Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa
File:                     3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa (raw, json)
Hash identifier:          vd8lbbYkISGhXkrGR7wrLVtygtqfX/04YClqmQzjtHU=
Subject key identifier:   AF:50:17:D7:65:F6:A5:23:22:A7:44:CF:19:A4:F3:79:6F:44:B8:9B
Certificate issuer:       /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3
Certificate serial:       67554B2734F609696D86DC1785D421E895AC8F42
Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa
Signing time:             Wed 22 Jul 2026 01:46:42 +0000
ROA not before:           Wed 22 Jul 2026 01:41:42 +0000
ROA not after:            Wed 21 Jul 2027 01:46:42 +0000
asID:                     139090
IP address blocks:        103.139.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:55:4b:27:34:f6:09:69:6d:86:dc:17:85:d4:21:e8:95:ac:8f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3
        Validity
            Not Before: Jul 22 01:41:42 2026 GMT
            Not After : Jul 21 01:46:42 2027 GMT
        Subject: CN=AF5017D765F6A52322A744CF19A4F3796F44B89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:58:97:c7:50:7a:f1:e2:e5:dd:e5:78:2a:3a:
                    cf:86:4e:ab:34:f5:77:a5:24:f1:89:cd:ea:ef:c7:
                    74:bd:6e:26:25:18:57:77:7d:03:0e:01:c4:a8:f4:
                    46:d8:da:94:16:64:da:bc:1d:13:df:fd:2c:6a:a0:
                    7d:17:44:82:09:38:db:46:f3:4e:cb:36:15:d8:c5:
                    16:02:70:6b:d9:83:d8:98:ce:94:a2:a7:18:43:cf:
                    db:20:e9:c8:ab:fe:30:6c:54:ad:ea:ab:47:db:8a:
                    23:d3:82:dc:e7:6a:6e:5f:03:b6:1f:08:60:c4:a5:
                    91:f0:c0:55:3f:65:94:6d:2b:48:02:c1:8a:a0:fd:
                    0f:6c:30:20:76:e7:ce:1c:20:01:9b:a6:64:62:4e:
                    77:c7:a9:34:2d:10:12:8d:c2:e8:d4:97:6a:2e:8a:
                    2c:e4:04:dd:5c:5d:66:30:5b:76:a1:8e:61:f6:53:
                    03:71:a2:7a:bd:41:fb:f5:40:8b:a1:90:3a:1a:2b:
                    9c:b1:e7:00:20:29:9b:c4:7e:88:b1:d2:42:05:4c:
                    de:02:08:66:0a:b5:21:c9:e2:44:bb:91:a1:a3:5e:
                    70:e6:16:07:cf:df:cb:50:05:ef:a7:11:72:90:4e:
                    39:f4:0d:26:d6:6e:77:a7:06:31:ee:61:2f:e4:3f:
                    28:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:50:17:D7:65:F6:A5:23:22:A7:44:CF:19:A4:F3:79:6F:44:B8:9B
            X509v3 Authority Key Identifier:
                keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3130332e3133392e3137322e302f32332d3233203d3e20313339303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:79:6a:f2:46:34:a1:e3:98:90:2e:34:d3:ed:1c:54:ee:
         d4:92:f1:69:d1:3b:98:f5:08:41:05:e1:d2:d4:a6:2b:62:2b:
         1f:75:7b:38:1f:ad:ed:16:55:3d:ab:c4:e2:4e:8a:a9:af:ed:
         12:76:86:f7:23:ef:fe:da:16:d0:27:87:89:d8:19:e1:7a:3a:
         5f:c9:a8:f1:57:02:16:02:4f:00:3f:d4:22:9d:00:26:0c:82:
         68:39:c0:ed:07:65:18:dc:b2:2d:0c:dd:69:56:9c:ac:69:6c:
         0d:cf:57:8d:1c:a8:fa:ae:56:20:55:74:cf:c5:10:83:af:b7:
         c1:96:e3:4f:82:4a:7c:79:9d:24:c6:17:1a:7d:d6:fb:2a:85:
         56:71:1b:46:aa:37:76:09:d3:e8:a6:9f:74:83:b5:d0:f1:6b:
         b3:91:8f:df:d9:29:94:d3:61:88:be:c1:98:de:ae:9f:0f:f6:
         79:96:2c:4b:ca:12:c7:ff:88:d0:05:9c:63:87:01:2e:57:29:
         2f:4c:2f:74:80:df:9d:60:55:5b:d3:8d:c0:ef:98:3f:34:11:
         7c:24:e1:f8:49:3b:14:b9:c2:9e:66:87:77:bd:7f:19:0e:a4:
         ef:cc:b7:45:97:bd:3a:6c:1e:12:69:53:43:97:38:c5:36:ba:
         41:e6:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:22 2026 by rpki-client