Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/3130332e34382e3233322e302f32342d3234203d3e2034383437.roa
File:                     3130332e34382e3233322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          16j39pBf4T7mnfQpSFdIysY4anRKXXCrq7IJsajQHBQ=
Subject key identifier:   71:A3:BE:B0:78:67:7F:0A:C2:18:A9:52:AC:C2:70:B1:D1:9C:92:13
Certificate issuer:       /CN=2949D20EB3FEA14E986D0754348A679E44983AEE
Certificate serial:       1C4EAF2CA1F5857738031D405428D5F0F69B8AFB
Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/3130332e34382e3233322e302f32342d3234203d3e2034383437.roa
Signing time:             Sat 30 May 2026 07:34:53 +0000
ROA not before:           Sat 30 May 2026 07:29:53 +0000
ROA not after:            Sat 29 May 2027 07:34:53 +0000
asID:                     4847
IP address blocks:        103.48.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4e:af:2c:a1:f5:85:77:38:03:1d:40:54:28:d5:f0:f6:9b:8a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE
        Validity
            Not Before: May 30 07:29:53 2026 GMT
            Not After : May 29 07:34:53 2027 GMT
        Subject: CN=71A3BEB078677F0AC218A952ACC270B1D19C9213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:8e:dc:1f:0a:31:bf:78:f6:ff:c2:ac:5f:
                    73:03:3e:ec:fc:e8:b2:53:e5:a9:85:41:77:13:0d:
                    2d:8a:ae:75:6c:54:d3:f2:8d:9f:23:9a:32:40:b1:
                    a2:1e:e2:50:83:eb:5a:7f:d9:3a:43:f1:a0:2f:0d:
                    55:a9:1d:ad:50:9c:6e:da:00:1c:15:b8:97:81:2d:
                    d3:47:12:5b:fa:c6:6a:b5:ca:36:bd:1f:97:9b:f2:
                    39:77:bf:36:f5:ad:0f:c3:60:95:57:08:88:6b:9c:
                    b1:8a:97:fd:e0:5d:01:5a:31:ee:4f:1e:fc:16:62:
                    1c:f6:af:09:48:11:d9:7d:ec:d7:ca:d6:90:12:10:
                    e9:53:31:67:9a:b4:3d:f9:4f:4c:08:5c:70:d5:b2:
                    26:6f:f8:32:3e:08:4b:b2:d7:b7:02:cb:ee:76:a8:
                    37:0b:ae:11:7d:bf:17:06:d5:6b:90:b4:fa:eb:c8:
                    6e:3b:e7:89:0d:cd:5b:a3:26:99:bc:09:47:d0:e0:
                    21:d9:65:fc:11:6e:b8:70:c7:2c:ff:53:19:b6:5b:
                    46:c4:89:95:dd:ca:e8:e4:e2:23:e2:a7:38:b6:37:
                    08:12:a4:0d:b4:e2:e4:44:5b:91:89:4b:3a:81:24:
                    0a:ea:51:c8:13:14:26:9a:a3:82:66:0b:5a:24:30:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A3:BE:B0:78:67:7F:0A:C2:18:A9:52:AC:C2:70:B1:D1:9C:92:13
            X509v3 Authority Key Identifier:
                keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/3130332e34382e3233322e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:29:ae:b8:42:0c:40:2e:7a:83:67:8d:8c:56:43:e1:95:36:
         bc:3a:b8:63:bb:e2:45:b8:ea:07:3f:1c:5d:8e:22:3d:87:8d:
         52:e8:a7:2a:64:6b:8a:92:4b:9b:20:ef:b8:ea:87:9f:2c:31:
         f1:03:d7:57:fd:eb:c1:1a:bd:2a:7b:b3:00:f2:7d:40:7d:8c:
         0e:77:c0:6c:73:73:59:ff:92:d8:25:9a:8b:89:45:36:6c:81:
         a3:e4:b5:d8:3d:58:c9:7b:0e:7d:07:89:58:88:82:0b:9e:38:
         fb:ee:da:21:89:8f:4f:77:f9:dc:21:ba:a4:57:b7:be:d7:98:
         16:ef:dd:0b:9d:d5:c5:c0:31:82:62:c1:aa:19:bf:90:40:b4:
         43:80:6d:08:3c:9b:bf:aa:47:4b:4f:cb:f4:60:52:e5:71:3b:
         c2:e2:8e:3a:64:18:1a:dd:98:4e:5c:28:39:07:14:1d:c3:02:
         be:ba:a4:c1:a3:19:cb:a6:12:ea:be:0d:c6:a8:43:a9:86:11:
         d9:67:9d:56:45:4e:12:df:a3:b6:cf:c7:71:f2:63:86:d3:4b:
         94:f5:98:b3:d1:88:2f:6f:a3:6c:dc:bb:48:b1:92:ff:d7:63:
         16:f1:af:77:1d:6c:78:74:58:be:98:3d:c6:cf:98:c3:76:32:
         1c:89:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:53 2026 by rpki-client