Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092443137/0/3130332e3130302e36362e302f32332d3233203d3e2034383038.roa
File:                     3130332e3130302e36362e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier:          /IodutfjnTBMFXuGNjYScNPSFVHOmzKsKTQcsjr+gDI=
Subject key identifier:   88:EF:CA:01:B7:53:83:8D:39:72:56:EE:C4:16:40:28:3B:2B:53:A8
Certificate issuer:       /CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4
Certificate serial:       3497EFB2735B396C90DF2BF14F093D8F65A8FFFA
Authority key identifier: 9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/3130332e3130302e36362e302f32332d3233203d3e2034383038.roa
Signing time:             Mon 11 May 2026 02:32:00 +0000
ROA not before:           Mon 11 May 2026 02:27:00 +0000
ROA not after:            Mon 10 May 2027 02:32:00 +0000
asID:                     4808
IP address blocks:        103.100.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:97:ef:b2:73:5b:39:6c:90:df:2b:f1:4f:09:3d:8f:65:a8:ff:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4
        Validity
            Not Before: May 11 02:27:00 2026 GMT
            Not After : May 10 02:32:00 2027 GMT
        Subject: CN=88EFCA01B753838D397256EEC41640283B2B53A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:06:a6:ee:68:80:c0:cc:d0:b8:ab:71:05:
                    c0:80:f8:d9:2f:19:bf:61:27:73:cc:ed:78:22:4a:
                    5b:ae:47:80:95:45:04:67:92:e8:94:15:61:26:26:
                    71:61:f3:c7:38:f9:4c:ac:91:a7:1a:42:54:b6:a9:
                    be:31:65:e1:10:21:93:92:3d:ec:9a:90:13:5d:1b:
                    57:c5:8b:a3:c7:da:c7:ad:28:28:52:26:7a:2f:de:
                    52:2d:ac:a5:e5:d2:7c:70:2d:26:c5:bd:2c:84:15:
                    b2:2e:05:0f:cb:53:49:d5:af:99:38:5a:85:6a:43:
                    f9:6f:f2:b4:ce:63:9c:5a:00:5b:19:42:e2:20:aa:
                    42:c2:be:03:d2:d6:e1:2a:8f:14:14:07:bb:0e:bf:
                    12:02:5f:b9:b7:cd:c1:03:0b:39:a6:9c:1f:0b:80:
                    d8:f9:3c:74:a4:cd:28:c4:af:2e:73:84:87:b9:8b:
                    77:51:6b:3f:ff:1c:a0:3d:b6:8b:60:29:99:1c:95:
                    73:b7:7d:28:49:45:c2:c3:a9:e1:14:e0:6e:e3:c6:
                    10:58:d4:37:f0:8f:86:9f:23:b8:cc:b4:c3:73:dc:
                    e2:e2:25:a0:78:0b:e8:20:da:a3:84:fb:31:5c:1d:
                    9e:98:34:b7:16:26:d7:b6:97:96:c8:8e:80:50:a7:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:EF:CA:01:B7:53:83:8D:39:72:56:EE:C4:16:40:28:3B:2B:53:A8
            X509v3 Authority Key Identifier:
