Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136342e302f32332d3234203d3e2039333034.roa
File:                     3130332e3138312e3136342e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier:          CfBgRS04K7VQSDmdLDK1/T0zyTXNs4vFBivuhUcxpf0=
Subject key identifier:   12:A2:7B:D4:EA:48:76:06:E4:50:11:2F:CC:DC:68:B2:36:0D:86:A8
Certificate issuer:       /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Certificate serial:       4BBDE70A7E20F015DC21E68FA0EA952DA4749A63
Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136342e302f32332d3234203d3e2039333034.roa
Signing time:             Sun 20 Sep 2026 14:39:16 +0000
ROA not before:           Sun 20 Sep 2026 14:34:16 +0000
ROA not after:            Sun 19 Sep 2027 14:39:16 +0000
asID:                     9304
IP address blocks:        103.181.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 17:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bd:e7:0a:7e:20:f0:15:dc:21:e6:8f:a0:ea:95:2d:a4:74:9a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
        Validity
            Not Before: Sep 20 14:34:16 2026 GMT
            Not After : Sep 19 14:39:16 2027 GMT
        Subject: CN=12A27BD4EA487606E450112FCCDC68B2360D86A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:ee:7f:89:0c:64:30:c7:37:1b:6e:74:be:
                    d1:32:5b:9a:32:ea:da:87:e6:99:0e:d6:88:28:ab:
                    ec:73:53:59:73:d9:ed:3b:a4:59:1e:49:59:19:29:
                    d7:b1:55:e4:21:56:43:72:76:4c:3a:8f:38:5e:4d:
                    b3:64:72:96:12:e9:8c:94:ad:42:f6:3f:43:ff:67:
                    f1:6f:07:07:8f:99:4b:8c:dd:7a:97:a4:0b:2e:43:
                    10:28:95:19:a4:68:b6:03:aa:a7:63:6b:2f:d9:d9:
                    f5:3d:a4:16:1a:b4:89:aa:12:ff:93:06:5c:92:a3:
                    15:81:9a:4b:de:b4:c8:7f:52:96:45:d4:fa:60:d5:
                    85:fa:1d:86:b1:48:51:09:23:0f:44:f3:9c:fd:61:
                    a5:04:0e:53:9e:fc:21:1c:c6:cf:3d:fd:8d:a6:0a:
                    a4:4f:50:6e:1e:db:72:c9:63:50:0e:a7:14:1c:1c:
                    74:9e:c9:25:6e:1c:58:e8:e3:45:28:89:0d:82:1d:
                    f7:65:84:d8:47:af:e6:88:f9:7a:17:e7:28:be:e0:
                    b1:09:d9:8c:74:05:a5:5b:85:a4:13:d4:7d:f7:35:
                    ad:c6:8f:4e:6e:b9:a1:61:c0:7e:f2:1b:d5:96:8f:
                    f4:2d:d3:f0:92:95:e5:e4:3b:aa:ec:fb:85:27:b4:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A2:7B:D4:EA:48:76:06:E4:50:11:2F:CC:DC:68:B2:36:0D:86:A8
            X509v3 Authority Key Identifier:
                keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136342e302f32332d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:cb:97:dd:69:ba:66:d6:64:33:2f:6f:3d:a5:03:1f:34:
         05:3a:3a:f4:55:38:51:12:64:49:95:57:b6:c4:1d:00:4f:39:
         35:b5:7f:4b:95:3d:7d:ef:79:c2:9b:18:4a:d8:e5:1c:50:2c:
         38:21:16:94:78:4a:39:68:cd:df:93:f4:3f:3e:db:3e:80:17:
         09:32:bd:1b:03:9f:a4:59:51:b7:79:83:b7:41:af:a3:18:05:
         70:03:1a:d2:ca:ba:a9:d8:64:9f:93:8a:d9:42:df:50:f1:1a:
         36:a0:8d:b9:24:f6:98:ee:c5:60:73:6e:13:1f:62:88:a9:f5:
         a9:4f:8e:cc:3d:ff:3e:0f:54:ce:68:c8:90:69:77:71:6f:56:
         91:cf:2c:29:f1:06:7e:df:b6:a1:66:38:39:93:8b:3c:99:ae:
         0d:ee:9b:b6:2e:78:c0:3d:60:fa:45:5a:6b:8d:31:86:27:50:
         96:3b:99:07:37:60:53:8a:4c:cf:df:d1:ce:fb:8c:e6:70:7f:
         3b:ec:32:97:49:2a:e1:50:47:ee:85:8b:c2:2d:51:9d:d3:21:
         b0:76:77:22:27:80:4f:f9:a7:19:68:28:fa:48:f3:e7:ca:6e:
         26:67:09:5b:b4:17:48:64:55:b2:e9:b5:0b:5a:ab:25:92:23:
         28:45:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:02:14 2026 by rpki-client