Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa
File:                     3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          G/oPdJHLin19eoCFgMmdJT+rkoQwoDBkC0Q90Pre/iY=
Subject key identifier:   00:B7:A7:6D:CA:D8:D7:84:DF:AC:F4:FD:57:81:13:FE:9C:DD:70:7E
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       7DC53CDE9E34E354161F100469C912A48AF3F0A4
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa
Signing time:             Fri 08 May 2026 08:33:29 +0000
ROA not before:           Fri 08 May 2026 08:28:29 +0000
ROA not after:            Fri 07 May 2027 08:33:29 +0000
asID:                     58466
IP address blocks:        103.222.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c5:3c:de:9e:34:e3:54:16:1f:10:04:69:c9:12:a4:8a:f3:f0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: May  8 08:28:29 2026 GMT
            Not After : May  7 08:33:29 2027 GMT
        Subject: CN=00B7A76DCAD8D784DFACF4FD578113FE9CDD707E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:e7:40:57:71:e9:3e:27:9f:bd:5e:a1:64:
                    41:e9:b1:ee:34:39:fe:10:c0:f8:3e:85:80:36:8f:
                    3e:53:db:fa:d5:29:0a:24:dc:01:cb:eb:2c:5e:49:
                    15:21:64:ef:2c:a1:f6:4f:19:3f:0f:d1:3b:e5:5f:
                    28:ec:05:f8:96:55:ea:08:d3:df:e8:4d:db:6f:b3:
                    c8:83:fc:dc:9a:d3:03:57:d7:ce:d2:0b:a5:d1:2f:
                    2d:15:ee:b4:0b:e9:a6:ca:11:dd:8e:4d:f0:59:62:
                    e4:00:16:41:e8:d1:8d:fc:bc:9c:2b:d8:12:21:a0:
                    be:8d:f4:af:74:2c:70:dd:ca:3b:aa:ca:fa:2a:d3:
                    fb:9d:1e:30:21:ca:17:d5:c4:4a:6d:25:7c:03:83:
                    e7:7e:ad:07:e4:27:f8:67:c3:2a:d5:e3:28:37:79:
                    1b:e5:9a:5e:3c:a0:5d:9e:05:fa:00:87:f3:dd:78:
                    55:f0:51:6c:3c:e0:75:d3:f7:db:e1:5c:9c:6a:b8:
                    21:88:de:22:87:0a:dd:42:7d:28:0d:05:9a:c5:58:
                    4f:19:9e:0d:e6:f3:24:50:ab:55:d8:71:1d:05:a6:
                    a9:47:a1:13:68:5d:27:a3:96:a0:b5:58:41:19:2b:
                    7b:55:e7:65:a6:01:1e:c2:62:76:e2:24:0b:33:35:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B7:A7:6D:CA:D8:D7:84:DF:AC:F4:FD:57:81:13:FE:9C:DD:70:7E
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137392e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.222.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:b6:c0:03:e3:2b:7e:40:1e:6d:2f:78:e7:5f:f8:a4:85:2f:
         94:12:29:1f:30:c8:bb:22:27:ee:3a:f1:9e:9d:58:61:3f:ee:
         d4:92:e9:97:fa:2d:66:c6:11:48:66:31:91:1a:9b:04:85:8c:
         86:eb:08:90:19:66:7b:b4:91:9b:a1:29:f4:50:b5:72:fc:81:
         82:92:da:9c:6b:15:9f:86:30:bb:44:a9:f7:d3:4d:cd:73:a6:
         58:64:9d:43:08:92:d6:3a:3e:3e:b0:09:c4:60:e1:57:2c:fe:
         48:2b:3e:85:d1:4e:b4:f1:48:6a:f4:15:0f:53:63:73:3e:c7:
         dc:c0:a9:30:74:50:12:b3:a9:22:17:23:0b:04:a4:65:83:59:
         34:68:cc:fe:78:18:aa:d7:88:22:aa:e2:f4:83:7c:de:b1:0b:
         6d:d4:52:02:7e:ba:8b:0e:49:73:23:74:b1:b3:ea:34:fd:2c:
         c6:cf:cb:e2:81:39:03:52:6f:d8:59:33:1e:e5:ca:98:e5:cb:
         23:c4:a1:60:66:65:1c:a0:d3:22:a1:80:52:2e:c9:1e:44:7f:
         3c:53:b2:a1:b4:65:ae:99:79:7a:c5:2a:97:35:2b:a7:2c:38:
         a1:1c:88:e1:30:53:82:5b:62:1f:d3:2f:b5:1e:93:f5:40:d6:
         1e:83:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:43 2026 by rpki-client