Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38312e342e302f32322d3232203d3e203538383532.roa
File:                     3130332e38312e342e302f32322d3232203d3e203538383532.roa (raw, json)
Hash identifier:          qs8B1AYsYifc164CtYkt5JlXrM0x3Tyc/h8DdyMlUaM=
Subject key identifier:   9B:27:12:E6:94:9F:B2:B7:F2:2A:74:CF:4D:67:C9:94:57:E8:90:7B
Certificate issuer:       /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772
Certificate serial:       10A7FE6FBD9E25987EDB53D773CB056E2D5E5AED
Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38312e342e302f32322d3232203d3e203538383532.roa
Signing time:             Thu 23 Apr 2026 09:10:10 +0000
ROA not before:           Thu 23 Apr 2026 09:05:10 +0000
ROA not after:            Thu 22 Apr 2027 09:10:10 +0000
asID:                     58852
IP address blocks:        103.81.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a7:fe:6f:bd:9e:25:98:7e:db:53:d7:73:cb:05:6e:2d:5e:5a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772
        Validity
            Not Before: Apr 23 09:05:10 2026 GMT
            Not After : Apr 22 09:10:10 2027 GMT
        Subject: CN=9B2712E6949FB2B7F22A74CF4D67C99457E8907B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:75:f4:ac:f6:e6:4d:8c:30:0c:1e:13:4f:92:
                    fd:de:aa:26:22:eb:36:64:a5:11:96:e1:7f:34:07:
                    0a:6f:3a:36:d2:0a:7a:2c:79:de:2e:2a:65:df:90:
                    5a:92:c4:57:79:dd:d1:ae:04:d9:08:05:72:5b:d4:
                    51:5e:3d:5e:32:93:9c:81:dc:1c:67:c5:4c:ee:ee:
                    51:18:40:31:1f:34:3f:11:69:ec:95:d3:88:e6:6b:
                    64:f5:67:c3:08:60:22:0d:5c:52:f5:7e:93:ef:a0:
                    7d:07:af:cb:22:3b:d3:28:b1:76:fc:98:d2:7b:23:
                    65:e0:03:37:fa:64:57:9e:85:b8:4e:a2:fe:58:1e:
                    64:da:30:a0:00:6c:ef:a8:4e:2d:03:a4:a3:3c:0d:
                    fb:a2:a0:fa:36:99:21:b0:c9:91:a3:28:74:7c:fd:
                    be:21:00:8b:f8:6f:2a:1f:5a:69:95:1c:3f:24:f1:
                    5a:b2:7a:f9:9d:fb:e0:b4:ca:48:96:b3:a0:f2:9b:
                    4c:3c:9c:a8:ae:e9:70:69:e6:ef:cb:a8:6b:62:dd:
                    e3:c2:0f:83:11:1d:91:47:59:d3:72:47:2d:53:48:
                    76:8a:ed:1b:dd:bc:70:f4:f6:27:6e:60:9d:98:e4:
                    8b:a4:0c:6b:16:8f:19:b6:f1:8b:fc:d4:4b:f4:ee:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:27:12:E6:94:9F:B2:B7:F2:2A:74:CF:4D:67:C9:94:57:E8:90:7B
            X509v3 Authority Key Identifier:
                keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38312e342e302f32322d3232203d3e203538383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:c6:d4:30:a4:39:14:14:4f:09:4f:98:17:e5:ca:30:99:09:
