Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2034383337.roa
File:                     3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=
Subject key identifier:   63:01:55:38:E9:A6:43:93:EF:11:9D:CE:6A:2B:A4:22:D4:9B:5D:44
Certificate issuer:       /CN=573895035A5FB9C94F33AC71886002E21C9EE894
Certificate serial:       5F7781ED1EA37108826400D861E5B00771ADD252
Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2034383337.roa
Signing time:             Fri 29 May 2026 08:16:50 +0000
ROA not before:           Fri 29 May 2026 08:11:50 +0000
ROA not after:            Fri 28 May 2027 08:16:50 +0000
asID:                     4837
IP address blocks:        103.28.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:77:81:ed:1e:a3:71:08:82:64:00:d8:61:e5:b0:07:71:ad:d2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894
        Validity
            Not Before: May 29 08:11:50 2026 GMT
            Not After : May 28 08:16:50 2027 GMT
        Subject: CN=63015538E9A64393EF119DCE6A2BA422D49B5D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:49:61:f1:25:cb:23:e9:dd:b8:a4:9c:14:
                    62:4e:0a:48:2a:d1:d7:66:0d:d1:59:77:a0:cf:4f:
                    c2:db:8c:e3:8c:6d:f0:66:ee:32:9a:a5:79:f4:06:
                    c0:63:ed:d2:ac:0c:73:39:74:d4:28:53:b0:07:65:
                    e5:2b:a6:de:9a:1d:5c:eb:de:89:7a:91:b5:3a:00:
                    c7:87:3b:1b:d1:ec:1e:d0:3f:37:c6:55:82:c5:19:
                    00:22:52:38:f1:ca:93:a8:fd:d8:90:d9:48:a1:28:
                    2d:c0:a0:82:19:34:4a:01:cc:08:6c:2b:52:8b:45:
                    42:8f:65:53:65:dc:e3:d7:c5:14:f1:00:2e:cb:fc:
                    5d:1d:5c:b2:8b:65:7f:d0:7c:85:63:03:0d:d3:b6:
                    53:32:01:a6:58:8d:8a:a6:10:cb:11:87:59:d8:44:
                    e4:5c:b2:4d:78:26:6a:03:87:d4:ac:7a:70:c7:9e:
                    99:67:8e:72:fc:96:0b:49:41:b5:29:bd:b2:f8:8d:
                    d3:6d:a5:58:85:bd:c1:59:41:b6:3c:3c:41:a7:81:
                    b5:36:9f:58:01:19:80:fb:d0:8d:b1:91:ac:0c:fd:
                    6b:d9:7d:e0:98:10:d1:e6:cd:52:bb:40:89:db:b5:
                    91:12:43:1e:c8:68:87:f5:fa:9c:9a:5c:cb:de:9a:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:01:55:38:E9:A6:43:93:EF:11:9D:CE:6A:2B:A4:22:D4:9B:5D:44
            X509v3 Authority Key Identifier:
                keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/3130332e32382e3230342e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:2a:cb:a1:0b:05:15:a0:96:08:53:d1:06:50:ee:eb:af:97:
         3b:1a:78:61:e5:6f:1f:ab:d1:88:18:cd:27:51:4e:32:6f:e0:
         b9:0b:ae:0f:fc:ce:af:f5:d8:0e:ba:56:79:47:a5:5c:f6:53:
         07:1c:54:d3:32:8c:7d:0c:bb:6f:f7:35:4e:78:af:67:40:bf:
         f8:76:64:c3:e8:92:a7:28:e9:34:ad:1a:93:39:3a:31:35:2d:
         d2:69:45:12:bc:dc:1f:5e:07:21:45:53:28:80:d4:46:ab:25:
         fc:c4:36:f7:b2:e9:41:1a:e0:9e:dc:10:b9:de:79:40:cd:8b:
         ff:66:bf:aa:ff:c9:fb:20:61:a4:a8:fe:cf:59:e9:1b:32:f0:
         ef:db:64:89:74:3a:89:0d:44:75:4c:de:6d:b5:32:5d:83:0b:
         6a:52:d2:7f:b0:60:2d:5a:d5:61:07:4e:f4:83:7e:2e:32:35:
         79:90:0a:fc:1c:6b:e1:24:05:d1:8f:83:82:4b:2b:a1:2c:f6:
         71:b4:94:f3:ff:48:9c:ed:5a:4e:4c:1f:47:1f:7c:9b:5b:d0:
         ff:41:a6:6f:06:c6:7e:38:6e:cb:42:f0:0f:39:8d:94:b6:4d:
         de:c0:54:b6:30:1e:91:19:78:77:9e:b1:2d:b4:7f:dc:bf:bb:
         73:97:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:33 2026 by rpki-client