Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3130332e3233352e3134342e302f32342d3234203d3e2039333839.roa
File:                     3130332e3233352e3134342e302f32342d3234203d3e2039333839.roa (raw, json)
Hash identifier:          tck5DLEX5DrIqaVI5Rc02QUNNRuQhiy3A8F+mwevu+A=
Subject key identifier:   CD:64:3E:02:0C:AB:97:4C:1E:D2:5A:3E:E5:45:61:10:56:7E:72:CA
Certificate issuer:       /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
Certificate serial:       505E53E01BA3CD816A24B125D835B0F3B5D39A75
Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3130332e3233352e3134342e302f32342d3234203d3e2039333839.roa
Signing time:             Thu 07 May 2026 02:06:45 +0000
ROA not before:           Thu 07 May 2026 02:01:45 +0000
ROA not after:            Thu 06 May 2027 02:06:45 +0000
asID:                     9389
IP address blocks:        103.235.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5e:53:e0:1b:a3:cd:81:6a:24:b1:25:d8:35:b0:f3:b5:d3:9a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09
        Validity
            Not Before: May  7 02:01:45 2026 GMT
            Not After : May  6 02:06:45 2027 GMT
        Subject: CN=CD643E020CAB974C1ED25A3EE5456110567E72CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:4d:d3:37:f0:65:4e:7a:4e:42:9b:c4:26:
                    cd:f1:00:69:97:d7:ac:d7:de:20:60:05:6b:cc:5c:
                    3a:9d:f4:bc:5a:a2:a1:ad:06:1e:03:5e:1f:d8:97:
                    15:83:f1:49:f8:0c:61:e3:83:88:d5:d3:c6:9d:fe:
                    a2:fc:4c:26:82:6e:fc:7a:0f:2f:a7:35:a5:0f:61:
                    02:53:5d:d8:a9:80:2c:15:fa:29:cb:ef:9c:25:4c:
                    14:75:90:5a:74:c2:5f:fb:85:c3:49:94:30:e5:9b:
                    cb:bf:06:28:0d:37:8a:46:a4:be:55:12:7f:1d:dd:
                    ed:b0:21:4b:e6:2d:33:02:f3:e2:c2:18:53:26:d0:
                    55:86:f4:98:39:47:32:9c:6d:2c:e8:a1:29:f2:39:
                    7f:29:5e:ff:a4:aa:df:a9:c8:36:b5:62:8a:9e:b7:
                    44:11:6c:21:b0:7f:4c:fd:30:ae:20:0d:3a:67:48:
                    be:01:06:84:44:f2:2e:a2:0e:16:97:4e:63:87:63:
                    8b:7e:58:40:98:28:a7:3d:41:7e:7f:0e:38:35:ca:
                    de:3a:7e:0b:8b:fa:6c:80:c4:cd:13:d0:23:f8:29:
                    25:47:e3:39:bf:de:70:72:13:12:c4:1c:56:c7:50:
                    dd:81:53:88:67:fe:a9:8e:a9:5e:78:d4:7f:3b:f0:
                    cf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:64:3E:02:0C:AB:97:4C:1E:D2:5A:3E:E5:45:61:10:56:7E:72:CA
            X509v3 Authority Key Identifier:
                keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3130332e3233352e3134342e302f32342d3234203d3e2039333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:5e:9d:55:2e:68:50:8c:79:7a:c3:09:2d:55:18:94:c7:d7:
         0f:6a:d2:e7:bc:8c:77:2c:e5:31:65:d1:50:90:b6:98:70:9a:
         26:a0:e7:c3:a0:8a:d7:74:cc:55:25:92:46:e6:66:93:f5:05:
         cc:2f:8c:e4:81:4f:ca:d1:3c:b9:65:4e:26:53:88:35:6f:c2:
         49:77:16:fc:40:a6:ca:68:28:0e:63:63:b3:f9:73:d2:98:6e:
         d3:e4:2a:de:ba:ea:0a:a7:11:a8:a9:f5:52:18:37:1c:ef:8e:
         69:35:13:6a:f9:2e:9a:d2:fc:1f:94:ab:94:5f:bb:9d:b5:47:
         1e:1e:5e:4a:8a:d3:13:9e:34:f0:00:ed:0f:62:63:d1:fe:b8:
         64:80:8d:b1:5d:17:92:5d:21:73:9b:5a:0f:c0:dc:5a:e1:ae:
         24:65:8c:03:80:a9:11:43:a5:00:ca:4d:9d:bc:21:e1:9b:42:
         bd:03:29:50:40:dc:53:41:b5:b2:8f:9c:c0:67:5b:a3:7c:fb:
         75:64:8d:fe:4f:2a:22:b5:61:49:49:cc:8c:c6:5d:2e:d3:72:
         5a:22:3a:a5:22:77:ea:13:b4:22:d2:55:71:0f:56:b6:6c:60:
         ca:51:d7:73:4f:a6:62:05:e8:72:fd:d2:34:1c:8c:cd:b4:35:
         37:cf:da:17
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:18:04 2026 by rpki-client