         73:34:41:6e:de:e9:b3:f0:0e:bf:6c:15:3a:a7:12:80:26:64:
         a0:8e:9f:a2:97:e2:32:c1:d9:a1:a4:9a:73:0f:93:9f:01:b7:
         cf:95:06:c1:84:50:62:ce:18:48:98:7c:47:82:ad:a3:d5:0d:
         bc:1b:f4:94:9a:66:cd:c4:3b:33:de:fb:0e:f6:d8:6b:f4:0d:
         a5:65:0c:1e:cd:20:9b:12:11:8d:04:21:19:1b:91:85:7b:a4:
         fc:4c:38:b3:82:24:c1:14:e2:5d:b2:d0:f0:e0:18:51:03:3f:
         19:a4:f8:9b:7a:cd:e7:6f:ec:65:84:d5:22:a5:eb:18:81:26:
         84:64:a3:3b:f0:fb:e4:6a:fe:42:e8:ed:42:11:ef:a3:78:68:
         2f:8b:7d:d0:5e:08:6f:fb:50:9f:b6:3f:47:ec:8d:71:aa:a7:
         ca:b5:11:ef:67:32:6e:02:cd:3e:9d:c2:65:15:6b:8a:bd:f9:
         d1:ae:c3:8a:c0:5c:f8:1e:a0:74:ed:f9:0f:cd:ea:19:80:6c:
         7f:4d:ef:13:f2:77:24:41:b3:c6:34:0c:a6:f0:ae:12:8b:3d:
         22:81:0f:a5:b5:57:74:e6:fb:65:89:be:9a:e4:61:d2:79:22:
         20:9d:89:c1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUEKf+b72eJZh+21PXc8sFbi1eWu0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFB
QjNCRjc3MjAeFw0yNjA0MjMwOTA1MTBaFw0yNzA0MjIwOTEwMTBaMDMxMTAvBgNV
BAMTKDlCMjcxMkU2OTQ5RkIyQjdGMjJBNzRDRjRENjdDOTk0NTdFODkwN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgdfSs9uZNjDAMHhNPkv3eqiYi
6zZkpRGW4X80BwpvOjbSCnosed4uKmXfkFqSxFd53dGuBNkIBXJb1FFePV4yk5yB
3BxnxUzu7lEYQDEfND8RaeyV04jma2T1Z8MIYCINXFL1fpPvoH0Hr8siO9MosXb8
mNJ7I2XgAzf6ZFeehbhOov5YHmTaMKAAbO+oTi0DpKM8DfuioPo2mSGwyZGjKHR8
/b4hAIv4byofWmmVHD8k8Vqyevmd++C0ykiWs6Dym0w8nKiu6XBp5u/LqGti3ePC
D4MRHZFHWdNyRy1TSHaK7RvdvHD09iduYJ2Y5IukDGsWjxm28Yv81Ev07tdPAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUmycS5pSfsrfyKnTPTWfJlFfokHswHwYDVR0j
BBgwFoAUSTQ9K+SlQ6w6/pGJlVzAiqs793IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYyMjMyMDA5NzQ2MDIyNS8wLzQ5MzQzRDJCRTRBNTQzQUMzQUZFOTE4OTk1NUND
MDhBQUIzQkY3NzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFBQjNCRjc3Mi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5NjIyMzIwMDk3NDYwMjI1LzAvMzEzMDMzMmUzODMx
MmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1MzgzODM1MzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnUQQwDQYJKoZIhvcNAQELBQADggEBAFrG1DCkORQUTwlPmBflyjCZCXM0QW7e
6bPwDr9sFTqnEoAmZKCOn6KX4jLB2aGkmnMPk58Bt8+VBsGEUGLOGEiYfEeCraPV
Dbwb9JSaZs3EOzPe+w722Gv0DaVlDB7NIJsSEY0EIRkbkYV7pPxMOLOCJMEU4l2y
0PDgGFEDPxmk+Jt6zedv7GWE1SKl6xiBJoRkozvw++Rq/kLo7UIR76N4aC+LfdBe
CG/7UJ+2P0fsjXGqp8q1Ee9nMm4CzT6dwmUVa4q9+dGuw4rAXPgeoHTt+Q/N6hmA
bH9N7xPydyRBs8Y0DKbwrhKLPSKBD6W1V3Tm+2WJvprkYdJ5IiCdicE=
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:30 2026 by rpki-client