Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e203633363437.roa
File:                     3130332e3231332e38382e302f32312d3231203d3e203633363437.roa (raw, json)
Hash identifier:          Z8zczn5TjnXJap1yuCeB3nzY9l6A5XggaGwjQ+wI0yY=
Subject key identifier:   97:61:CA:D2:75:50:32:71:BA:2B:AF:97:D7:D0:29:1E:D0:CD:E2:8D
Certificate issuer:       /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial:       76F9F257CF7A498AE278D0D90278A89FC35F27AF
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e203633363437.roa
Signing time:             Tue 12 May 2026 08:20:41 +0000
ROA not before:           Tue 12 May 2026 08:15:41 +0000
ROA not after:            Tue 11 May 2027 08:20:41 +0000
asID:                     63647
IP address blocks:        103.213.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f9:f2:57:cf:7a:49:8a:e2:78:d0:d9:02:78:a8:9f:c3:5f:27:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
        Validity
            Not Before: May 12 08:15:41 2026 GMT
            Not After : May 11 08:20:41 2027 GMT
        Subject: CN=9761CAD275503271BA2BAF97D7D0291ED0CDE28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:fe:b6:5c:3d:6c:ba:de:9e:69:27:ef:27:
                    f3:54:0a:39:c5:28:57:36:d2:b4:ea:11:f8:4e:b1:
                    b1:39:1d:1f:ea:58:61:18:6d:99:1f:d9:66:73:e6:
                    a9:37:ce:2a:96:77:f1:a4:24:b5:5b:ce:17:13:40:
                    b8:0b:e3:ce:65:d9:8a:53:a9:a1:f0:86:4a:1f:b8:
                    73:1c:8a:6c:7c:e4:3e:14:65:7a:c6:71:10:12:f2:
                    92:48:14:17:f5:4e:23:9e:7b:16:34:bd:80:cd:34:
                    7a:18:c4:a5:bd:b5:bd:4e:35:c2:78:c1:87:9e:ac:
                    be:9c:55:1e:68:f9:fb:f4:1e:20:95:84:6e:2c:8d:
                    df:ff:52:8a:b7:5f:0a:69:76:2b:ad:1e:7a:48:9c:
                    97:a1:c9:d9:f1:32:e7:b3:46:89:0c:ab:c4:75:d7:
                    ca:78:a2:f2:bd:1a:9c:32:04:c4:f6:89:d4:76:46:
                    06:93:b7:44:a9:cf:7b:5c:24:ff:31:e1:61:b2:7b:
                    10:d7:6d:ad:42:e1:03:fb:47:6f:26:8e:27:bb:a1:
                    e1:f3:cc:dc:ad:b9:07:79:96:94:b3:11:69:c4:75:
                    8e:c1:96:ff:ba:92:d0:5d:e5:4a:62:c2:00:77:82:
                    9f:18:8c:99:1a:c9:94:46:0e:5f:ea:9b:18:27:33:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:61:CA:D2:75:50:32:71:BA:2B:AF:97:D7:D0:29:1E:D0:CD:E2:8D
            X509v3 Authority Key Identifier:
                keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3130332e3231332e38382e302f32312d3231203d3e203633363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:22:30:fc:ab:65:2c:10:85:42:e5:3f:8d:05:ad:79:50:df:
         18:31:35:3b:57:ec:b4:38:58:f0:95:d5:39:7f:fa:b4:60:a7:
         62:d2:c1:57:d8:c9:79:0f:0b:ae:bd:c4:d6:28:9a:88:5f:46:
         03:0c:02:94:18:5d:47:dc:4d:36:0a:c8:d9:75:6d:63:3f:1b:
         46:75:e4:68:43:99:bb:ca:6d:93:95:8f:d3:90:49:4b:1c:ec:
         09:39:e6:67:63:f5:ae:05:41:d2:4e:1d:0c:01:58:71:62:71:
         73:5a:28:4a:1a:74:9a:87:eb:66:19:c4:54:55:b7:b3:57:a2:
         a3:2e:b0:e4:f5:c7:1a:bf:16:95:96:53:7f:c5:68:9f:46:a4:
         b4:2c:1d:ad:2a:82:b2:ff:be:ca:3d:4d:51:7c:a1:f0:5a:c6:
         98:54:bc:4f:83:15:1a:55:9b:3a:11:eb:e2:e5:bf:54:8e:2a:
         77:4a:d3:48:f0:94:0f:b7:98:39:a7:0c:0c:11:d4:55:fe:aa:
         69:0b:f2:5d:17:39:83:05:96:b4:e1:42:08:86:11:57:dd:4a:
         d4:1d:22:fb:96:ea:1e:5e:3a:f5:f3:20:61:9d:26:76:b1:2c:
         d6:04:b7:2f:76:30:cb:37:ef:6a:7d:d8:d4:16:e0:55:d4:c2:
         59:9b:47:23
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdvnyV896SYrieNDZAnion8NfJ68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1
QUQzRjM5ODAeFw0yNjA1MTIwODE1NDFaFw0yNzA1MTEwODIwNDFaMDMxMTAvBgNV
BAMTKDk3NjFDQUQyNzU1MDMyNzFCQTJCQUY5N0Q3RDAyOTFFRDBDREUyOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnbP62XD1sut6eaSfvJ/NUCjnF
KFc20rTqEfhOsbE5HR/qWGEYbZkf2WZz5qk3ziqWd/GkJLVbzhcTQLgL485l2YpT
qaHwhkofuHMcimx85D4UZXrGcRAS8pJIFBf1TiOeexY0vYDNNHoYxKW9tb1ONcJ4
wYeerL6cVR5o+fv0HiCVhG4sjd//Uoq3XwppdiutHnpInJehydnxMuezRokMq8R1
18p4ovK9GpwyBMT2idR2RgaTt0Spz3tcJP8x4WGyexDXba1C4QP7R28mjie7oeHz
zNytuQd5lpSzEWnEdY7Blv+6ktBd5UpiwgB3gp8YjJkayZRGDl/qmxgnM2BHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUl2HK0nVQMnG6K6+X19ApHtDN4o0wHwYDVR0j
BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB
NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk3ODMxNjg4NTY1NTU1NS8wLzMxMzAzMzJlMzIz
MTMzMmUzODM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzYzMzM2MzQzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEA2fVWDANBgkqhkiG9w0BAQsFAAOCAQEAsCIw/KtlLBCFQuU/jQWteVDf
GDE1O1fstDhY8JXVOX/6tGCnYtLBV9jJeQ8Lrr3E1iiaiF9GAwwClBhdR9xNNgrI
2XVtYz8bRnXkaEOZu8ptk5WP05BJSxzsCTnmZ2P1rgVB0k4dDAFYcWJxc1ooShp0
mofrZhnEVFW3s1eioy6w5PXHGr8WlZZTf8Von0aktCwdrSqCsv++yj1NUXyh8FrG
mFS8T4MVGlWbOhHr4uW/VI4qd0rTSPCUD7eYOacMDBHUVf6qaQvyXRc5gwWWtOFC
CIYRV91K1B0i+5bqHl469fMgYZ0mdrEs1gS3L3Ywyzfvan3Y1BbgVdTCWZtHIw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:36:58 2026 by rpki-client