Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e37332e34392e302f32342d3234203d3e203633363436.roa
File:                     3130332e37332e34392e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier:          EIpAOU5kdvmRyLSSWxF7oHOszQEiPmeLCSYFpgOJOYo=
Subject key identifier:   6B:F3:E6:27:1F:FF:79:68:8B:B4:74:04:F7:1A:35:E1:2F:0B:BC:D3
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       02DA0D8BCEF0378C49402ABE9F9C4F01EE7F48C9
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e37332e34392e302f32342d3234203d3e203633363436.roa
Signing time:             Thu 23 Apr 2026 10:34:10 +0000
ROA not before:           Thu 23 Apr 2026 10:29:10 +0000
ROA not after:            Thu 22 Apr 2027 10:34:10 +0000
asID:                     63646
IP address blocks:        103.73.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:da:0d:8b:ce:f0:37:8c:49:40:2a:be:9f:9c:4f:01:ee:7f:48:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: Apr 23 10:29:10 2026 GMT
            Not After : Apr 22 10:34:10 2027 GMT
        Subject: CN=6BF3E6271FFF79688BB47404F71A35E12F0BBCD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:ca:d1:f5:e0:6b:67:e0:51:d9:f5:10:7d:
                    9e:95:a3:01:3b:55:87:7c:f4:bd:61:f6:d2:d2:8e:
                    2f:d4:0d:41:8c:54:35:fd:8b:eb:bb:e5:cd:bf:61:
                    d2:ae:e9:6d:f9:f4:62:20:d8:30:41:38:30:82:eb:
                    66:8c:af:78:9c:67:77:f1:07:f6:8b:0d:4c:5f:ef:
                    a8:20:d6:cc:08:b5:42:68:51:45:a9:a9:a2:67:4d:
                    fc:85:aa:8b:53:91:9d:8b:ec:8e:05:fd:fc:3c:e9:
                    46:66:c9:ee:cc:ae:a3:ca:3b:28:10:0b:b7:c9:5c:
                    8b:b6:f0:99:20:45:85:5a:a2:a3:9e:35:96:20:ba:
                    29:6e:42:e2:a3:c1:28:ce:02:f1:c7:80:02:98:2c:
                    e6:03:7c:3c:f1:f0:d4:31:20:dd:85:a5:10:9c:bb:
                    c9:c0:02:96:49:67:4a:3d:f7:f6:db:0c:34:18:ea:
                    33:80:59:06:e6:6f:08:8d:5a:4e:92:15:50:eb:74:
                    88:7d:d6:c4:1a:ff:e1:0d:82:3a:6a:0d:62:89:e6:
                    12:64:cf:f3:95:5f:b9:3c:5b:be:1c:ea:e0:34:6a:
                    93:b8:d6:6c:e8:1c:ef:c9:6a:20:1a:90:65:dc:e0:
                    c5:73:d9:38:58:04:c2:ad:94:62:19:6a:99:ce:14:
                    4f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:E6:27:1F:FF:79:68:8B:B4:74:04:F7:1A:35:E1:2F:0B:BC:D3
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e37332e34392e302f32342d3234203d3e203633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:70:a1:ba:cf:85:96:96:70:0a:be:34:c3:29:80:5a:14:d7:
         ad:4b:14:2a:aa:d0:f0:c7:5e:48:1c:ac:b8:61:37:5c:63:61:
         18:f6:5f:ec:b2:bb:c2:2b:cd:43:5e:53:70:7a:35:f7:15:95:
         46:bf:99:31:9a:99:53:d3:4a:25:4f:d9:f8:91:fb:09:ce:df:
         8a:5a:4e:40:42:28:a6:6f:52:bd:69:c6:b4:db:4c:44:63:5f:
         58:3d:7f:0f:cb:cb:c6:90:66:7f:26:fa:41:0e:a6:99:a1:49:
         e8:3f:5f:6a:3d:c2:aa:e0:fc:fb:36:20:0a:4a:04:6f:f4:e8:
         07:bb:47:98:61:56:53:0c:ac:05:a5:49:01:a0:0c:9d:5d:8a:
         d6:3a:f7:6c:43:fb:be:57:09:a2:87:3e:c6:bc:5c:df:b8:3a:
         03:b8:0f:f4:1c:fb:05:70:58:75:97:da:7a:de:10:07:ca:84:
         80:41:73:3e:36:54:ec:7f:83:a5:91:64:b9:30:fa:07:13:cb:
         7a:83:92:7e:93:f3:73:6e:d0:bd:b3:97:a5:34:59:06:68:72:
         2a:0b:7d:9b:51:06:cc:c9:b3:6b:33:5f:7d:9e:8c:d5:b8:38:
         d9:b4:dc:d6:d9:23:0c:76:48:85:f1:a6:94:bc:ea:01:8d:30:
         79:1a:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:23 2026 by rpki-client