Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131352e302f32342d3234203d3e203633353939.roa
File:                     3130332e38392e3131352e302f32342d3234203d3e203633353939.roa (raw, json)
Hash identifier:          B4R2Xn+gXDVx1b+C8xHqcnF6Dc+KqwoBc8mdRqmz84g=
Subject key identifier:   BB:84:4E:79:92:90:11:2D:26:9C:3E:EA:AC:D9:B4:98:4A:CF:FF:8F
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       22757703D0C799263E79F574C4E5627903355A3B
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131352e302f32342d3234203d3e203633353939.roa
Signing time:             Thu 30 Apr 2026 07:05:03 +0000
ROA not before:           Thu 30 Apr 2026 07:00:03 +0000
ROA not after:            Thu 29 Apr 2027 07:05:03 +0000
asID:                     63599
IP address blocks:        103.89.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:75:77:03:d0:c7:99:26:3e:79:f5:74:c4:e5:62:79:03:35:5a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: Apr 30 07:00:03 2026 GMT
            Not After : Apr 29 07:05:03 2027 GMT
        Subject: CN=BB844E799290112D269C3EEAACD9B4984ACFFF8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:46:d9:fc:e3:9b:18:84:c4:dc:9e:93:e3:
                    5d:58:aa:60:d5:b0:eb:6a:b3:9e:d0:91:cb:63:ac:
                    67:d6:e4:3b:81:e9:ac:5f:f7:cf:9d:40:40:cb:1e:
                    cc:c4:33:84:19:96:9d:28:18:28:91:0c:e0:4a:71:
                    fc:a1:eb:a9:dd:3e:6e:73:75:d5:bd:28:d7:b9:69:
                    47:47:d3:94:39:19:30:03:2f:cb:e4:74:fd:d3:50:
                    d3:be:36:38:77:87:4d:30:2e:2b:8a:f9:98:56:16:
                    37:4e:12:32:d9:66:2d:2f:00:04:5b:ff:21:d0:0c:
                    c3:28:d6:af:54:d4:c4:3a:0b:a0:7d:8b:af:64:1f:
                    d2:53:34:f8:c3:b8:42:ed:c0:22:d9:f2:62:5f:9e:
                    76:fa:06:03:3f:04:17:cd:87:e9:36:f4:0a:0d:78:
                    19:4c:2f:6a:10:83:d1:df:47:9f:ae:d9:ab:d9:6c:
                    4f:c2:b4:1a:25:ee:1e:96:b4:5f:12:76:9e:9a:7f:
                    50:b5:66:d4:9f:ce:18:ed:08:81:07:58:30:63:ea:
                    d7:4c:ea:9f:f9:34:fe:b8:e5:03:53:d0:8f:1d:fc:
                    9e:ba:e4:45:88:f6:b4:a1:c9:fe:98:6a:95:01:24:
                    09:96:01:65:de:ef:29:8c:f1:12:8a:9b:09:28:54:
                    69:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:84:4E:79:92:90:11:2D:26:9C:3E:EA:AC:D9:B4:98:4A:CF:FF:8F
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131352e302f32342d3234203d3e203633353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:37:f5:54:dd:76:ee:81:ec:ce:83:e1:2d:c1:0d:4b:62:3c:
         b0:93:01:e9:75:4c:f4:d6:ce:03:22:a8:60:27:b2:9d:f0:2a:
         1c:83:4f:7c:46:3d:4d:b2:d3:1d:61:80:24:6c:23:11:cb:fd:
         82:a7:35:fc:b7:ce:ef:14:83:2d:4f:f8:d0:06:c5:86:b5:14:
         ec:5d:71:5b:ec:1f:0b:ff:f7:d7:31:41:2f:49:48:df:d7:49:
         e0:10:0d:e9:b3:71:62:81:5f:18:94:66:82:96:5e:a3:20:4e:
         72:2f:35:05:b8:79:17:62:33:31:14:34:bc:98:ce:80:d3:32:
         ad:d2:ee:0b:cf:46:f4:67:19:ff:89:4c:00:7a:a1:2c:c4:80:
         73:90:0c:17:11:f4:b3:87:ec:31:5d:ea:63:1a:cd:59:cc:8f:
         a4:ea:21:85:0a:f4:81:1a:89:36:c3:0f:37:8b:fa:9d:93:ef:
         8a:62:13:33:67:f8:8c:e8:2e:f6:f9:70:53:e1:37:75:b5:8b:
         df:b1:09:4a:70:1a:ae:3e:63:fc:44:aa:13:01:77:9e:2f:03:
         44:26:99:2a:93:0b:01:bb:0b:b0:1b:9c:19:6b:eb:23:f3:1c:
         8d:33:28:f9:c0:7d:d5:f4:0b:9f:31:67:59:35:c3:5a:78:e5:
         32:d8:09:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:59:10 2026 by rpki-client