Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235342e302f32332d3233203d3e2034383131.roa
File:                     3130332e3139322e3235342e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier:          8LC6t+AlWUI0Km4ADSxw7/SxeGF+3UMzQsFGYpbYLBQ=
Subject key identifier:   52:2A:41:74:44:12:1A:6A:2E:EF:DB:AC:9D:9E:CF:55:92:4E:AC:5D
Certificate issuer:       /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial:       4C647AAB82FFDEC288448461FBF4F37BB80C9D1D
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235342e302f32332d3233203d3e2034383131.roa
Signing time:             Sun 23 Aug 2026 15:00:16 +0000
ROA not before:           Sun 23 Aug 2026 14:55:16 +0000
ROA not after:            Sun 22 Aug 2027 15:00:16 +0000
asID:                     4811
IP address blocks:        103.192.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:64:7a:ab:82:ff:de:c2:88:44:84:61:fb:f4:f3:7b:b8:0c:9d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
        Validity
            Not Before: Aug 23 14:55:16 2026 GMT
            Not After : Aug 22 15:00:16 2027 GMT
        Subject: CN=522A417444121A6A2EEFDBAC9D9ECF55924EAC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:d2:81:69:fb:72:29:80:c5:2c:f2:94:8b:
                    73:df:42:58:a4:70:dc:9c:ad:b8:f0:ba:e2:bc:b7:
                    f7:01:dd:ca:ce:3e:5d:22:b9:34:28:ab:8a:cd:19:
                    96:a3:d6:a6:fa:00:ae:d7:88:5d:6b:13:aa:ae:20:
                    29:53:ce:ac:8d:12:d0:18:f9:0d:34:5b:aa:ed:92:
                    50:0e:3d:1c:29:fc:cc:54:c0:d6:d0:8a:69:94:75:
                    a3:49:bc:b9:f5:de:f4:6c:02:9d:55:44:c2:2c:49:
                    c0:ae:b2:ff:33:f6:72:78:a4:e2:35:a3:22:c8:5c:
                    e2:fc:34:e9:cd:6e:f0:47:22:3f:76:b6:63:b7:87:
                    4a:64:09:53:fc:8f:af:0e:0a:23:5c:f8:94:e5:49:
                    c7:07:71:5d:9b:99:c4:73:ad:a8:49:82:c4:63:51:
                    b7:2f:d0:10:37:43:45:f9:a0:15:65:9d:23:79:bd:
                    ff:cf:68:5a:ed:93:79:97:0e:ab:4d:8b:d5:bd:54:
                    0e:a6:2f:b9:f3:3a:6f:de:58:c2:23:d0:c6:f8:4c:
                    09:b2:97:b1:75:df:f5:15:95:70:b9:00:3c:9e:38:
                    d8:1b:c5:7c:fb:43:dc:50:0b:ce:02:4b:ed:e6:98:
                    76:ba:da:d0:7e:18:cd:7a:e1:96:11:9d:1d:97:bd:
                    dc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2A:41:74:44:12:1A:6A:2E:EF:DB:AC:9D:9E:CF:55:92:4E:AC:5D
            X509v3 Authority Key Identifier:
                keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/3130332e3139322e3235342e302f32332d3233203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:2f:45:96:86:9c:28:eb:86:37:41:e7:04:f1:ea:ff:19:03:
         a4:2a:3d:d6:a3:d3:70:2b:8f:90:e9:08:c3:fd:56:3a:29:d5:
         c2:8f:cd:a4:dc:17:c6:59:b3:12:fb:e3:de:d9:ef:aa:8b:b0:
         27:1b:f4:17:ec:53:9d:4c:43:56:20:e6:56:4d:af:32:79:c3:
         bf:54:58:d7:77:ac:bc:77:67:fe:3a:16:ab:e7:81:9c:47:72:
         d5:06:ab:76:0e:94:ec:ce:4f:98:b2:f6:83:4e:89:08:e1:ca:
         6c:43:d6:98:56:74:41:c7:64:1d:a8:c9:09:0b:f9:39:30:ae:
         77:d4:40:02:52:55:ca:d4:5f:ca:72:6b:ba:84:3c:8e:8c:90:
         34:05:21:6d:f4:0d:46:63:a4:dd:55:0a:97:59:39:07:b4:2d:
         ef:22:a7:ad:df:73:4c:6e:ab:10:0c:aa:2d:5d:e8:5f:a8:88:
         cf:6b:ad:18:ca:b3:99:2e:52:96:f6:ac:3b:03:19:91:29:61:
         96:85:4c:c4:3b:fe:bd:57:f5:06:1e:fb:8b:ec:a7:24:31:b7:
         fb:5f:6f:fb:60:7f:43:a9:95:e4:2d:d1:61:79:5b:a7:17:c9:
         0f:89:da:f8:4a:d7:ac:4d:df:15:d1:ec:77:7d:f4:6d:c5:16:
         cf:ac:97:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:43:23 2026 by rpki-client