Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e342e302f32322d3232203d3e2039383038.roa
File:                     3130332e3231362e342e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier:          f7nNO2as4uAkXczBq6ceHvjohtGu7KtEhJ6yF+qbpoE=
Subject key identifier:   20:43:93:A2:3F:98:03:48:3C:DC:4F:E2:ED:15:BE:EE:B3:BE:69:BE
Certificate issuer:       /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial:       2F39FCD442B5F61C391874EEA33024D906E000DF
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e342e302f32322d3232203d3e2039383038.roa
Signing time:             Mon 20 Apr 2026 06:05:56 +0000
ROA not before:           Mon 20 Apr 2026 06:00:56 +0000
ROA not after:            Mon 19 Apr 2027 06:05:56 +0000
asID:                     9808
IP address blocks:        103.216.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:39:fc:d4:42:b5:f6:1c:39:18:74:ee:a3:30:24:d9:06:e0:00:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
        Validity
            Not Before: Apr 20 06:00:56 2026 GMT
            Not After : Apr 19 06:05:56 2027 GMT
        Subject: CN=204393A23F9803483CDC4FE2ED15BEEEB3BE69BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:6d:0a:ea:d2:0c:54:99:f2:f0:55:72:ae:
                    86:34:f9:c8:ed:59:0f:9e:81:2c:a2:0d:3f:58:e9:
                    97:6c:be:1b:da:d8:73:40:34:93:d7:51:8c:96:9f:
                    cd:6a:79:df:11:ae:6f:31:74:9b:3d:f3:b5:da:9c:
                    1e:de:f0:1b:2f:24:ef:74:9a:2f:ae:fb:cf:6d:d4:
                    3a:67:57:65:42:fb:e9:8f:85:8b:43:bb:6e:34:a7:
                    3d:43:87:59:c6:75:c3:fa:5d:62:64:35:6e:25:7a:
                    c8:76:76:2b:e6:28:16:55:0a:75:94:07:23:ab:81:
                    73:4f:d9:45:15:2f:f7:1f:d9:29:b5:dd:3d:39:ac:
                    da:1d:6d:b8:fa:ac:5e:5e:cb:14:62:fc:e9:61:81:
                    17:6e:88:02:45:6d:24:6e:c3:43:4b:d8:5b:e8:b4:
                    4d:64:89:7c:69:1c:ea:e7:45:f5:a7:70:62:0b:a6:
                    6f:08:e4:1b:88:32:a4:e5:12:3f:c2:f1:86:b9:34:
                    e1:07:7e:4e:37:81:1d:73:8a:1e:a9:3a:fa:4c:9e:
                    1e:d5:cf:b4:6e:da:54:52:19:5a:fc:17:80:a6:ef:
                    10:d2:3f:50:02:84:5e:6c:41:0b:38:7a:b0:b6:9e:
                    49:95:b8:55:21:5d:81:8b:b7:fb:3d:ec:10:bd:15:
                    04:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:43:93:A2:3F:98:03:48:3C:DC:4F:E2:ED:15:BE:EE:B3:BE:69:BE
            X509v3 Authority Key Identifier:
                keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e342e302f32322d3232203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:e7:f9:39:1a:cb:29:3e:6e:e0:87:07:77:4c:58:58:fa:
         23:d2:8c:15:4b:cb:17:73:96:96:2c:01:a1:00:2b:8c:50:61:
         71:1b:e4:65:9b:cb:db:54:c2:ee:e9:7b:79:1e:90:59:eb:4d:
         32:e7:62:ae:eb:87:ce:d1:10:00:fa:be:84:25:e6:f9:6f:44:
         a6:01:f8:4e:e6:36:b2:9e:e0:b5:a7:e1:5b:f8:4b:7a:9f:25:
         6f:d6:4c:a7:d6:6c:8c:0a:25:69:7b:d6:ed:81:39:8c:9e:ef:
         5e:a2:f8:1c:2c:d2:5c:ce:73:c6:54:36:70:f0:c6:71:37:46:
         ed:54:3b:de:a3:2e:2f:31:9c:d5:db:ee:7d:3d:03:fe:6b:e3:
         10:a2:f2:a6:a0:1d:a4:e5:bb:87:58:aa:e0:13:6f:85:a7:9b:
         6f:94:3b:90:df:ab:c3:b1:43:7c:c7:33:c7:ed:d3:81:11:b5:
         d0:f4:b6:c9:19:43:4e:9b:78:2e:f4:47:4c:4f:bc:00:bb:91:
         96:45:f9:47:d1:82:69:48:1b:fd:ae:fe:95:4a:9a:f2:1f:1d:
         47:a1:cb:9e:22:26:dc:87:06:0a:7e:99:35:e9:f7:ca:a8:8e:
         e3:5e:59:43:3f:fd:c6:f3:6c:41:2f:af:53:b1:24:95:a6:f2:
         db:c0:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:41 2026 by rpki-client