Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e37332e34382e302f32342d3234203d3e203633363436.roa
File:                     3130332e37332e34382e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier:          xY7G3MPnBtjNlqe3SHhH3ScgUtMUNbiNzRtCHoGz1c4=
Subject key identifier:   DD:8F:C3:59:5B:DD:A4:9B:E8:8D:6E:EE:7D:24:56:C2:A7:88:52:EB
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       51F540416246E0D125B027054FF2BFC6EEAC8D94
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e37332e34382e302f32342d3234203d3e203633363436.roa
Signing time:             Thu 23 Apr 2026 10:34:10 +0000
ROA not before:           Thu 23 Apr 2026 10:29:10 +0000
ROA not after:            Thu 22 Apr 2027 10:34:10 +0000
asID:                     63646
IP address blocks:        103.73.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f5:40:41:62:46:e0:d1:25:b0:27:05:4f:f2:bf:c6:ee:ac:8d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: Apr 23 10:29:10 2026 GMT
            Not After : Apr 22 10:34:10 2027 GMT
        Subject: CN=DD8FC3595BDDA49BE88D6EEE7D2456C2A78852EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:ea:a2:68:ca:9b:04:66:1e:6c:ff:e7:02:
                    27:ff:f9:c5:3f:47:64:d3:b5:93:6b:a9:6d:c5:58:
                    3b:ab:f9:b5:05:e0:52:bd:50:ca:f3:fe:d8:13:a9:
                    6f:49:09:36:1b:fd:67:72:85:c4:76:01:a9:a8:c0:
                    ca:bb:45:b8:c5:f3:d6:d3:21:50:0d:2f:44:f1:b5:
                    69:c9:c4:41:52:65:cd:3a:53:87:dd:0a:c8:0e:61:
                    7f:81:e5:68:43:ec:ee:f8:82:14:11:a7:04:1a:88:
                    97:05:0e:23:5f:a5:6f:69:4a:72:40:54:ac:06:3a:
                    62:5e:12:31:73:84:80:4c:26:f9:be:66:cc:74:1e:
                    5b:46:1a:aa:d4:3f:d8:ff:6a:22:90:1d:4d:f2:b5:
                    d0:c4:ec:57:d8:61:53:73:9a:6c:95:21:aa:b4:8e:
                    38:da:80:54:c2:56:ef:9f:79:ec:99:5f:9b:8a:d0:
                    b2:f5:84:3a:3a:b3:77:64:97:5d:d0:12:04:ae:cc:
                    9e:59:5b:f8:8b:30:90:d3:eb:b3:87:46:87:51:c8:
                    28:ec:1b:83:52:9e:2d:f7:9c:3d:22:9a:5e:06:9c:
                    0c:a2:22:ae:8d:c1:dd:49:3f:c0:14:12:ad:8c:a6:
                    e5:63:7e:d6:ed:40:d3:e9:c6:ad:a5:f3:7f:78:9b:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8F:C3:59:5B:DD:A4:9B:E8:8D:6E:EE:7D:24:56:C2:A7:88:52:EB
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e37332e34382e302f32342d3234203d3e203633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:24:ce:70:fb:b2:1b:ad:cc:c7:41:ba:37:17:d6:16:40:28:
         1a:2a:a2:1a:42:b3:e1:2f:e8:e3:b4:02:d0:22:ea:f5:10:9b:
         97:31:a6:ba:45:82:eb:29:5a:cd:58:0c:b7:59:38:c0:ff:07:
         bc:29:e5:b4:22:b2:03:39:fb:b2:9a:bb:e8:01:a2:19:72:d1:
         c9:c8:cb:f2:01:f0:3a:ad:65:f6:5e:89:a0:7e:b7:c4:78:d0:
         75:20:4c:14:8d:dc:f9:69:b3:1a:50:9e:b3:ce:1d:fd:b4:21:
         82:5a:df:65:94:14:72:47:5b:95:79:f1:95:b7:9a:51:af:10:
         7c:2d:9f:99:51:ed:24:17:73:5e:31:99:8d:fa:d6:f3:d3:83:
         4c:61:ef:57:4e:1f:58:68:f4:08:70:00:29:05:95:9f:71:df:
         a0:db:9e:be:5e:7f:d7:90:1b:53:0c:9d:50:12:d3:36:33:ed:
         c1:a5:3b:40:a3:cc:b2:f3:d3:b2:09:1d:70:bb:29:eb:de:56:
         16:0b:5b:34:04:50:1e:b2:87:dc:e3:d6:88:9f:c1:ed:fe:57:
         ee:eb:17:f3:84:3e:18:51:96:51:af:db:17:9e:b7:59:9b:d4:
         32:f4:5b:65:53:e7:b1:86:12:aa:e2:b6:a7:7b:1e:5e:0b:7d:
         7f:c8:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:23 2026 by rpki-client