                keyid:9B:54:A8:22:D8:B1:EA:B7:E6:0C:85:D2:B3:1D:A4:88:6E:AB:52:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B54A822D8B1EAB7E60C85D2B31DA4886EAB52D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092443137/0/3130332e3130302e36362e302f32332d3233203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:54:9c:a6:43:2a:de:ba:94:8a:94:c0:25:72:41:db:1a:ad:
         f0:39:42:f1:47:2a:31:b5:2b:fb:53:8c:4b:25:48:98:3f:ac:
         18:66:5b:2e:56:55:e9:b3:99:80:03:a9:a7:5d:b1:05:c3:81:
         77:78:d2:97:24:13:91:e6:b4:51:4b:c4:e5:b9:4c:92:59:49:
         1c:5f:bb:71:88:8a:8e:c7:6f:8a:61:ea:6b:f6:c3:50:f4:a0:
         46:ce:b6:eb:a8:3a:82:8b:28:1f:aa:6e:1d:fd:2a:3b:34:22:
         48:0f:99:bd:50:b2:5d:6b:18:d0:45:81:0b:ad:27:40:75:6c:
         94:34:e5:3e:d7:29:5e:00:79:2b:ae:20:32:76:6d:95:7f:90:
         0d:fb:df:1f:a8:58:6c:a5:f8:df:d0:eb:32:75:84:66:95:f5:
         41:aa:f7:19:37:5b:c2:a2:4e:db:d0:d2:0a:e0:4c:fc:f5:59:
         9c:e5:59:ac:12:16:b9:96:77:ac:51:3d:69:1f:db:dd:a9:f1:
         43:79:be:3b:d8:74:4b:03:3a:c8:6e:5b:45:3f:95:ce:c3:d0:
         bb:4a:ca:99:e2:cb:c6:e5:57:06:18:1f:fc:4a:3b:0f:d3:bc:
         7f:41:2d:f4:94:b1:0d:78:27:3c:c8:fd:2a:c1:a8:76:42:df:
         06:1c:78:62
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUNJfvsnNbOWyQ3yvxTwk9j2Wo//owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2
RUFCNTJENDAeFw0yNjA1MTEwMjI3MDBaFw0yNzA1MTAwMjMyMDBaMDMxMTAvBgNV
BAMTKDg4RUZDQTAxQjc1MzgzOEQzOTcyNTZFRUM0MTY0MDI4M0IyQjUzQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWfAam7miAwMzQuKtxBcCA+Nkv
Gb9hJ3PM7XgiSluuR4CVRQRnkuiUFWEmJnFh88c4+UyskacaQlS2qb4xZeEQIZOS
PeyakBNdG1fFi6PH2setKChSJnov3lItrKXl0nxwLSbFvSyEFbIuBQ/LU0nVr5k4
WoVqQ/lv8rTOY5xaAFsZQuIgqkLCvgPS1uEqjxQUB7sOvxICX7m3zcEDCzmmnB8L
gNj5PHSkzSjEry5zhIe5i3dRaz//HKA9totgKZkclXO3fShJRcLDqeEU4G7jxhBY
1Dfwj4afI7jMtMNz3OLiJaB4C+gg2qOE+zFcHZ6YNLcWJte2l5bIjoBQp4EJAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUiO/KAbdTg405clbuxBZAKDsrU6gwHwYDVR0j
BBgwFoAUm1SoItix6rfmDIXSsx2kiG6rUtQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjQ0MzEzNy8wLzlCNTRBODIyRDhCMUVBQjdFNjBDODVEMkIzMURB
NDg4NkVBQjUyRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOUI1NEE4MjJEOEIxRUFCN0U2MEM4NUQyQjMxREE0ODg2RUFCNTJENC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MzMwODU5MDkyNDQzMTM3LzAvMzEzMDMzMmUzMTMw
MzAyZTM2MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWdkQjANBgkqhkiG9w0BAQsFAAOCAQEAYlScpkMq3rqUipTAJXJB2xqt8DlC
8UcqMbUr+1OMSyVImD+sGGZbLlZV6bOZgAOpp12xBcOBd3jSlyQTkea0UUvE5blM
kllJHF+7cYiKjsdvimHqa/bDUPSgRs6266g6gosoH6puHf0qOzQiSA+ZvVCyXWsY
0EWBC60nQHVslDTlPtcpXgB5K64gMnZtlX+QDfvfH6hYbKX439DrMnWEZpX1Qar3
GTdbwqJO29DSCuBM/PVZnOVZrBIWuZZ3rFE9aR/b3anxQ3m+O9h0SwM6yG5bRT+V
zsPQu0rKmeLLxuVXBhgf/Eo7D9O8f0Et9JSxDXgnPMj9KsGodkLfBhx4Yg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:56:37 2026 by rpki-client