Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233392e3232342e302f32342d3234203d3e203538353431.roa
File:                     3130332e3233392e3232342e302f32342d3234203d3e203538353431.roa (raw, json)
Hash identifier:          6qPZqikVZ0m8YdSQCWmrqdZih3MStH3NzUfYEUXxIN8=
Subject key identifier:   4F:6A:AE:BD:28:81:1B:13:A0:5F:31:35:74:4E:8A:6B:70:1E:63:45
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       06767DD640733C55E609854CE8872F15A41B0836
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233392e3232342e302f32342d3234203d3e203538353431.roa
Signing time:             Mon 29 Jun 2026 07:28:48 +0000
ROA not before:           Mon 29 Jun 2026 07:23:48 +0000
ROA not after:            Mon 28 Jun 2027 07:28:48 +0000
asID:                     58541
IP address blocks:        103.239.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:76:7d:d6:40:73:3c:55:e6:09:85:4c:e8:87:2f:15:a4:1b:08:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jun 29 07:23:48 2026 GMT
            Not After : Jun 28 07:28:48 2027 GMT
        Subject: CN=4F6AAEBD28811B13A05F3135744E8A6B701E6345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:67:07:e4:d7:30:eb:d7:71:7f:da:1e:16:
                    4b:71:7e:64:6e:aa:4c:e0:38:82:b0:20:54:65:4e:
                    2f:bd:2d:18:fe:04:ed:00:24:d0:1e:3a:37:4d:81:
                    d9:16:da:c2:b6:8c:ca:93:d4:70:76:94:77:50:73:
                    46:23:cf:c4:3b:41:b2:b8:f1:8e:f7:25:3b:02:d7:
                    f5:13:44:7c:09:66:97:fc:22:b9:cc:97:20:ef:cd:
                    4d:75:04:ec:bf:49:54:25:86:a2:f5:1d:f6:6c:e6:
                    f0:e3:71:6b:a5:66:08:c6:e5:8d:64:51:fa:d4:a1:
                    8d:58:6b:4e:d0:d7:6c:aa:99:b7:48:d3:86:23:a9:
                    4b:3e:15:e6:41:43:fe:dc:05:5d:9d:c1:4b:37:4f:
                    c9:26:c0:33:b8:ae:46:5f:43:e6:7d:31:60:7d:0c:
                    8e:d0:f1:d5:5f:f3:fd:64:ae:1f:d4:b3:5d:fa:6f:
                    e4:fc:3a:97:c8:39:a3:f5:f5:b8:d6:f2:e6:42:93:
                    39:63:ff:9a:f5:36:1a:0b:0b:b5:f5:43:ed:c2:b6:
                    48:8c:58:7e:61:91:52:58:0a:56:4d:38:48:cb:75:
                    e6:1d:02:22:0b:6e:b3:a9:61:76:fc:37:d5:d1:9e:
                    c1:28:9c:6e:13:b1:86:a2:c4:ad:ef:2d:b7:54:d2:
                    16:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6A:AE:BD:28:81:1B:13:A0:5F:31:35:74:4E:8A:6B:70:1E:63:45
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/3130332e3233392e3232342e302f32342d3234203d3e203538353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d0:d3:ef:cf:56:09:72:2b:0c:b0:66:58:37:74:ce:ff:83:
         81:5c:3b:b0:35:bf:e5:a5:e6:33:15:7f:84:60:1a:88:a2:1a:
         97:2d:0d:b4:3c:e4:b1:a0:02:71:b5:e9:32:ce:f5:fd:e3:ac:
         26:fa:df:82:b6:5b:cb:e5:59:a6:a9:1c:71:3d:ad:88:17:d7:
         63:91:65:17:79:62:9b:29:7f:bf:b9:16:73:60:14:13:a6:34:
         e6:98:5c:e2:b1:58:33:41:61:a9:03:e6:a2:9f:35:40:39:5a:
         3b:45:47:09:90:42:5b:02:83:b8:2e:34:a7:53:d9:3d:ad:d5:
         77:c7:df:a5:37:3e:df:0e:c1:56:b6:46:e6:31:b7:12:8e:b9:
         af:ce:b9:35:bf:bf:a8:84:b5:63:09:70:54:08:7d:c1:ed:37:
         a1:0b:73:74:de:dd:d7:af:43:dd:c9:b4:d5:76:ba:15:bb:81:
         67:e3:5b:5a:e1:9a:f1:df:02:84:4e:f0:ad:8c:18:c7:b1:dc:
         b2:47:a9:3e:f0:54:1f:5e:78:3e:3e:ea:9f:cb:50:14:92:89:
         76:37:fc:19:ac:23:e4:3a:4a:84:2a:4d:04:f4:b5:35:79:d0:
         1f:dd:2e:26:db:2d:f8:f1:78:c2:73:d8:9a:e4:2a:cb:ab:23:
         a8:3e:e4:26
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUBnZ91kBzPFXmCYVM6IcvFaQbCDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5
NTM1M0VDNjAeFw0yNjA2MjkwNzIzNDhaFw0yNzA2MjgwNzI4NDhaMDMxMTAvBgNV
BAMTKDRGNkFBRUJEMjg4MTFCMTNBMDVGMzEzNTc0NEU4QTZCNzAxRTYzNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSPmcH5Ncw69dxf9oeFktxfmRu
qkzgOIKwIFRlTi+9LRj+BO0AJNAeOjdNgdkW2sK2jMqT1HB2lHdQc0Yjz8Q7QbK4
8Y73JTsC1/UTRHwJZpf8IrnMlyDvzU11BOy/SVQlhqL1HfZs5vDjcWulZgjG5Y1k
UfrUoY1Ya07Q12yqmbdI04YjqUs+FeZBQ/7cBV2dwUs3T8kmwDO4rkZfQ+Z9MWB9
DI7Q8dVf8/1krh/Us136b+T8OpfIOaP19bjW8uZCkzlj/5r1NhoLC7X1Q+3CtkiM
WH5hkVJYClZNOEjLdeYdAiILbrOpYXb8N9XRnsEonG4TsYaixK3vLbdU0hbjAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUT2quvSiBGxOgXzE1dE6Ka3AeY0UwHwYDVR0j
BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0
NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTE5MTEwMDQ0ODIyNDA1MTMvMC8zMTMwMzMyZTMy
MzMzOTJlMzIzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM1MzQzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfv4DANBgkqhkiG9w0BAQsFAAOCAQEAUdDT789WCXIrDLBmWDd0
zv+DgVw7sDW/5aXmMxV/hGAaiKIaly0NtDzksaACcbXpMs71/eOsJvrfgrZby+VZ
pqkccT2tiBfXY5FlF3limyl/v7kWc2AUE6Y05phc4rFYM0FhqQPmop81QDlaO0VH
CZBCWwKDuC40p1PZPa3Vd8ffpTc+3w7BVrZG5jG3Eo65r865Nb+/qIS1YwlwVAh9
we03oQtzdN7d169D3cm01Xa6FbuBZ+NbWuGa8d8ChE7wrYwYx7HcskepPvBUH154
Pj7qn8tQFJKJdjf8Gawj5DpKhCpNBPS1NXnQH90uJtst+PF4wnPYmuQqy6sjqD7k
Jg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:25 2026 by rpki-client