Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098537405054451714/0/3130332e39372e36302e302f32342d3234203d3e20313430323932.roa
File:                     3130332e39372e36302e302f32342d3234203d3e20313430323932.roa (raw, json)
Hash identifier:          U7NKHyYZULKMwc6yYJq5zuc6wPKV1SzzC0H5ImM1HKo=
Subject key identifier:   20:15:EC:4E:07:76:B2:51:45:1A:4C:E1:AB:43:E8:A6:BE:7C:56:B1
Certificate issuer:       /CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8
Certificate serial:       1419321231D90FD11DEBF1DFA103A2B07BF3F1CE
Authority key identifier: CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/3130332e39372e36302e302f32342d3234203d3e20313430323932.roa
Signing time:             Thu 23 Apr 2026 02:49:30 +0000
ROA not before:           Thu 23 Apr 2026 02:44:30 +0000
ROA not after:            Thu 22 Apr 2027 02:49:30 +0000
asID:                     140292
IP address blocks:        103.97.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:19:32:12:31:d9:0f:d1:1d:eb:f1:df:a1:03:a2:b0:7b:f3:f1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8
        Validity
            Not Before: Apr 23 02:44:30 2026 GMT
            Not After : Apr 22 02:49:30 2027 GMT
        Subject: CN=2015EC4E0776B251451A4CE1AB43E8A6BE7C56B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:7c:15:14:6b:fb:10:55:af:9e:d7:60:4f:
                    57:a6:10:a9:5c:ab:5f:91:76:b0:16:4e:e1:c2:ec:
                    32:2c:62:02:eb:3a:25:d2:f7:37:d1:31:f3:1e:ba:
                    d0:42:63:34:a8:36:d9:bb:d7:57:73:9b:58:dc:1f:
                    85:7f:00:0f:d4:80:bf:80:4b:de:e4:dc:cd:e3:d9:
                    49:d7:a0:ad:01:50:e6:c3:72:97:90:4c:fe:d8:b5:
                    72:8f:f8:49:ba:2c:63:c2:df:6a:30:d0:e7:5f:16:
                    ef:65:02:17:00:ea:20:a7:41:61:78:21:9c:2d:ad:
                    d8:87:cb:9c:11:a8:b0:d1:c6:5a:60:0c:cd:27:03:
                    9e:56:0b:00:8d:3f:ac:7f:f3:fb:23:82:ed:16:ee:
                    be:d1:95:a4:c7:75:e0:3e:4a:fc:71:59:dc:ec:e0:
                    9b:33:f1:ff:bc:7c:aa:9b:e1:f1:bc:1d:2e:db:84:
                    42:fa:83:e7:a8:53:9b:31:0a:96:4e:7a:3e:8d:de:
                    11:96:13:7b:ee:a5:1c:6d:99:84:d7:81:d1:2c:f9:
                    79:6c:83:c8:d9:5e:db:bb:68:84:b7:74:21:8d:c4:
                    b5:52:83:7f:d8:2c:9e:c3:ee:7d:d8:eb:a1:6c:be:
                    fe:96:46:53:c1:b1:70:d0:2e:1c:a7:af:06:f7:3a:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:15:EC:4E:07:76:B2:51:45:1A:4C:E1:AB:43:E8:A6:BE:7C:56:B1
            X509v3 Authority Key Identifier:
                keyid:CB:4F:6D:C5:C4:AB:EF:79:AF:BF:EE:CF:18:BA:6D:82:A1:D9:0C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CB4F6DC5C4ABEF79AFBFEECF18BA6D82A1D90CC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098537405054451714/0/3130332e39372e36302e302f32342d3234203d3e20313430323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:6c:7f:6f:6d:60:39:1b:7b:50:f5:a8:89:6e:66:16:58:98:
         5b:22:d1:ee:4c:db:31:87:0a:bb:ef:a7:80:93:76:32:2f:2f:
         b1:73:89:47:aa:f4:28:fe:af:32:f3:90:3e:78:5c:f3:cc:45:
         bb:e8:19:cc:08:98:69:75:e6:60:10:7c:16:ce:59:e2:9e:4b:
         c9:80:d9:bb:9c:1d:65:51:00:39:ac:72:bb:d2:4e:16:d6:ed:
         c1:44:70:69:74:55:48:20:dc:60:fc:f0:7f:ed:76:43:62:9a:
         70:7b:e5:3d:16:4e:29:3f:bf:40:59:3a:82:85:57:ce:46:8b:
         82:a9:84:bc:fe:1e:a8:b1:f2:21:fd:21:d4:33:c4:c9:46:ab:
         26:57:36:e7:47:cd:40:9a:9d:00:ed:20:7d:3c:cc:b8:b1:ad:
         1d:2e:73:ab:6c:ad:52:09:91:89:b7:9c:ab:db:8b:0b:73:d5:
         77:67:15:e3:4a:ce:a0:b3:bf:35:8c:c2:1a:23:6a:87:26:70:
         87:01:d8:78:9e:48:89:95:d4:3f:3a:06:f3:fa:17:e8:0a:83:
         63:36:a5:7d:e0:32:dd:12:61:6c:46:2b:f4:65:63:5b:58:e3:
         75:17:34:c7:e6:31:ac:9f:0e:25:25:b0:2c:3b:3a:08:68:a3:
         71:2a:13:11
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:59:46 2026 by rpki-client