Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/3130332e3232372e3232382e302f32322d3232203d3e2034383337.roa
File:                     3130332e3232372e3232382e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          saz9U4xFL4Z5tgA33NkdB6/96G6nAAkAtrOd0NZ6x/0=
Subject key identifier:   3A:DA:A1:AE:98:52:60:44:A4:8C:E0:87:9A:15:C8:EE:A9:6E:AF:78
Certificate issuer:       /CN=6E171695D3EF09F7A49B6AF0022DA63420988631
Certificate serial:       6B6922C8F5EAE8A1E0EA936C35125FFE78487F22
Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/3130332e3232372e3232382e302f32322d3232203d3e2034383337.roa
Signing time:             Mon 08 Jun 2026 10:59:01 +0000
ROA not before:           Mon 08 Jun 2026 10:54:01 +0000
ROA not after:            Mon 07 Jun 2027 10:59:01 +0000
asID:                     4837
IP address blocks:        103.227.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:69:22:c8:f5:ea:e8:a1:e0:ea:93:6c:35:12:5f:fe:78:48:7f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631
        Validity
            Not Before: Jun  8 10:54:01 2026 GMT
            Not After : Jun  7 10:59:01 2027 GMT
        Subject: CN=3ADAA1AE98526044A48CE0879A15C8EEA96EAF78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:f0:c5:21:1b:fe:b2:6f:14:64:1e:e0:26:
                    7a:aa:7d:86:6b:1e:7d:f8:97:45:1e:c6:33:3b:5b:
                    86:09:72:5a:dc:8c:74:4e:ad:a6:ff:d6:32:3f:cf:
                    5d:31:d0:01:0d:40:8c:58:3e:3f:44:bb:e9:43:55:
                    48:de:d9:d5:73:07:de:2f:6e:38:19:8e:a9:43:22:
                    69:34:5c:ed:a5:68:ee:82:f0:f7:7c:42:f1:0b:a1:
                    0b:29:ac:a0:63:2c:67:89:55:3d:0f:d0:d8:b5:68:
                    3b:34:c7:c2:37:37:f9:35:fe:9a:5d:ed:c1:c7:00:
                    47:3a:7c:e9:cb:9f:77:9c:69:40:1a:d1:aa:c6:dd:
                    5f:bc:4f:b3:8d:16:ee:bb:32:87:b3:03:0e:2b:d5:
                    c8:cc:2c:29:5a:a0:b9:0a:49:e0:85:54:24:ea:d7:
                    c4:24:78:f4:5d:85:5b:43:9d:05:3d:2d:76:19:15:
                    fa:75:c0:3b:fa:c3:3f:8a:7f:db:b7:6c:0f:64:96:
                    2d:d0:51:95:0a:28:07:c1:4c:59:27:bd:d9:45:c4:
                    cf:14:cc:a7:de:25:41:a4:c9:c0:c7:93:d3:d0:5a:
                    f3:a3:c1:4b:32:32:04:42:d6:ca:17:13:40:d9:59:
                    ce:7c:8a:01:ac:27:d9:57:57:bd:35:e2:fc:30:51:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DA:A1:AE:98:52:60:44:A4:8C:E0:87:9A:15:C8:EE:A9:6E:AF:78
            X509v3 Authority Key Identifier:
                keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/3130332e3232372e3232382e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:a9:1a:c9:be:1d:71:5a:13:bf:65:70:a1:d0:74:9c:d7:32:
         87:91:c6:e9:61:3d:22:6c:9f:ef:9f:32:be:51:10:32:3c:c9:
         ff:73:1e:9b:7d:22:ba:97:92:a9:c6:49:19:9d:99:d0:b0:43:
         40:22:b3:1c:8f:54:0f:3a:7e:5f:95:d6:06:5e:c7:c1:a0:4f:
         48:6a:f9:7d:ec:d6:ce:c9:53:79:96:75:b9:7d:4c:e5:d1:aa:
         16:48:f8:b3:c5:61:b0:c6:b6:27:e0:85:4a:7e:a1:65:9a:02:
         95:c7:89:9d:8c:46:ff:a6:0a:3c:35:98:93:93:bd:3c:80:ce:
         81:9b:d0:ca:24:57:09:60:5b:8b:59:de:aa:8b:3e:1a:cb:ef:
         eb:04:68:91:bf:bd:e5:65:54:e5:42:d2:28:52:0f:cf:46:25:
         1f:00:a2:b6:90:86:a2:69:08:b3:49:f3:bf:a5:ba:6a:84:a6:
         b1:73:c1:c1:47:7c:10:ec:f9:4f:9d:2b:f0:5f:80:6c:2f:cb:
         15:e3:31:fe:9c:34:e7:1b:87:fc:47:c8:bf:9b:04:94:f7:73:
         09:bb:fd:31:55:4f:3e:79:2d:48:e4:a0:e3:41:38:f5:d2:38:
         ce:8c:11:47:0b:a1:1b:4f:53:14:35:d3:e7:c0:c7:af:16:4c:
         39:db:5d:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:34 2026 by rpki-client