Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3232382e302f32322d3232203d3e2030.roa
File:                     3130332e38362e3232382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          revD9mlwb+isHE35SgTvrpxTz/SGrQoq91l4dp/TbTA=
Subject key identifier:   B1:B5:12:3E:FF:CC:AE:9E:D0:A9:63:3E:CC:F9:A0:AC:51:0B:3D:05
Certificate issuer:       /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial:       545AC8BFDD3BF83634F23461BFC5B4773978D971
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3232382e302f32322d3232203d3e2030.roa
Signing time:             Thu 23 Apr 2026 07:54:11 +0000
ROA not before:           Thu 23 Apr 2026 07:49:11 +0000
ROA not after:            Thu 22 Apr 2027 07:54:11 +0000
asID:                     0
IP address blocks:        103.86.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5a:c8:bf:dd:3b:f8:36:34:f2:34:61:bf:c5:b4:77:39:78:d9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
        Validity
            Not Before: Apr 23 07:49:11 2026 GMT
            Not After : Apr 22 07:54:11 2027 GMT
        Subject: CN=B1B5123EFFCCAE9ED0A9633ECCF9A0AC510B3D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:c8:d2:a7:a2:8d:3a:78:8e:82:2a:56:30:
                    b4:f7:b9:33:df:59:bb:e1:87:ed:85:f2:2d:d1:21:
                    2c:dc:89:26:4c:c1:d9:47:3b:19:55:7a:25:05:83:
                    c8:fd:67:3d:99:72:b9:33:c6:cd:f4:68:a7:58:da:
                    1e:c5:83:23:4a:0c:84:b9:66:df:dd:2a:8c:02:32:
                    b3:48:6d:bd:05:f9:8b:33:49:8d:56:6c:57:89:c3:
                    0c:85:e4:ff:73:5e:92:f0:3e:11:4a:2b:7f:35:b9:
                    19:ef:c6:52:12:2d:55:6f:38:19:39:2a:c8:2f:58:
                    73:0a:b5:48:ef:de:63:12:61:83:49:f2:50:66:80:
                    42:df:d1:a8:ff:a1:dc:d5:96:34:fd:82:21:78:a8:
                    3d:a4:0b:a5:10:e5:bb:e1:89:32:58:57:5f:8b:05:
                    28:c4:8d:5d:16:0a:3e:80:c0:1b:c6:27:6b:d3:fd:
                    01:1b:37:61:40:16:b6:3f:f8:c2:4e:fb:90:f4:8f:
                    5e:b6:65:0b:09:50:c4:02:2a:67:c5:dc:32:bf:37:
                    e6:c7:ca:a8:d2:a7:9a:1e:37:d5:33:a1:a3:c8:51:
                    00:fd:8d:14:ae:87:7d:5b:d2:b7:ac:0c:5d:bb:a1:
                    f8:60:88:b5:d0:d1:45:17:39:aa:d4:03:8c:40:37:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B5:12:3E:FF:CC:AE:9E:D0:A9:63:3E:CC:F9:A0:AC:51:0B:3D:05
            X509v3 Authority Key Identifier:
                keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3232382e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:a7:ff:ae:a4:e3:e4:b8:80:3f:c3:71:7c:0f:1e:d3:d3:
         db:1c:64:41:f7:74:ee:0b:e8:85:db:aa:00:e3:f1:b2:de:1a:
         8f:7d:0e:2e:66:9f:4c:96:01:a9:a4:f0:d1:9a:ad:ad:c8:07:
         88:2d:d1:7e:b7:f1:63:cc:2a:ae:7d:7c:9a:a6:e5:f7:a1:b6:
         a6:bf:51:33:7b:7d:7b:f9:fc:f1:2a:9c:8f:8c:b3:8a:52:93:
         fe:d4:31:70:fe:4d:61:11:c9:69:9b:c7:a6:f8:57:ae:c5:70:
         ec:b8:81:34:03:b5:c5:a0:ac:e2:e5:cf:99:62:83:3b:49:48:
         09:b0:19:2a:75:62:ce:2e:49:69:8b:89:43:d5:96:b6:69:c2:
         88:46:68:ac:56:b5:d9:68:ed:e7:59:2a:4f:c5:e4:09:eb:97:
         00:01:45:b6:51:b0:0b:b1:85:db:ae:9d:a0:aa:f0:b0:3e:e4:
         61:0a:e1:f2:cb:1f:61:9a:0e:3c:58:a8:5e:e0:6b:69:34:5e:
         be:4d:2d:6e:11:75:25:d4:dc:4e:d7:0a:43:47:37:7c:c1:72:
         51:a5:f4:39:5b:26:e1:f6:9f:91:6d:8b:9c:52:4e:ba:c8:9a:
         83:f1:d1:c0:f5:f1:fb:6c:bf:e8:c1:9f:31:54:d4:27:5c:7b:
         02:e2:20:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:17 2026 by rpki-client