Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa
File:                     3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          trWDmxj/bNtvLXn0EQ5qDElMfvX977EfQlgVuGKjWOk=
Subject key identifier:   44:98:7A:3F:1E:D9:8C:AB:4C:25:C9:EA:1C:CA:C3:A7:C6:47:57:3A
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       313E83ABEDE28FE7E1BA5137A7F852FD376A9C93
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa
Signing time:             Fri 08 May 2026 08:33:29 +0000
ROA not before:           Fri 08 May 2026 08:28:29 +0000
ROA not after:            Fri 07 May 2027 08:33:29 +0000
asID:                     58466
IP address blocks:        103.222.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3e:83:ab:ed:e2:8f:e7:e1:ba:51:37:a7:f8:52:fd:37:6a:9c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: May  8 08:28:29 2026 GMT
            Not After : May  7 08:33:29 2027 GMT
        Subject: CN=44987A3F1ED98CAB4C25C9EA1CCAC3A7C647573A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:b1:d6:b5:15:b5:a4:4d:9e:f1:23:3e:27:
                    0e:78:4c:0c:38:e2:59:1e:60:69:27:5a:6b:af:46:
                    1c:85:5a:f7:ad:f4:66:00:64:81:12:10:22:87:a8:
                    5c:bc:70:82:8e:79:29:92:44:0e:96:2c:b1:cf:90:
                    09:ee:d7:79:c1:63:72:20:7d:f6:47:1e:3d:3d:f2:
                    d2:7e:18:39:98:c1:2f:ba:6d:1c:59:9f:71:3a:2f:
                    e8:96:08:09:4e:ee:8c:e6:56:ce:4c:94:d4:1a:6b:
                    10:8d:a4:8a:b4:78:7d:a6:da:84:6b:7d:3c:f1:5a:
                    0f:c8:7f:24:d5:de:ce:3e:2a:50:5a:56:ba:53:32:
                    95:06:af:9d:3b:37:0f:37:6d:cb:25:3f:a4:9e:14:
                    96:5d:82:36:d8:48:9b:80:20:0c:12:43:91:f5:7b:
                    ec:c6:60:50:f8:b3:83:d5:46:59:53:52:38:af:50:
                    b2:e6:0e:b5:a1:59:6b:4e:e8:d6:39:2e:d5:0f:4e:
                    a2:64:b6:17:1c:66:d3:8a:02:54:4e:ee:93:52:c3:
                    5e:49:3f:a0:3f:53:28:60:da:bc:96:17:07:44:44:
                    00:61:14:dd:ff:ea:81:bf:93:7a:e8:be:11:5f:87:
                    12:84:24:4f:26:91:4f:02:dd:ee:e2:4f:39:12:ab:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:98:7A:3F:1E:D9:8C:AB:4C:25:C9:EA:1C:CA:C3:A7:C6:47:57:3A
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138332e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.222.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:54:41:87:5a:a4:1e:c8:69:dd:58:19:14:bd:4c:53:91:5f:
         e8:05:21:2b:eb:0c:e9:c5:6e:9b:7e:fc:c5:f8:81:68:2e:b6:
         a4:dc:da:53:00:48:39:d7:6e:a3:74:40:9b:11:68:ff:05:01:
         ba:bb:44:58:b7:c8:0f:c2:e7:43:1e:d5:27:30:d9:c3:2e:c8:
         82:1f:59:e8:27:50:e2:2c:f1:b6:b2:df:3c:17:2f:7e:0b:f0:
         df:58:35:88:2f:21:8f:3f:85:a1:f1:6d:c8:a1:3c:70:43:02:
         ab:b3:92:b0:11:12:2d:44:c9:6d:73:ab:4f:03:71:01:5f:82:
         96:c1:cf:da:01:3a:1f:de:5c:6f:e2:25:38:d2:23:48:c8:82:
         46:68:69:43:6a:28:e1:b9:83:c4:b4:e8:f2:3a:24:7b:e0:a2:
         f8:b6:bc:15:80:a4:8a:c9:49:d4:c5:b5:c0:48:b1:61:03:0b:
         29:53:d4:fa:00:9a:17:73:56:37:d4:b7:62:06:a7:f2:1a:c6:
         f5:68:a4:9f:fc:1c:1b:3a:7f:57:47:ce:eb:fa:09:68:f9:31:
         f3:b1:50:94:c1:05:53:50:4e:04:b4:47:ed:96:51:df:ba:d9:
         e4:84:9d:03:f2:1e:df:a3:0e:43:04:b8:c0:df:08:5a:3d:6f:
         b3:f7:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:23:01 2026 by rpki-client