Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e3135342e34302e302f32342d3234203d3e2030.roa
File:                     3130332e3135342e34302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          KdrHvwQk8nxve0BpMjmEeeLjjuXH0AbCtFI4Dmn9T70=
Subject key identifier:   CC:BC:3D:C3:3C:F7:D5:81:0C:9A:55:91:D8:EB:7D:8D:D5:F9:ED:0B
Certificate issuer:       /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial:       37B64A97B86E4FA855C5B181BE204D34236AA619
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e3135342e34302e302f32342d3234203d3e2030.roa
Signing time:             Wed 13 May 2026 08:48:42 +0000
ROA not before:           Wed 13 May 2026 08:43:42 +0000
ROA not after:            Wed 12 May 2027 08:48:42 +0000
asID:                     0
IP address blocks:        103.154.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b6:4a:97:b8:6e:4f:a8:55:c5:b1:81:be:20:4d:34:23:6a:a6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
        Validity
            Not Before: May 13 08:43:42 2026 GMT
            Not After : May 12 08:48:42 2027 GMT
        Subject: CN=CCBC3DC33CF7D5810C9A5591D8EB7D8DD5F9ED0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:f8:20:fe:ed:26:7a:43:25:4c:3a:38:09:
                    4e:af:09:89:87:0c:fe:a9:b3:41:13:48:32:e8:e5:
                    8e:44:b7:e4:6b:0f:35:e5:71:b4:ba:95:12:25:6a:
                    80:af:32:fe:8e:d6:62:5e:d4:9a:22:8a:ad:2c:0e:
                    ad:fb:01:c6:c9:69:05:aa:08:bd:31:9d:06:45:dd:
                    b7:99:1c:6f:78:c1:ab:42:ac:82:89:fe:86:fc:74:
                    32:ef:5b:3c:0d:20:2e:c5:ab:33:ec:de:82:a2:b7:
                    ae:49:ac:d4:0d:65:cb:1b:b3:48:01:87:57:b2:67:
                    52:37:bd:f3:6e:59:80:f2:9a:49:6c:c6:0f:e0:2b:
                    ba:14:47:30:18:2c:16:a4:7b:4d:10:5e:46:67:13:
                    cf:9c:5b:ba:b5:c7:e9:58:f0:bb:27:be:92:50:d3:
                    f8:8f:82:d9:e5:d3:7b:98:22:86:44:f6:86:a8:5e:
                    95:f5:03:cd:ac:52:46:a0:64:0f:c8:60:9b:d9:8a:
                    71:54:51:2f:e6:79:7b:54:2b:6f:9f:6a:f2:b0:63:
                    fd:85:bb:fb:55:eb:be:6d:1a:f3:2d:53:1d:05:01:
                    9f:03:5b:c6:9d:6d:22:9f:1e:d8:96:88:8d:bb:bf:
                    af:a8:03:59:ba:f1:3f:5a:d3:6f:88:a8:e4:71:c4:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BC:3D:C3:3C:F7:D5:81:0C:9A:55:91:D8:EB:7D:8D:D5:F9:ED:0B
            X509v3 Authority Key Identifier:
                keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e3135342e34302e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:24:4b:b0:a8:44:a5:20:1b:23:16:37:a5:13:d3:e2:f6:3c:
         9f:55:cb:b8:77:23:6b:42:49:99:3d:f6:7d:ea:2f:9d:c0:45:
         60:f7:13:4a:6e:f5:19:0f:71:10:82:e6:1d:86:f1:13:39:dc:
         d2:0b:94:cc:7c:f8:ce:32:9f:1d:2a:58:c0:3d:e7:da:1e:80:
         77:43:eb:70:f3:ca:99:cb:05:9a:28:cb:e7:1f:7c:0d:f5:7e:
         37:fb:10:da:3a:81:42:46:42:6e:12:35:0b:c0:d2:86:4f:1e:
         30:22:b8:5c:d3:51:aa:ed:5e:fd:d3:7f:03:95:75:a7:ca:7f:
         87:fe:1c:4c:62:90:a4:df:28:a0:e1:47:c1:4f:bc:d1:72:36:
         5c:f6:5e:d6:c6:b8:50:1d:5e:7d:d6:4d:f9:17:8a:4e:6a:a4:
         96:8b:63:97:16:32:ed:59:7f:52:cb:df:10:db:41:4b:fc:3e:
         f5:48:2c:bb:71:4b:43:82:e1:82:c7:6a:c9:0c:14:0d:15:26:
         f4:4e:e3:da:58:6a:1b:db:ac:31:4d:90:d3:18:44:19:f2:52:
         ee:6e:f6:cc:ff:3d:6c:bc:c2:0d:87:32:e7:6b:7f:62:dc:82:
         22:49:65:ed:f2:52:5c:3f:c8:55:af:5a:97:f5:cd:69:5c:66:
         00:f4:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:26 2026 by rpki-client