Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e33322e302f32342d3234203d3e2034383131.roa
File:                     3130332e3232322e33322e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          D5crniKahJGIelOwSJRhsfjUaeQUHSsowSV74NYgj+A=
Subject key identifier:   A4:52:46:08:E2:F1:3C:B3:83:72:15:8A:B0:2E:D1:CB:35:43:E9:78
Certificate issuer:       /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial:       557337D1EF909FE47FA3A12672798A036AC823E6
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e33322e302f32342d3234203d3e2034383131.roa
Signing time:             Thu 20 Aug 2026 07:09:55 +0000
ROA not before:           Thu 20 Aug 2026 07:04:55 +0000
ROA not after:            Thu 19 Aug 2027 07:09:55 +0000
asID:                     4811
IP address blocks:        103.222.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 07:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:73:37:d1:ef:90:9f:e4:7f:a3:a1:26:72:79:8a:03:6a:c8:23:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
        Validity
            Not Before: Aug 20 07:04:55 2026 GMT
            Not After : Aug 19 07:09:55 2027 GMT
        Subject: CN=A4524608E2F13CB38372158AB02ED1CB3543E978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:4c:07:c7:93:77:78:c0:42:69:ae:ad:b5:
                    25:c9:77:8e:66:3b:99:62:90:e9:48:6a:09:0c:e2:
                    fe:cb:99:18:52:58:96:eb:cb:59:6e:73:e5:10:d4:
                    0c:b1:fd:ac:22:ed:85:b3:78:43:40:fd:9c:4a:58:
                    92:73:6d:0f:75:de:ee:f5:b9:5b:84:b0:b6:06:e6:
                    14:e5:ea:5f:db:36:a0:9b:b4:e4:d2:18:9f:10:04:
                    a8:17:ac:9c:f1:aa:69:37:0e:a3:f9:d9:ba:3c:64:
                    54:fc:52:13:d1:f0:e8:73:a8:b7:fb:ef:95:e1:75:
                    76:12:56:df:46:3f:5c:a6:83:f6:57:0c:b1:a8:57:
                    e8:6f:40:70:35:41:10:a0:06:03:db:b7:83:e5:19:
                    d5:12:8d:0d:41:90:b6:b1:85:3f:ba:2f:7d:bb:68:
                    2d:6a:ca:6e:8b:77:66:56:95:1e:b1:f3:a1:18:b1:
                    04:50:f6:1a:03:62:12:7b:7c:f5:05:05:d4:ca:bb:
                    22:1b:9e:39:25:c5:80:d4:f4:74:26:43:47:2f:93:
                    06:25:12:77:60:06:6f:fa:48:85:24:5a:bb:a5:3b:
                    b8:db:fb:ab:74:34:c5:91:b0:74:5f:a6:61:ee:2f:
                    6a:1a:2d:5f:8c:96:65:53:4f:70:e9:f7:55:86:c0:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:52:46:08:E2:F1:3C:B3:83:72:15:8A:B0:2E:D1:CB:35:43:E9:78
            X509v3 Authority Key Identifier:
                keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e33322e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.222.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:6f:08:5e:47:1a:2f:10:71:c7:35:88:9b:30:99:9e:6b:5e:
         7e:6f:4c:bc:ce:4a:b8:bc:bd:2d:99:b3:16:1d:50:2f:9c:cc:
         11:cc:da:c0:03:fd:a8:ea:66:f5:c8:b6:78:7c:5b:f0:42:63:
         49:d8:3a:56:aa:93:2d:d6:c9:85:6b:09:80:18:4f:56:5e:86:
         2e:7f:ce:bd:82:64:58:7c:87:56:fa:98:9d:1d:06:7c:63:f7:
         61:c1:1d:55:78:10:01:7a:84:1f:30:8b:fd:c6:14:01:3d:60:
         f1:73:c1:f3:0e:cd:44:87:8b:a9:5a:a9:82:84:d3:d6:0a:4f:
         16:1b:42:d8:ba:75:a3:42:e9:b9:4d:c5:98:df:a9:21:d0:12:
         04:de:99:17:8a:40:ee:f6:1c:b4:bf:d4:d8:a0:32:7c:70:93:
         0c:f8:05:e4:28:af:76:07:58:fd:5c:3c:36:e0:61:ab:99:28:
         db:2f:54:91:ab:0f:01:ed:9d:5e:21:ef:70:f3:f4:bb:80:1b:
         77:28:1c:81:eb:f0:51:65:8a:89:81:df:b4:10:8d:71:93:de:
         e1:2f:96:d3:c8:bc:30:67:bf:f5:67:d1:72:92:f4:cf:48:2f:
         dc:ae:64:ab:d0:3c:8e:a1:79:95:c2:20:51:09:dd:93:2a:a4:
         a5:20:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:43:22 2026 by rpki-client