Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e34392e302f32342d3234203d3e203538353433.roa
File:                     3130332e3231322e34392e302f32342d3234203d3e203538353433.roa (raw, json)
Hash identifier:          aTYf9AOnLR4L+m/8HQCj4yM2GzM0NG41z2CqUQXNMRY=
Subject key identifier:   8B:4E:15:EC:73:AE:ED:07:17:B6:BF:22:C2:55:05:7F:98:87:3E:07
Certificate issuer:       /CN=CA269469647823B4286B5E34CC0E3D54FD201592
Certificate serial:       74972F1942D9E89461321A57F12043ABE8DAAE15
Authority key identifier: CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e34392e302f32342d3234203d3e203538353433.roa
Signing time:             Thu 07 May 2026 09:16:30 +0000
ROA not before:           Thu 07 May 2026 09:11:30 +0000
ROA not after:            Thu 06 May 2027 09:16:30 +0000
asID:                     58543
IP address blocks:        103.212.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:97:2f:19:42:d9:e8:94:61:32:1a:57:f1:20:43:ab:e8:da:ae:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA269469647823B4286B5E34CC0E3D54FD201592
        Validity
            Not Before: May  7 09:11:30 2026 GMT
            Not After : May  6 09:16:30 2027 GMT
        Subject: CN=8B4E15EC73AEED0717B6BF22C255057F98873E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:d8:f4:d7:65:4c:f9:ba:26:e8:5a:57:76:
                    02:ed:61:24:78:50:ad:71:ac:10:d1:4f:4a:97:0f:
                    7f:d3:45:45:27:2e:cc:ce:08:43:7b:41:f3:0b:f2:
                    e5:95:b3:8a:2b:74:fd:33:89:c4:72:b4:dc:94:9b:
                    cd:cf:3b:18:cf:13:db:61:06:f5:28:10:6c:42:1f:
                    33:28:ee:1b:8d:7c:09:bb:42:3e:ad:1f:12:41:66:
                    9c:38:c7:ec:9c:83:78:c7:9d:5d:00:09:66:b8:3c:
                    24:fe:93:0f:7f:36:1a:4c:f6:67:e2:43:82:ba:eb:
                    ef:ea:a2:d8:73:f9:36:5f:ae:cd:b6:f0:a8:87:57:
                    bd:7f:6d:07:d9:8f:c9:92:07:54:cc:e4:ed:a0:ae:
                    d1:84:df:f1:87:71:5f:3b:12:b6:b6:36:d6:ab:b4:
                    d0:44:c7:b5:a2:e4:4a:4b:07:e2:47:6f:ea:cd:9e:
                    e0:67:b9:fa:51:92:db:d3:6f:78:8f:a1:7e:96:4d:
                    e1:53:81:8b:70:fd:d3:82:3d:72:d1:3e:7d:99:e7:
                    20:92:69:99:5c:60:99:f6:c5:78:e3:b4:a2:36:44:
                    b0:1f:57:dc:60:dd:c4:55:a3:c3:bd:b3:35:c9:7d:
                    ed:72:30:6b:b3:9e:7e:08:c4:6b:86:1f:18:01:43:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4E:15:EC:73:AE:ED:07:17:B6:BF:22:C2:55:05:7F:98:87:3E:07
            X509v3 Authority Key Identifier:
                keyid:CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e34392e302f32342d3234203d3e203538353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:71:4b:23:6f:e3:99:3d:da:24:c7:3e:fe:96:3d:cd:c1:49:
