Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3131302e3137332e39362e302f32302d3230203d3e2030.roa
File:                     3131302e3137332e39362e302f32302d3230203d3e2030.roa (raw, json)
Hash identifier:          xzDDHrgjaG7Ys7YXm71LAcWvzhsQ0SkIlQIxPiL7Uhc=
Subject key identifier:   EA:9A:3C:8F:3C:C0:8E:1A:95:46:09:30:67:C6:61:5D:95:43:94:11
Certificate issuer:       /CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF
Certificate serial:       447AD694778A05F0BECA45FD8F822A90B7A2BBD7
Authority key identifier: 36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3131302e3137332e39362e302f32302d3230203d3e2030.roa
Signing time:             Tue 28 Apr 2026 01:05:09 +0000
ROA not before:           Tue 28 Apr 2026 01:00:09 +0000
ROA not after:            Tue 27 Apr 2027 01:05:09 +0000
asID:                     0
IP address blocks:        110.173.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7a:d6:94:77:8a:05:f0:be:ca:45:fd:8f:82:2a:90:b7:a2:bb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF
        Validity
            Not Before: Apr 28 01:00:09 2026 GMT
            Not After : Apr 27 01:05:09 2027 GMT
        Subject: CN=EA9A3C8F3CC08E1A9546093067C6615D95439411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:b8:f1:d9:ec:d6:2a:19:9a:05:c3:a1:d2:
                    bd:8e:ff:42:5b:62:03:61:36:c6:f1:2c:73:16:57:
                    6f:7c:d2:16:8e:3e:14:9f:67:d8:36:e7:e6:b8:c4:
                    1c:d1:06:f0:af:29:8f:51:e8:c6:a6:f8:06:1f:96:
                    0e:35:95:5e:74:a5:83:08:76:de:06:db:41:10:5a:
                    25:c6:26:69:e4:2d:8b:8b:fc:44:26:ae:f6:58:5c:
                    fc:30:f9:ec:a7:22:b0:71:e5:04:05:63:7e:54:54:
                    62:f2:48:ee:e4:5b:35:00:11:d4:bb:88:68:5c:0f:
                    33:34:e9:68:a5:1a:e5:89:dc:cb:df:63:8c:4d:e6:
                    41:6d:13:74:84:ca:b8:38:52:11:0a:3e:49:c7:ec:
                    58:37:2a:66:a3:c2:7c:fd:09:a4:aa:61:5a:b0:2d:
                    d3:27:3a:03:1d:8d:4f:54:24:34:d3:cc:34:52:e1:
                    28:2b:74:45:0d:3a:c7:1d:9d:24:18:d9:ce:5e:41:
                    16:25:64:7a:21:9d:e2:2e:3f:65:aa:bf:b6:7c:c4:
                    9a:0d:10:f2:49:90:9d:12:ca:85:ea:a9:b9:1d:7c:
                    53:f7:63:d8:34:e9:ac:32:ef:c3:61:84:fb:d1:de:
                    9d:8e:e5:01:cd:2b:49:9d:c4:0b:d9:15:22:43:36:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9A:3C:8F:3C:C0:8E:1A:95:46:09:30:67:C6:61:5D:95:43:94:11
            X509v3 Authority Key Identifier:
                keyid:36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3131302e3137332e39362e302f32302d3230203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.173.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:7e:18:5e:a6:85:93:bf:d9:61:26:84:16:7b:af:57:39:8c:
         22:db:45:0f:46:4b:7d:5e:83:70:b4:58:a4:a7:76:3c:ce:30:
         20:7f:0d:1b:60:b5:78:21:d6:18:47:2c:5a:6e:ea:d8:8a:41:
         85:3b:ac:66:d8:32:af:40:13:fc:38:fe:19:d7:ea:5c:22:fd:
         f7:75:36:b4:bb:18:21:43:cf:36:fc:d2:9b:60:be:e2:51:43:
         22:66:5b:b6:a7:62:aa:95:10:08:d4:6d:62:c6:f8:23:f7:1f:
         42:b9:9b:6d:06:6c:3e:0c:26:d6:c7:d9:d6:b8:29:0e:9e:18:
         6b:29:37:cf:ab:f4:e9:a3:1a:18:19:95:c7:09:8f:4b:fe:c3:
         70:f0:72:1b:fa:34:68:6c:47:b7:e5:ad:e8:14:f7:e8:95:02:
         59:51:e1:f2:60:1f:d0:93:4e:39:fe:12:04:0f:e6:fa:f5:26:
         7a:51:f1:c0:75:7a:df:17:d2:82:58:39:5c:16:71:39:85:64:
         33:72:9b:ba:8a:92:de:53:7a:e3:4c:45:48:cc:55:9c:2e:05:
         a3:48:7d:68:6d:c5:56:55:94:43:46:bc:a4:1f:67:1a:c7:72:
         46:cb:e2:4f:39:d2:14:01:da:54:f4:18:fd:48:3e:65:5e:33:
         c9:b8:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:44 2026 by rpki-client