Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/3130332e35322e3130342e302f32322d3232203d3e2030.roa
File:                     3130332e35322e3130342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          amnUeudqHKhFal12dB15vFvsAAj6H5215eeQCVL2GRo=
Subject key identifier:   3F:F9:14:65:AA:23:DF:2E:55:8D:FE:1E:53:4E:6B:2F:E9:96:4F:C8
Certificate issuer:       /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E
Certificate serial:       06D9688FBCD6A8B8D924C3A5B26C941B57634EFE
Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/3130332e35322e3130342e302f32322d3232203d3e2030.roa
Signing time:             Mon 20 Apr 2026 06:03:35 +0000
ROA not before:           Mon 20 Apr 2026 05:58:35 +0000
ROA not after:            Mon 19 Apr 2027 06:03:35 +0000
asID:                     0
IP address blocks:        103.52.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d9:68:8f:bc:d6:a8:b8:d9:24:c3:a5:b2:6c:94:1b:57:63:4e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E
        Validity
            Not Before: Apr 20 05:58:35 2026 GMT
            Not After : Apr 19 06:03:35 2027 GMT
        Subject: CN=3FF91465AA23DF2E558DFE1E534E6B2FE9964FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a7:4c:a1:b7:7c:f3:45:e5:b0:70:11:2b:b8:
                    6a:ba:dc:40:7f:f1:e0:8e:28:28:5f:a1:33:77:a7:
                    af:c4:07:26:bc:cc:53:db:07:44:f9:ab:e6:69:f4:
                    fa:ec:11:df:24:48:8b:b0:e2:2f:c0:49:57:0c:e5:
                    c7:0d:5d:eb:b7:f3:02:4a:02:36:2c:a0:00:9f:ad:
                    80:d3:6c:38:0a:85:13:66:37:e3:22:42:b5:c5:e7:
                    5b:01:58:36:66:f0:17:07:1d:76:84:79:b4:70:6a:
                    64:7d:ae:d9:9f:6d:50:4e:93:c9:9f:64:11:7e:8f:
                    24:44:6e:86:30:c8:c9:ac:f6:f1:35:c2:02:d3:2e:
                    f3:e7:28:0d:5e:18:28:2a:da:6a:55:7d:85:4a:82:
                    21:be:e7:2f:6f:df:3b:0c:97:b5:45:d2:be:6e:7d:
                    6f:25:0b:cc:67:db:f1:1b:ce:60:e9:02:7a:ff:4d:
                    c8:0c:28:5a:bb:3b:b5:66:a2:4e:bd:7b:0f:10:2b:
                    3c:09:03:38:8c:91:cb:cb:26:f8:1e:0b:01:bd:88:
                    31:bd:8e:82:b1:36:ab:38:b3:2c:5d:d8:5b:d4:d8:
                    a4:8e:08:b7:35:cc:7c:55:8a:74:fe:60:ff:4e:f2:
                    70:b8:4a:bf:e4:06:45:f4:8b:d9:38:04:5a:b7:65:
                    99:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F9:14:65:AA:23:DF:2E:55:8D:FE:1E:53:4E:6B:2F:E9:96:4F:C8
            X509v3 Authority Key Identifier:
                keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/3130332e35322e3130342e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:90:27:e1:8e:9d:98:b4:cd:2d:c2:53:29:39:86:54:c0:60:
         57:96:3a:24:96:94:90:f2:7a:33:af:67:2f:55:1d:4d:91:1d:
         c2:0f:b0:ec:7e:e4:64:b4:3a:75:65:c1:61:75:f2:d1:68:7a:
         45:99:c8:0d:0e:21:a3:81:54:d6:b4:cc:c0:bb:6d:41:b3:38:
         f7:7f:a8:10:93:2f:a2:81:7f:6d:94:f8:aa:fc:0c:80:43:65:
         c9:14:2a:b0:cd:21:64:04:af:fa:68:41:42:d8:62:90:3e:03:
         97:4d:0d:7f:f4:af:28:5b:25:86:10:31:61:5d:76:9b:c4:43:
         3d:04:f3:e9:fb:af:8e:06:bf:74:36:34:11:0b:0c:cf:7f:c1:
         b5:a0:12:8a:28:9f:60:00:4b:2a:8c:eb:12:82:63:b4:f5:41:
         47:ca:4f:4f:14:2b:8d:7a:f2:c9:e8:c2:3a:ed:fc:e7:78:3a:
         94:9a:80:54:f3:a7:c5:a6:3c:75:a1:1d:36:4c:93:b9:2b:af:
         de:00:de:b6:9a:93:79:c2:75:96:f5:74:b1:c1:b9:88:04:bf:
         a1:be:04:98:4a:29:c4:95:4d:74:ab:43:62:8d:62:87:58:be:
         31:f6:7f:28:6a:56:70:16:88:10:78:d0:06:2c:83:86:ed:98:
         d5:e9:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:43 2026 by rpki-client