Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130332e32382e382e302f32342d3234203d3e203233373234.roa
File:                     3130332e32382e382e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier:          mAm7NlIEyqQIiOWEw4GBFiFLOoeiXHDGMzMY6xSaGQw=
Subject key identifier:   EC:19:24:55:52:93:15:CC:8C:30:91:9F:41:F0:F4:FC:37:B5:E1:53
Certificate issuer:       /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
Certificate serial:       19372113580CC4657A64E4A3A6795518DAB6C774
Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130332e32382e382e302f32342d3234203d3e203233373234.roa
Signing time:             Thu 21 May 2026 16:09:56 +0000
ROA not before:           Thu 21 May 2026 16:04:56 +0000
ROA not after:            Thu 20 May 2027 16:09:56 +0000
asID:                     23724
IP address blocks:        103.28.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:37:21:13:58:0c:c4:65:7a:64:e4:a3:a6:79:55:18:da:b6:c7:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984
        Validity
            Not Before: May 21 16:04:56 2026 GMT
            Not After : May 20 16:09:56 2027 GMT
        Subject: CN=EC192455529315CC8C30919F41F0F4FC37B5E153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:f8:21:e7:b7:b4:88:ef:16:7a:95:81:18:
                    fc:3f:3b:4c:b2:67:b0:43:dd:00:ea:e9:8c:3f:45:
                    0e:c8:d7:d0:32:f6:0a:31:33:3e:2f:c4:81:b5:c2:
                    d2:b2:61:1b:22:65:95:82:8e:7f:19:a7:ef:2b:da:
                    f7:89:13:14:c0:82:ce:9d:87:87:75:27:08:5a:d9:
                    99:dd:a2:9f:5a:ee:6c:93:5e:00:31:a1:37:0c:0f:
                    ac:0e:e5:3f:ad:c7:16:3f:d1:6c:65:a8:6f:79:5c:
                    e0:8e:a7:55:e0:fd:69:6f:4b:91:47:e7:ba:84:78:
                    c3:ab:9c:16:28:8a:c2:e1:5b:0c:25:37:00:0e:a0:
                    2f:2f:26:e9:1e:95:99:d1:53:a1:f5:62:a6:7f:48:
                    f1:6b:6a:1b:cc:8c:ff:03:3d:1b:44:81:06:2e:ee:
                    6b:a6:b8:fb:46:bc:8c:05:68:e2:69:be:05:c0:ae:
                    d5:6a:dd:5f:ff:61:e7:57:d8:60:95:f3:3d:6d:b6:
                    e2:8e:91:5a:f4:4d:db:a6:f1:23:57:5b:58:1c:08:
                    97:81:e9:75:61:d6:37:33:4d:a7:39:55:55:cb:ad:
                    34:cb:de:29:d2:c0:2f:7c:4a:19:ae:a6:2d:ce:dc:
                    d3:46:40:97:1d:9a:d2:b5:6e:d2:76:66:35:25:81:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:19:24:55:52:93:15:CC:8C:30:91:9F:41:F0:F4:FC:37:B5:E1:53
            X509v3 Authority Key Identifier:
                keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130332e32382e382e302f32342d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:0a:ba:7c:db:c6:dd:26:74:2d:d8:a0:83:96:22:c3:7e:71:
         60:df:25:b2:df:d7:4b:a9:c6:c2:8c:93:5e:38:8e:05:90:40:
         18:e9:52:59:e0:31:74:0b:94:e3:38:64:88:02:44:df:f7:3d:
         ee:db:d3:a6:1b:41:f8:1b:d1:cd:4e:51:fb:bc:50:73:e2:ed:
         eb:6a:90:09:64:f4:f4:be:20:ef:52:90:f4:44:49:5e:57:62:
         d4:63:bb:03:c1:32:0a:8e:a1:44:5e:83:0d:11:ba:b1:8c:cf:
         a9:66:a3:f6:9c:32:1d:83:f4:57:2d:96:25:c1:02:1d:db:84:
         d2:25:2e:ce:6c:66:76:9c:e5:0b:9f:7c:1d:af:f2:56:76:44:
         5e:0a:c4:3c:ef:af:ee:12:d6:04:ae:dd:2b:02:fc:f1:2d:37:
         9e:ef:7d:67:d6:03:e0:e8:bd:75:e9:21:8f:33:92:f7:13:5e:
         01:86:bc:cd:1e:0f:05:6d:c6:1d:0e:db:37:93:04:b8:7d:51:
         1b:2c:23:aa:76:dd:19:0e:19:b8:40:24:7b:77:11:6e:20:9e:
         44:15:52:08:24:c2:c8:ea:fe:73:52:6a:c4:b7:61:e3:3c:ac:
         53:e7:a6:cb:f4:2a:6d:84:02:18:eb:e1:4a:28:b6:30:99:19:
         41:f0:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:32 2026 by rpki-client