Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e312e3136382e302f32322d3332203d3e203633353930.roa
File:                     3130332e312e3136382e302f32322d3332203d3e203633353930.roa (raw, json)
Hash identifier:          4SmdW5yQ1BkT5m/mXTBM8INwsGWWICXAU6G0EV96W4U=
Subject key identifier:   DA:19:E0:FC:0F:D1:E9:AF:68:C7:6E:76:39:42:EF:4C:6B:2A:E6:DA
Certificate issuer:       /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial:       24F0F9D94C5FE8EA5C76E4DE20799C2D0A3659CB
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e312e3136382e302f32322d3332203d3e203633353930.roa
Signing time:             Thu 23 Apr 2026 07:28:06 +0000
ROA not before:           Thu 23 Apr 2026 07:23:06 +0000
ROA not after:            Thu 22 Apr 2027 07:28:06 +0000
asID:                     63590
IP address blocks:        103.1.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f0:f9:d9:4c:5f:e8:ea:5c:76:e4:de:20:79:9c:2d:0a:36:59:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
        Validity
            Not Before: Apr 23 07:23:06 2026 GMT
            Not After : Apr 22 07:28:06 2027 GMT
        Subject: CN=DA19E0FC0FD1E9AF68C76E763942EF4C6B2AE6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c2:bc:dd:fb:f4:73:62:33:3e:21:9a:59:ea:
                    69:d7:6a:ec:36:f9:38:a4:79:cc:c6:3c:de:f9:1c:
                    d3:7d:43:ae:91:12:94:56:6c:69:11:b4:e1:c6:38:
                    a2:03:d2:d6:26:8c:88:93:bf:d5:c6:1c:7f:ed:ff:
                    0d:1d:5d:fa:b1:ab:99:eb:d8:63:3b:66:16:bd:9b:
                    3c:92:0f:9f:f6:b4:02:88:27:09:98:d0:e0:74:61:
                    2e:30:80:cc:e6:cd:30:90:35:f9:d4:69:3a:21:a2:
                    37:fa:c8:7c:ca:b9:8f:96:85:af:f3:d6:af:fd:d5:
                    b4:86:a3:73:50:fc:ae:1f:93:87:fd:94:95:b9:7a:
                    71:09:d4:2e:82:8d:da:c4:b4:80:72:9a:95:1e:fc:
                    c1:84:1d:dc:52:27:22:19:d1:0e:79:ff:0c:a2:53:
                    52:35:1c:c6:04:08:cf:e2:af:6c:61:62:44:24:f3:
                    cd:c4:06:03:cf:0b:03:2d:36:99:62:a1:e0:5b:7d:
                    47:c1:bc:e1:a7:93:2c:b6:ef:ed:da:f9:94:ca:6e:
                    15:38:f5:d6:59:ec:55:48:8b:b2:a7:2d:4f:95:bd:
                    22:36:1a:1c:67:6a:5b:54:1a:58:bf:1d:16:41:05:
                    ee:13:22:4c:ae:77:27:1f:a5:8e:cb:70:8f:a5:7e:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:19:E0:FC:0F:D1:E9:AF:68:C7:6E:76:39:42:EF:4C:6B:2A:E6:DA
            X509v3 Authority Key Identifier:
                keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e312e3136382e302f32322d3332203d3e203633353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:02:a5:6e:fb:68:98:62:a5:4b:63:e8:ef:67:a6:ff:e0:cf:
         93:28:62:63:c8:25:25:ac:32:bf:d0:d0:75:40:61:ad:cd:d9:
         23:28:40:12:d6:50:c3:3b:1d:b8:d3:e8:13:1f:8d:5e:e4:f7:
         54:c2:dc:91:b8:fe:dd:2e:92:37:4e:97:9c:78:e2:89:ce:c9:
         2e:84:52:55:98:04:ac:59:4d:50:24:f7:6d:0b:c2:f1:03:5f:
         2a:ba:75:e3:62:e0:77:d5:a6:5a:40:2e:0d:39:4a:57:df:50:
         3b:25:81:3c:e5:d2:89:d5:e9:ea:88:7a:33:19:1b:87:48:e0:
         d2:cb:83:1e:0e:42:38:83:8f:a6:14:16:d9:55:43:13:34:dc:
         89:73:8b:00:ba:14:78:f8:43:f7:67:3f:5d:59:a9:7c:3e:7e:
         37:29:8f:74:04:5e:a9:2d:aa:2e:eb:26:d0:20:33:45:9c:c2:
         3f:08:68:56:f0:68:e8:2e:1c:aa:dc:1e:e5:8a:06:0b:7f:59:
         49:56:6c:da:66:9c:9c:24:2b:44:01:62:a1:46:8f:33:c6:fa:
         d9:92:fe:df:14:bf:5a:4a:4f:eb:57:14:e6:16:88:8b:45:d0:
         17:27:e1:9b:8f:6a:6b:42:c3:e6:60:c2:ff:c8:9a:d8:fb:84:
         8e:bb:3a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:29 2026 by rpki-client