Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e2034383038.roa
File:                     3130332e3231332e38382e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier:          XypyFSQ1iPzCQ6Jc6zsHMC6GtKzeVB2U8Nuy/SGIFOY=
Subject key identifier:   75:4A:A0:00:C9:30:93:90:20:51:D2:C0:84:34:12:83:ED:4B:85:DC
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       4C8802BAC87E60557EEF4D45953F1C9FE85A51CA
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e2034383038.roa
Signing time:             Tue 12 May 2026 08:20:41 +0000
ROA not before:           Tue 12 May 2026 08:15:41 +0000
ROA not after:            Tue 11 May 2027 08:20:41 +0000
asID:                     4808
IP address blocks:        103.213.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:88:02:ba:c8:7e:60:55:7e:ef:4d:45:95:3f:1c:9f:e8:5a:51:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: May 12 08:15:41 2026 GMT
            Not After : May 11 08:20:41 2027 GMT
        Subject: CN=754AA000C93093902051D2C084341283ED4B85DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:54:8d:ee:b1:3f:59:72:8b:d6:4d:55:e6:
                    4b:22:84:4d:fd:1c:52:c1:5a:71:84:ef:fa:70:d2:
                    35:35:29:d0:ba:bb:43:4d:55:d3:f8:a5:a5:83:6b:
                    49:72:61:4c:37:ea:fc:e1:72:64:0b:b2:cf:52:55:
                    2d:a7:36:ab:36:12:09:67:bf:aa:4d:8d:38:29:a8:
                    d6:d1:33:c1:77:63:d6:24:3e:e1:ec:21:3e:e2:43:
                    3c:ca:84:e1:02:55:04:6d:ec:c3:f9:2b:fe:c0:c5:
                    69:23:bf:8f:20:ca:96:92:db:f3:65:12:2b:1e:30:
                    16:ae:0e:6d:c1:63:19:95:c7:31:28:d6:ed:f4:be:
                    de:7d:dd:30:57:9f:53:17:69:fd:0e:8d:4c:e5:d4:
                    ea:f5:6d:08:39:58:d4:94:a2:b5:94:dd:f7:13:fd:
                    10:62:38:33:35:76:37:e6:11:a3:13:38:bb:fe:e3:
                    b4:00:4e:41:50:0b:61:f4:7e:3d:64:36:58:d2:9e:
                    de:ae:d1:d0:9d:67:06:d9:e4:50:b3:78:a9:07:7f:
                    c2:d5:98:c9:4c:70:da:d5:64:d7:38:a0:e7:f1:24:
                    e9:4f:91:df:f9:67:26:ba:25:07:86:f5:3c:6e:6a:
                    82:26:a7:f9:66:f2:44:97:1c:d7:19:7a:c4:cf:a0:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4A:A0:00:C9:30:93:90:20:51:D2:C0:84:34:12:83:ED:4B:85:DC
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:c4:cf:6d:70:9e:2c:dd:eb:f2:8b:35:76:6a:a5:39:ea:9f:
         86:80:92:a2:88:08:04:d9:89:06:ee:41:a3:1f:ad:0f:8c:63:
         bd:32:ff:61:fe:48:9e:e5:03:fb:d7:42:4e:5c:48:8c:34:a8:
         c6:49:a0:c3:02:b7:1f:ba:68:0e:f3:bb:d6:45:9a:58:5d:ad:
         df:d4:1e:b2:c8:a0:6a:18:4e:0a:7e:a7:46:17:7b:6d:76:10:
         68:58:fd:33:d3:52:6d:1d:37:4b:f8:ff:92:4e:c7:5d:aa:60:
         16:ef:1e:c6:a3:75:33:ca:64:19:17:eb:92:ba:6d:be:4c:eb:
         e2:5e:e0:02:5c:a3:57:75:78:d7:19:41:26:d7:f1:30:62:46:
         01:23:17:c1:70:4a:7d:c3:d7:ab:20:c1:78:ad:8a:d2:71:65:
         c6:1e:36:7e:f9:bd:20:4a:d5:e3:3c:1d:8f:fa:e5:3b:bc:a2:
         e5:2c:19:9d:67:14:ca:c2:99:4e:79:34:38:fc:1e:2b:b8:b0:
         5e:d8:54:e7:95:55:f5:f0:40:89:be:c4:0c:b4:a4:77:7c:f6:
         58:5b:83:71:83:3b:74:00:05:78:f2:d4:38:b9:3c:e4:64:f1:
         f6:37:bf:cf:a4:25:8b:40:3d:3d:49:43:02:c6:fe:7b:67:7e:
         4c:eb:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:07:32 2026 by rpki-client