Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33382e3232342e302f32332d3233203d3e2034383038.roa
File:                     3130332e33382e3232342e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier:          7dPSFCDj0PIzP6El/y+lacMv5iRRwMATYARYTzcJCTg=
Subject key identifier:   51:F3:8E:0D:03:96:82:81:DF:DE:9E:88:95:2F:7D:F3:5F:1D:03:D1
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       66E88AD79A7BB28D757E3A9AA91CE32C4712D932
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33382e3232342e302f32332d3233203d3e2034383038.roa
Signing time:             Wed 13 May 2026 08:00:06 +0000
ROA not before:           Wed 13 May 2026 07:55:06 +0000
ROA not after:            Wed 12 May 2027 08:00:06 +0000
asID:                     4808
IP address blocks:        103.38.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e8:8a:d7:9a:7b:b2:8d:75:7e:3a:9a:a9:1c:e3:2c:47:12:d9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: May 13 07:55:06 2026 GMT
            Not After : May 12 08:00:06 2027 GMT
        Subject: CN=51F38E0D03968281DFDE9E88952F7DF35F1D03D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:38:32:35:e3:2d:99:f8:a2:49:7e:72:d0:d6:
                    8d:90:85:ec:93:5f:31:5b:00:df:0b:cc:0b:fe:9e:
                    1c:f9:27:c5:11:13:eb:47:1a:b5:0b:a3:7c:af:57:
                    09:76:29:09:c2:52:8a:84:32:51:2f:67:58:bf:dd:
                    f7:ce:3c:62:cf:8d:f9:a7:82:40:cd:4f:da:b6:1d:
                    46:da:32:3c:14:bf:f0:6c:ab:3b:71:52:06:92:9e:
                    c4:f8:9d:ef:e8:35:49:0c:65:af:94:d3:36:a5:22:
                    96:6a:29:bb:26:6d:fe:41:ac:cf:0b:53:de:ad:5c:
                    13:e5:dd:41:33:07:a7:04:74:a5:5e:de:a0:75:bc:
                    84:c6:51:93:cb:75:96:c7:e7:ca:78:9f:85:9e:25:
                    27:08:64:69:9b:fc:63:70:d1:0a:ab:3e:1d:76:7d:
                    f6:83:a0:af:b3:35:ee:73:3f:80:eb:ba:32:c8:02:
                    3c:fd:09:8b:04:22:22:f6:99:7e:e7:d5:1b:4b:9c:
                    b0:ed:ec:b4:87:64:81:d6:87:d9:d6:6b:69:31:be:
                    39:cf:ea:b1:0a:2b:58:1a:f9:e9:d9:06:b9:e4:e6:
                    a2:00:18:e1:b8:c7:5f:53:d3:67:37:b3:b4:08:31:
                    54:5e:e4:fb:fe:f0:86:74:11:6e:70:a5:a5:d2:ae:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F3:8E:0D:03:96:82:81:DF:DE:9E:88:95:2F:7D:F3:5F:1D:03:D1
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/3130332e33382e3232342e302f32332d3233203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:44:06:61:1b:ad:e5:9f:a1:bd:3b:2e:f9:ef:79:92:eb:ef:
         a4:e2:74:ff:d2:35:de:3b:ef:fb:fb:6c:bf:cc:8d:3f:70:b5:
         e5:0b:5f:83:61:19:6e:67:92:d2:55:66:59:c8:9f:33:b6:64:
         0a:ea:0c:ab:ac:5c:1c:47:46:54:18:d0:d7:92:5a:0f:69:19:
         7c:ab:ae:95:ae:03:a7:ae:fd:35:82:54:b2:1d:b9:a7:e0:25:
         f8:a3:69:ba:df:2e:96:6c:3c:68:85:af:a9:f2:a5:56:e6:da:
         25:df:c6:9b:34:a6:c7:a6:33:cc:b8:a3:3a:d2:30:91:2a:d2:
         d1:06:5e:bd:e3:23:5e:f6:e9:45:a4:cf:e2:57:99:3c:0a:92:
         d5:f3:a2:31:9a:75:3e:e7:30:50:09:02:2a:45:e2:7b:5e:c2:
         07:b2:e4:f3:49:b8:4c:65:3b:65:27:83:8b:41:b6:58:e6:12:
         f8:8e:fb:dc:a3:bc:8a:2b:a6:ea:cd:96:c9:2e:46:8e:1f:06:
         be:2f:c2:11:18:bc:87:2c:31:61:76:82:9d:36:ab:55:56:d1:
         a4:6c:59:7a:16:c9:bc:86:71:a1:95:3e:50:70:b9:f7:87:3d:
         d7:19:1f:b9:62:e3:5a:e8:6e:5b:a8:f8:fb:5e:ce:10:ef:a1:
         a8:f3:a4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:33:07 2026 by rpki-client