Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa
File:                     3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier:          jlPD6Syj2WUMk0/GKQtzo96jxAOhRno6yJr248gVRTs=
Subject key identifier:   61:38:DE:D2:01:E6:B4:2A:6E:28:9A:2F:F8:1C:4E:7F:50:71:C7:3C
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       7ACFC667EF08BB829D23DA10BCE900FBD9C693DA
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa
Signing time:             Mon 11 May 2026 02:50:34 +0000
ROA not before:           Mon 11 May 2026 02:45:34 +0000
ROA not after:            Mon 10 May 2027 02:50:34 +0000
asID:                     4808
IP address blocks:        103.237.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cf:c6:67:ef:08:bb:82:9d:23:da:10:bc:e9:00:fb:d9:c6:93:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: May 11 02:45:34 2026 GMT
            Not After : May 10 02:50:34 2027 GMT
        Subject: CN=6138DED201E6B42A6E289A2FF81C4E7F5071C73C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d6:78:45:2a:bd:c9:c0:72:ee:6a:c3:67:04:
                    d2:0e:8e:b0:89:65:81:0a:93:96:33:0a:fa:53:14:
                    20:29:af:c6:42:6d:82:7a:94:b9:e5:0a:26:6a:a4:
                    c4:f6:1a:90:3a:ab:75:9b:b7:cb:d8:d7:67:1d:5b:
                    8c:41:dd:cf:50:2e:2b:76:18:a8:63:b7:5a:b5:e8:
                    4a:e9:e1:23:1a:77:8f:fa:be:6a:84:09:ff:b2:b6:
                    da:da:b5:66:b2:d3:88:d5:ee:86:38:2d:f4:6f:69:
                    0d:a7:4b:fa:2b:d7:c2:d8:b0:94:f5:31:a7:be:8a:
                    1d:31:fe:f5:72:84:cd:8f:5b:dd:55:c6:6c:e5:88:
                    d2:2c:6a:9d:72:61:2e:14:9a:7c:68:90:45:9f:af:
                    d2:d2:46:fd:3c:c1:fb:cf:79:c1:d5:a1:60:87:fb:
                    37:1e:99:50:7a:a0:b4:7b:60:33:55:29:b3:4a:8a:
                    c4:c4:cc:52:ba:e5:d4:29:99:bc:0a:c1:a5:ea:ab:
                    b2:c4:bf:88:c2:37:61:3b:eb:d8:d5:70:ef:dd:7c:
                    75:8a:9c:44:72:a1:a3:bb:a4:cd:1e:8b:93:1a:10:
                    28:2e:57:93:f5:60:22:a7:11:b1:8a:19:60:fb:e7:
                    b5:aa:bc:57:69:76:25:f1:53:e2:ca:78:e5:5a:23:
                    48:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:38:DE:D2:01:E6:B4:2A:6E:28:9A:2F:F8:1C:4E:7F:50:71:C7:3C
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233372e3234382e302f32322d3332203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:46:26:e3:8a:9f:a4:ab:b3:10:1f:59:f9:e5:a1:51:d0:71:
         31:7f:bc:b2:ea:d4:c3:46:5d:9f:9f:d0:9d:a8:87:5f:fc:61:
         9f:34:b4:a1:90:da:b9:1e:c1:5b:3a:55:8b:1a:de:6f:62:8e:
         08:f8:b8:fb:a5:32:f8:ed:5b:a1:30:e6:31:9b:16:25:c9:d9:
         26:1d:bc:1f:71:69:10:f8:1a:4f:b8:f0:ea:81:b8:49:d0:07:
         9e:9f:35:2d:e9:a4:1b:a7:1b:e3:03:fc:a2:f6:29:c2:63:21:
         d1:17:f0:25:95:e1:a9:10:8f:a1:d2:12:70:43:aa:59:be:3f:
         dc:c6:0b:de:f0:e2:8f:ef:91:23:99:f2:f9:64:c6:0f:ce:1e:
         ea:aa:26:39:aa:b2:64:98:f8:e1:8e:c9:af:1c:91:9a:37:8d:
         14:c9:92:8b:31:b5:16:6e:89:c8:bb:87:18:05:d3:ce:98:b1:
         e8:d2:78:fe:3d:1c:bf:18:81:b8:c6:9b:fd:05:36:22:48:c5:
         ae:29:8c:77:03:53:2f:a6:03:76:49:50:11:8e:29:ea:93:fe:
         a7:7e:18:b0:4a:51:54:49:eb:5d:e4:fa:96:ce:0a:de:29:70:
         0d:f9:49:b6:02:18:b3:ce:95:0f:5f:e8:11:0a:ec:16:74:eb:
         bc:0e:55:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:43:48 2026 by rpki-client