Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa
File:                     3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (raw, json)
Hash identifier:          wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=
Subject key identifier:   59:15:6C:F4:3E:36:22:B8:68:3F:9A:8D:A0:BF:39:97:29:B1:A5:95
Certificate issuer:       /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E
Certificate serial:       682F64F41F3C7B20F3A494DC5272468829E35DF4
Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa
Signing time:             Thu 14 May 2026 01:11:18 +0000
ROA not before:           Thu 14 May 2026 01:06:18 +0000
ROA not after:            Thu 13 May 2027 01:11:18 +0000
asID:                     9808
IP address blocks:        103.232.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2f:64:f4:1f:3c:7b:20:f3:a4:94:dc:52:72:46:88:29:e3:5d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E
        Validity
            Not Before: May 14 01:06:18 2026 GMT
            Not After : May 13 01:11:18 2027 GMT
        Subject: CN=59156CF43E3622B8683F9A8DA0BF399729B1A595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:f1:7a:e3:2c:cf:51:5c:87:8a:ae:ba:cd:
                    95:5f:8a:50:3e:a3:34:97:61:41:a9:12:05:bf:a3:
                    95:28:dd:c4:73:0b:c9:b6:f9:73:67:45:df:f8:65:
                    f5:36:14:13:5a:3a:a8:c8:ff:0b:91:de:3b:05:32:
                    99:3f:9d:16:3f:fb:6f:5f:b3:34:77:53:f4:06:4b:
                    68:d5:a0:53:0b:1f:d6:4b:3f:71:b5:1a:b0:4a:92:
                    06:2d:13:ec:6d:9e:40:16:24:b5:03:8c:9e:ef:07:
                    04:e0:c1:f6:9a:f0:42:58:5b:fd:14:b3:9c:c0:9c:
                    0e:03:8d:17:ee:2f:53:2d:b0:bc:94:c1:61:c5:1e:
                    63:a2:f7:15:97:32:6a:25:67:7d:5d:1d:97:1d:45:
                    04:b2:9a:a7:b0:23:71:c7:cd:3c:ef:04:f0:22:a9:
                    c9:a9:66:15:83:88:11:86:9c:07:f1:c2:5b:af:43:
                    0e:cf:ee:5b:c1:c7:ed:98:1a:c6:8c:95:49:a1:3a:
                    07:b7:36:7c:18:89:1d:b4:4b:0d:20:cc:ab:69:e2:
                    ad:af:06:ec:f4:96:fd:77:b8:47:bb:8e:1c:7e:d5:
                    c6:8d:57:74:db:7c:1b:06:f1:c5:57:01:00:31:6f:
                    ec:7e:f6:28:6e:c3:ac:6b:d6:19:b5:f2:40:e5:36:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:15:6C:F4:3E:36:22:B8:68:3F:9A:8D:A0:BF:39:97:29:B1:A5:95
            X509v3 Authority Key Identifier:
                keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:95:d9:9e:64:d1:ca:fd:c5:58:d3:57:81:43:85:9b:db:78:
         ac:99:75:89:33:1e:9e:bc:44:13:69:00:e0:77:08:f1:46:ed:
         ed:92:89:46:6a:5a:eb:61:33:b7:01:27:45:78:c1:30:c1:bf:
         56:e7:60:e1:59:64:ac:dc:f3:ef:57:f5:9f:f1:4c:2a:59:4b:
         7d:3f:73:66:65:54:e9:e4:07:67:0f:78:a6:92:2b:7e:9f:71:
         cd:f3:40:62:19:09:40:b6:cb:e3:b1:4a:07:fb:15:99:1f:7a:
         09:ba:53:69:03:cc:6f:cc:60:84:50:59:ec:2a:96:c4:11:5a:
         e6:b6:b3:21:7c:9c:66:e4:3e:e3:96:57:01:05:fb:76:aa:c7:
         5b:70:92:da:02:f0:0c:99:3c:65:f3:a6:d4:e5:da:b3:34:2d:
         6f:e0:c0:ef:4a:82:f4:39:01:0f:f1:92:c5:0b:fa:ec:8e:7d:
         57:c1:8b:d1:f6:80:ca:55:d0:04:37:83:8a:02:be:f0:14:c6:
         bd:08:d5:26:d3:33:e2:61:c8:d8:71:3c:56:f8:c5:09:f3:ae:
         a0:77:40:62:8b:6b:54:fa:d6:f7:ed:1c:ce:bb:f5:2c:4c:cd:
         80:6c:ba:6d:69:88:fd:c9:5b:6c:75:1e:83:df:b6:a1:43:ed:
         34:66:57:58
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUaC9k9B88eyDzpJTcUnJGiCnjXfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy
NzZFOUQwRTAeFw0yNjA1MTQwMTA2MThaFw0yNzA1MTMwMTExMThaMDMxMTAvBgNV
BAMTKDU5MTU2Q0Y0M0UzNjIyQjg2ODNGOUE4REEwQkYzOTk3MjlCMUE1OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbPF64yzPUVyHiq66zZVfilA+
ozSXYUGpEgW/o5Uo3cRzC8m2+XNnRd/4ZfU2FBNaOqjI/wuR3jsFMpk/nRY/+29f
szR3U/QGS2jVoFMLH9ZLP3G1GrBKkgYtE+xtnkAWJLUDjJ7vBwTgwfaa8EJYW/0U
s5zAnA4DjRfuL1MtsLyUwWHFHmOi9xWXMmolZ31dHZcdRQSymqewI3HHzTzvBPAi
qcmpZhWDiBGGnAfxwluvQw7P7lvBx+2YGsaMlUmhOge3NnwYiR20Sw0gzKtp4q2v
Buz0lv13uEe7jhx+1caNV3TbfBsG8cVXAQAxb+x+9ihuw6xr1hm18kDlNvQfAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUWRVs9D42IrhoP5qNoL85lymxpZUwHwYDVR0j
BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1
QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNzEwNjI1NDQ3MzM5NjI0MS8wLzMxMzAzMzJlMzIz
MzMyMmUzMTM2MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzOTM4MzAzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWfopjANBgkqhkiG9w0BAQsFAAOCAQEAlpXZnmTRyv3FWNNXgUOFm9t4
rJl1iTMenrxEE2kA4HcI8Ubt7ZKJRmpa62EztwEnRXjBMMG/Vudg4VlkrNzz71f1
n/FMKllLfT9zZmVU6eQHZw94ppIrfp9xzfNAYhkJQLbL47FKB/sVmR96CbpTaQPM
b8xghFBZ7CqWxBFa5razIXycZuQ+45ZXAQX7dqrHW3CS2gLwDJk8ZfOm1OXaszQt
b+DA70qC9DkBD/GSxQv67I59V8GL0faAylXQBDeDigK+8BTGvQjVJtMz4mHI2HE8
VvjFCfOuoHdAYotrVPrW9+0czrv1LEzNgGy6bWmI/clbbHUeg9+2oUPtNGZXWA==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:30 2026 by rpki-client