Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e31302e38342e302f32322d3332203d3e203435303634.roa
File:                     3130332e31302e38342e302f32322d3332203d3e203435303634.roa (raw, json)
Hash identifier:          /pq5XzwSxpzezcvcnecySYiQ8uwr6SYOoQw1jotqw6U=
Subject key identifier:   38:55:E0:BA:59:2C:54:32:1F:BA:18:B9:AA:FD:90:54:86:5D:17:C5
Certificate issuer:       /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Certificate serial:       7CAB29569D9365CFA3CA0B4ABF58EF1689FBD5C5
Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e31302e38342e302f32322d3332203d3e203435303634.roa
Signing time:             Tue 28 Apr 2026 06:51:52 +0000
ROA not before:           Tue 28 Apr 2026 06:46:52 +0000
ROA not after:            Tue 27 Apr 2027 06:51:52 +0000
asID:                     45064
IP address blocks:        103.10.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ab:29:56:9d:93:65:cf:a3:ca:0b:4a:bf:58:ef:16:89:fb:d5:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
        Validity
            Not Before: Apr 28 06:46:52 2026 GMT
            Not After : Apr 27 06:51:52 2027 GMT
        Subject: CN=3855E0BA592C54321FBA18B9AAFD9054865D17C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c1:81:6c:f0:2e:f9:77:38:ec:13:9a:27:16:
                    5d:5a:3b:16:31:d3:a1:94:db:28:06:d8:dd:6c:90:
                    f9:d1:f3:da:11:39:24:c8:0a:87:51:ce:ed:07:45:
                    70:74:44:ab:a3:b4:ef:c8:4f:94:e0:6f:ab:35:d2:
                    5a:74:e3:0e:d4:79:b1:c9:0e:86:69:3f:48:89:16:
                    af:6a:b8:26:e2:32:43:bc:b5:22:9e:d8:25:86:88:
                    3b:2f:1c:01:1e:03:7c:25:28:ad:88:5b:2f:d4:5f:
                    0d:03:df:bf:c7:ad:c7:3c:fe:18:3c:46:30:e0:05:
                    ed:28:5a:63:64:8a:52:76:c4:fa:81:8c:d7:46:7b:
                    8a:fa:fc:b7:2c:5e:9d:58:48:40:b5:63:84:21:14:
                    bf:a7:9a:ef:74:43:7b:92:60:7b:c0:a7:f3:8f:71:
                    11:d1:5f:cd:b0:d2:bd:b3:df:78:fa:96:a7:a0:94:
                    75:b0:70:e9:c6:33:f5:a4:bb:a1:a3:4e:0a:54:9a:
                    47:92:81:c5:07:d9:26:08:40:c4:2f:dd:eb:5d:58:
                    3e:6c:4c:98:6d:82:e0:68:89:58:10:24:3e:fd:aa:
                    29:a5:92:04:9a:41:0c:c3:13:35:52:0e:b8:3f:33:
                    b4:cc:be:8d:38:7f:9c:65:80:b1:b4:4f:15:16:53:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:55:E0:BA:59:2C:54:32:1F:BA:18:B9:AA:FD:90:54:86:5D:17:C5
            X509v3 Authority Key Identifier:
                keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e31302e38342e302f32322d3332203d3e203435303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:7e:76:3e:4e:0f:9d:6d:a0:cb:56:33:82:40:24:e7:9e:97:
         b1:10:5a:b3:37:65:46:9b:f4:3c:11:11:86:b9:12:75:a0:bd:
         70:58:9b:d4:f8:2b:83:ae:85:40:5b:7a:0a:c9:1d:5a:ab:d5:
         d3:13:23:b9:89:bb:9b:cf:28:02:51:d7:21:75:32:b0:71:2b:
         22:32:5e:b1:01:9f:1f:03:0b:8b:77:22:fb:69:e4:fc:e1:cc:
         9d:2c:55:79:ac:d2:c3:25:a8:4b:c3:ce:5f:dc:b7:72:86:cc:
         85:a2:5a:21:5b:c2:db:ec:14:04:d9:48:da:8a:64:57:c6:b8:
         32:40:37:7e:ad:c7:ba:ed:bd:71:2c:ca:6b:e9:32:a6:e5:44:
         f9:b5:ba:b2:7d:7f:34:66:87:c1:fe:d0:ae:33:9d:fd:60:26:
         0c:0f:00:d3:d5:88:cd:79:7a:05:ec:0a:5c:42:f1:44:22:25:
         a0:42:57:d2:c8:56:ec:ee:7a:0e:cd:cd:93:f5:47:58:d8:21:
         c9:0a:6f:da:29:94:05:da:ba:2b:bc:81:a1:32:5f:4d:e5:4a:
         e5:c5:5c:e9:5a:14:5b:bd:dd:70:ff:54:34:72:dd:ef:6a:ce:
         97:47:77:b5:64:1c:1e:3b:7e:d3:05:dc:a9:7d:83:75:e5:1d:
         7b:3f:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:43:00 2026 by rpki-client