a:97:a6:dd:ab:03:fc:06:b8:67:2e:
                    d3:40:ea:f3:1b:8b:46:20:65:1c:dd:17:5f:d5:7e:
                    d1:c6:53:c4:b8:72:c0:92:52:93:f7:15:46:a2:95:
                    7a:35:ec:58:47:69:21:6e:e9:3b:42:ec:01:fa:31:
                    0a:c4:52:69:b0:f2:35:5d:b4:33:20:49:6a:06:5e:
                    42:0d:5d:a2:bf:32:35:8c:e3:a5:37:4f:cc:a8:3e:
                    8c:42:f6:40:5c:66:66:89:ee:e9:26:6b:9c:0d:5e:
                    73:1c:30:bd:b5:80:f0:74:21:f0:cb:e1:a2:e8:89:
                    e2:77:81:2a:a1:3a:d4:00:9b:bf:ac:62:0c:66:00:
                    2a:e0:86:34:b0:f6:57:f0:b7:db:07:15:47:01:fc:
                    bd:43:f3:de:2e:5d:12:57:4f:bd:c9:e2:75:37:20:
                    00:77:b8:98:0b:e8:f1:93:35:5e:d7:48:19:aa:82:
                    bd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BF:F2:48:11:7E:E4:AA:A9:F4:90:CF:DE:C7:ED:84:1B:2E:43:25
            X509v3 Authority Key Identifier:
                keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/3130332e3131302e3133382e302f32342d3234203d3e203539303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:3b:6b:03:ae:4e:9e:5f:74:d3:55:f9:8d:e2:82:64:e9:
         dc:3b:1a:70:ad:ce:cf:dc:41:2b:99:dc:12:f1:d5:de:78:53:
         65:fe:18:57:58:76:af:ba:84:aa:3f:8f:7a:c7:07:c7:d1:d8:
         c6:6b:71:23:fe:03:a3:31:c5:67:97:f5:b1:00:d2:d9:26:c9:
         33:b4:e8:60:66:84:c9:16:6d:92:bd:b1:e6:ed:33:ba:69:b3:
         cf:e1:af:9a:20:7d:04:5d:1f:6b:64:fd:d8:4c:3e:ba:38:92:
         0e:38:f9:bb:b0:89:b1:e6:71:46:21:f2:60:3a:90:1c:ca:ec:
         86:ff:41:a8:0d:ac:1e:4d:53:88:55:c1:42:2b:82:74:bf:3c:
         76:66:1a:10:6c:36:cc:ab:63:8d:01:9f:fd:a2:69:23:5d:12:
         fd:b8:3a:ce:6c:85:f0:cc:c4:a3:ea:b7:4b:4d:c1:de:cb:1c:
         43:2b:f0:60:4a:07:87:15:7b:ce:e1:d3:bf:57:98:15:7f:22:
         f0:1b:dd:63:dd:ea:8e:0b:9c:08:86:64:de:a3:02:85:9f:f6:
         fa:f7:ed:05:15:b2:ed:ca:dc:e7:a1:c9:ca:e9:de:04:2c:82:
         2a:47:23:d2:4b:7d:a1:27:d2:fb:0b:70:e8:9b:80:7a:09:ce:
         a6:b2:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:30 2026 by rpki-client