Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3130332e35322e3139362e302f32322d3234203d3e203337393633.roa
File:                     3130332e35322e3139362e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier:          /e68HlPUv2dOjZkFKbuODFjZsrCs3tP2yL0LmD1eHOs=
Subject key identifier:   9A:DA:00:04:CF:FE:A0:4E:34:27:4C:81:30:F2:FB:98:46:16:C1:3C
Certificate issuer:       /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
Certificate serial:       26B325BD8E96B1544EF422F5DFC570E904292497
Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3130332e35322e3139362e302f32322d3234203d3e203337393633.roa
Signing time:             Wed 25 Mar 2026 08:06:28 +0000
ROA not before:           Wed 25 Mar 2026 08:01:28 +0000
ROA not after:            Wed 24 Mar 2027 08:06:28 +0000
asID:                     37963
IP address blocks:        103.52.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 09:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b3:25:bd:8e:96:b1:54:4e:f4:22:f5:df:c5:70:e9:04:29:24:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD
        Validity
            Not Before: Mar 25 08:01:28 2026 GMT
            Not After : Mar 24 08:06:28 2027 GMT
        Subject: CN=9ADA0004CFFEA04E34274C8130F2FB984616C13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:04:88:ef:55:c7:c9:23:28:0c:41:22:01:
                    12:5a:45:5d:35:d6:03:10:79:56:98:1d:b1:be:83:
                    ac:b0:75:97:9a:5a:c8:8e:2d:13:91:c2:6b:a0:1d:
                    95:c6:27:1e:bb:ad:09:ae:24:6f:09:65:2c:76:52:
                    5d:f7:3b:13:a2:08:4f:c5:b2:18:07:e8:bb:83:53:
                    ad:12:e9:85:11:90:f6:30:20:bb:67:2e:b7:f0:12:
                    d6:56:3c:f3:fd:ef:4c:31:fa:da:7e:a1:39:e7:ac:
                    c6:fb:75:ee:95:64:08:4d:fc:ee:49:dd:e9:83:3e:
                    ce:03:87:bc:e0:76:93:59:3e:1d:89:72:fb:c6:26:
                    ab:a9:b5:be:31:cb:88:3f:66:9e:5f:60:de:3c:b3:
                    14:71:ed:8e:89:d4:ac:80:31:d0:64:3d:f7:22:0a:
                    09:36:e5:5b:7e:df:f3:75:63:90:0e:17:11:9e:44:
                    bf:0e:21:86:97:13:2e:06:6e:1e:c8:e3:9c:ac:7d:
                    86:00:5d:bc:25:10:7f:7e:e1:de:e1:ca:16:b5:5d:
                    75:90:1d:61:04:bb:ac:ed:41:4c:86:a5:d4:0f:78:
                    7e:1a:29:40:65:2a:4a:c5:f5:d9:cb:93:54:10:f9:
                    4a:5e:5a:73:46:4b:0c:a0:7f:43:70:94:e6:28:66:
                    3c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DA:00:04:CF:FE:A0:4E:34:27:4C:81:30:F2:FB:98:46:16:C1:3C
            X509v3 Authority Key Identifier:
                keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3130332e35322e3139362e302f32322d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:c5:5e:95:f8:7c:c2:99:a2:bd:16:51:60:a2:35:5c:d7:ff:
         89:62:d1:8e:9a:84:22:08:ca:23:40:e8:28:33:03:cb:59:fc:
         45:dc:12:2b:f7:3e:b0:7c:4a:25:73:e8:79:7e:7d:51:9e:2f:
         57:86:c5:58:53:14:e6:c2:12:97:75:e8:52:93:a4:38:90:ab:
         9a:e7:c8:3f:cd:81:af:6d:7f:bd:7a:82:4b:9b:fd:d9:1b:d3:
         f7:23:8b:9d:b3:aa:0f:bc:2a:69:ae:f1:de:f1:4a:8d:5f:47:
         fd:ba:86:16:99:ce:e1:06:a4:0b:a3:6e:a4:bf:a7:67:89:c5:
         01:f6:a7:b4:4a:0e:2b:1f:66:30:d9:93:a8:d5:4d:63:3a:0e:
         f3:f0:86:56:a9:07:1e:2f:4a:2d:62:74:de:2d:f4:60:eb:ef:
         fd:30:41:b9:77:c5:da:f2:51:7e:46:58:39:98:b7:a7:55:59:
         25:2a:ac:91:75:2c:a9:28:cd:14:6b:5b:91:9a:76:64:0a:24:
         fa:51:4b:6d:eb:82:ee:aa:53:99:2d:27:c0:dc:01:d3:35:8e:
         c4:d6:1f:b0:5b:05:88:ce:bc:07:2f:c2:e4:28:95:37:c7:6e:
         1b:bb:cd:a0:9a:be:98:4e:78:a0:74:ef:ad:ba:72:2d:fd:43:
         61:ee:cf:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:28:19 2026 by rpki-client