         b6:8c:f6:7a:4e:fa:8d:7d:e7:a6:dd:3b:7f:24:5e:c0:b0:14:
         8b:a0:c7:77:51:e4:19:b3:9d:b4:6e:64:95:c9:7f:51:a1:62:
         48:59:7d:60:06:1c:3f:59:52:80:5e:63:15:ea:7a:cb:16:6b:
         a4:61:7e:e7:f7:00:41:fc:4c:88:2a:1f:26:9c:bb:2f:d8:44:
         8f:f4:85:ca:21:f0:02:90:2f:51:7f:53:e5:8a:3a:78:94:68:
         ea:f2:bc:b3:1c:69:84:35:75:ec:03:26:5b:94:8d:a4:a3:36:
         ce:b1:5e:29:4e:67:da:c2:8b:64:81:4e:61:d8:2a:63:9b:0a:
         db:86:95:83:bf:2f:56:31:64:ac:47:48:ac:23:bc:f1:ca:7e:
         ef:b1:f2:2e:8b:f5:4b:b6:d2:7d:9f:86:c2:a4:7c:95:24:4b:
         4d:48:e0:e9:b4:87:3f:5e:10:1f:b0:d1:2e:98:b9:23:99:80:
         17:27:c5:44:40:e2:2a:21:fd:69:45:f5:fb:d5:92:42:6f:43:
         d2:8a:78:a7:1a:79:b5:fc:8d:45:6a:64:06:de:5d:d6:b1:0a:
         16:ef:89:ad:ce:13:0d:36:98:f0:3e:98:7b:ff:1c:59:3e:a1:
         b7:1a:a4:5a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdJcvGULZ6JRhMhpX8SBDq+jarhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyNjk0Njk2NDc4MjNCNDI4NkI1RTM0Q0MwRTNENTRG
RDIwMTU5MjAeFw0yNjA1MDcwOTExMzBaFw0yNzA1MDYwOTE2MzBaMDMxMTAvBgNV
BAMTKDhCNEUxNUVDNzNBRUVEMDcxN0I2QkYyMkMyNTUwNTdGOTg4NzNFMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYjdj012VM+bom6FpXdgLtYSR4
UK1xrBDRT0qXD3/TRUUnLszOCEN7QfML8uWVs4ordP0zicRytNyUm83POxjPE9th
BvUoEGxCHzMo7huNfAm7Qj6tHxJBZpw4x+ycg3jHnV0ACWa4PCT+kw9/NhpM9mfi
Q4K66+/qothz+TZfrs228KiHV71/bQfZj8mSB1TM5O2grtGE3/GHcV87Era2Ntar
tNBEx7Wi5EpLB+JHb+rNnuBnufpRktvTb3iPoX6WTeFTgYtw/dOCPXLRPn2Z5yCS
aZlcYJn2xXjjtKI2RLAfV9xg3cRVo8O9szXJfe1yMGuznn4IxGuGHxgBQ9y/AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUi04V7HOu7QcXtr8iwlUFf5iHPgcwHwYDVR0j
BBgwFoAUyiaUaWR4I7Qoa140zA49VP0gFZIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDY5MjI3MzUxMTEzNzI4NS8wL0NBMjY5NDY5NjQ3ODIzQjQyODZCNUUzNENDMEUz
RDU0RkQyMDE1OTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0EyNjk0Njk2NDc4MjNCNDI4NkI1RTM0Q0MwRTNENTRGRDIwMTU5Mi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNDY5MjI3MzUxMTEzNzI4NS8wLzMxMzAzMzJlMzIz
MTMyMmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM1MzQzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGfUMTANBgkqhkiG9w0BAQsFAAOCAQEAqHFLI2/jmT3aJMc+/pY9zcFJ
toz2ek76jX3npt07fyRewLAUi6DHd1HkGbOdtG5klcl/UaFiSFl9YAYcP1lSgF5j
Fep6yxZrpGF+5/cAQfxMiCofJpy7L9hEj/SFyiHwApAvUX9T5Yo6eJRo6vK8sxxp
hDV17AMmW5SNpKM2zrFeKU5n2sKLZIFOYdgqY5sK24aVg78vVjFkrEdIrCO88cp+
77HyLov1S7bSfZ+GwqR8lSRLTUjg6bSHP14QH7DRLpi5I5mAFyfFREDiKiH9aUX1
+9WSQm9D0op4pxp5tfyNRWpkBt5d1rEKFu+Jrc4TDTaY8D6Ye/8cWT6htxqkWg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:26 2026 by rpki-client