Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e3136342e302f32322d3234203d3e203539303438.roa
File:                     3130332e3232322e3136342e302f32322d3234203d3e203539303438.roa (raw, json)
Hash identifier:          ORKUzcagPioZaOE64GwMy56o22VnwkMoytslBScK/os=
Subject key identifier:   5F:2F:BC:02:92:A1:DB:AC:50:43:24:90:0D:A2:0B:B7:10:DD:65:F9
Certificate issuer:       /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial:       69E1A1CE914EB94201E7E6FA70B131D7B0341D1A
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e3136342e302f32322d3234203d3e203539303438.roa
Signing time:             Mon 11 May 2026 07:01:36 +0000
ROA not before:           Mon 11 May 2026 06:56:36 +0000
ROA not after:            Mon 10 May 2027 07:01:36 +0000
asID:                     59048
IP address blocks:        103.222.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e1:a1:ce:91:4e:b9:42:01:e7:e6:fa:70:b1:31:d7:b0:34:1d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
        Validity
            Not Before: May 11 06:56:36 2026 GMT
            Not After : May 10 07:01:36 2027 GMT
        Subject: CN=5F2FBC0292A1DBAC504324900DA20BB710DD65F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:cf:a0:bb:23:d4:87:75:1c:0c:e2:2f:2a:
                    ed:f3:9a:53:15:62:a0:6e:f5:56:6e:79:b6:e3:c7:
                    d7:b8:6c:29:77:28:cb:e6:f6:28:4e:62:a5:d8:ea:
                    1d:85:a6:a6:36:f6:2a:cc:9a:66:cf:eb:e9:0c:8a:
                    53:a0:77:18:4f:96:46:eb:80:7c:a6:f3:74:7a:e3:
                    cc:dd:d4:c3:ce:2e:7f:aa:a7:33:38:1b:4a:f2:a7:
                    1c:78:d6:86:2a:59:1a:66:3d:47:37:4c:2c:47:1e:
                    a3:ab:79:9d:00:f1:af:a8:10:c0:b2:9b:77:be:f5:
                    36:13:9e:39:ac:99:20:5b:b5:cc:3f:52:91:14:47:
                    a9:d7:60:04:99:a3:86:01:a1:c8:c6:a1:bd:4e:76:
                    77:af:76:48:2b:6c:df:86:45:ed:40:ff:d6:5d:9b:
                    7b:3c:a6:68:f1:8a:52:37:51:50:5d:bd:66:f7:64:
                    c5:90:b3:54:16:d9:c4:6f:c4:8e:83:c7:4f:68:ca:
                    0c:15:11:9b:33:63:3d:0c:be:e2:75:48:df:88:5c:
                    9b:4c:d7:9a:96:7f:a7:b6:53:b1:65:9e:86:4b:b9:
                    7e:f2:21:4f:b4:b4:17:1c:c3:b3:bc:db:41:24:5c:
                    f6:89:cc:eb:11:6e:9f:4d:f0:a6:da:c8:b5:2e:ff:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2F:BC:02:92:A1:DB:AC:50:43:24:90:0D:A2:0B:B7:10:DD:65:F9
            X509v3 Authority Key Identifier:
                keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e3136342e302f32322d3234203d3e203539303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.222.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:c6:41:b6:12:10:21:69:ab:b1:86:4d:4c:17:29:02:a4:21:
         08:5d:3d:88:9b:21:34:18:95:64:c4:07:59:ef:99:f2:78:0f:
         0d:17:dc:10:86:49:b7:95:88:48:21:bb:b5:61:21:75:cf:84:
         77:6d:8d:04:c9:6d:69:f9:f4:ae:ae:d7:69:5f:dd:aa:96:76:
         df:c0:7f:c8:1e:a1:47:2a:0d:c1:de:2d:65:50:53:45:70:64:
         39:cb:fd:93:a4:7e:f7:f4:d8:2d:75:18:45:25:28:0f:5b:4f:
         5b:93:a5:bf:14:38:02:19:57:9b:48:f7:fd:bf:f9:af:5b:1c:
         d6:f3:fc:c8:12:2e:b0:e9:73:bc:30:86:94:4a:39:f3:d7:cb:
         dc:8a:b7:f9:7b:cd:2c:dd:5b:7a:b6:4c:b5:8c:61:ea:30:18:
         96:a9:3b:0d:bf:b5:15:39:06:4d:d5:71:d5:69:df:19:7b:ae:
         92:97:62:c5:69:de:f0:b4:f5:34:60:94:b5:a7:71:c9:48:45:
         ff:94:a0:eb:61:d9:b0:75:78:71:d3:bb:92:80:91:08:8a:7f:
         5c:09:35:c4:54:cb:80:ad:32:dd:8c:ec:6f:7a:89:e7:f9:19:
         ce:87:28:9e:00:8d:86:d8:5c:af:72:8d:fe:53:5d:0d:9a:df:
         9d:38:1e:46
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUaeGhzpFOuUIB5+b6cLEx17A0HRowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3
NjlGREY4QjAeFw0yNjA1MTEwNjU2MzZaFw0yNzA1MTAwNzAxMzZaMDMxMTAvBgNV
BAMTKDVGMkZCQzAyOTJBMURCQUM1MDQzMjQ5MDBEQTIwQkI3MTBERDY1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCS8+guyPUh3UcDOIvKu3zmlMV
YqBu9VZuebbjx9e4bCl3KMvm9ihOYqXY6h2FpqY29irMmmbP6+kMilOgdxhPlkbr
gHym83R648zd1MPOLn+qpzM4G0rypxx41oYqWRpmPUc3TCxHHqOreZ0A8a+oEMCy
m3e+9TYTnjmsmSBbtcw/UpEUR6nXYASZo4YBocjGob1OdnevdkgrbN+GRe1A/9Zd
m3s8pmjxilI3UVBdvWb3ZMWQs1QW2cRvxI6Dx09oygwVEZszYz0MvuJ1SN+IXJtM
15qWf6e2U7FlnoZLuX7yIU+0tBccw7O820EkXPaJzOsRbp9N8KbayLUu/69xAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUXy+8ApKh26xQQySQDaILtxDdZfkwHwYDVR0j
BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1
OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTU5MTI0MTA4NTk5NjIzNzEvMC8zMTMwMzMyZTMy
MzIzMjJlMzEzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzOC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfepDANBgkqhkiG9w0BAQsFAAOCAQEAisZBthIQIWmrsYZNTBcp
AqQhCF09iJshNBiVZMQHWe+Z8ngPDRfcEIZJt5WISCG7tWEhdc+Ed22NBMltafn0
rq7XaV/dqpZ238B/yB6hRyoNwd4tZVBTRXBkOcv9k6R+9/TYLXUYRSUoD1tPW5Ol
vxQ4AhlXm0j3/b/5r1sc1vP8yBIusOlzvDCGlEo589fL3Iq3+XvNLN1berZMtYxh
6jAYlqk7Db+1FTkGTdVx1WnfGXuukpdixWne8LT1NGCUtadxyUhF/5Sg62HZsHV4
cdO7koCRCIp/XAk1xFTLgK0y3Yzsb3qJ5/kZzocongCNhthcr3KN/lNdDZrfnTge
Rg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:27:14 2026 by rpki-client