Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107508285184933905/0/3130332e35332e3230382e302f32342d3234203d3e2034383038.roa
File:                     3130332e35332e3230382e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          enYv3abbVKOktfEN/FTcAdZ8EmguoNf0izTnKUsvjeY=
Subject key identifier:   FC:0F:FD:FB:70:70:1C:16:25:A8:A7:23:97:DB:39:30:ED:A4:EF:EB
Certificate issuer:       /CN=C178E89AC582AE71D7881FC86E201466F09D849B
Certificate serial:       7770CC360C40A7B7C9B1D048E29ACFFB16C00D10
Authority key identifier: C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/3130332e35332e3230382e302f32342d3234203d3e2034383038.roa
Signing time:             Mon 18 May 2026 09:48:25 +0000
ROA not before:           Mon 18 May 2026 09:43:25 +0000
ROA not after:            Mon 17 May 2027 09:48:25 +0000
asID:                     4808
IP address blocks:        103.53.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:70:cc:36:0c:40:a7:b7:c9:b1:d0:48:e2:9a:cf:fb:16:c0:0d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C178E89AC582AE71D7881FC86E201466F09D849B
        Validity
            Not Before: May 18 09:43:25 2026 GMT
            Not After : May 17 09:48:25 2027 GMT
        Subject: CN=FC0FFDFB70701C1625A8A72397DB3930EDA4EFEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:e3:bc:cb:53:dc:51:cf:b8:93:15:92:3e:
                    04:22:89:84:90:45:6a:c7:56:a0:8e:6b:cb:9b:b3:
                    5f:5f:90:2a:f3:d2:c6:83:b8:a7:33:49:9f:c6:75:
                    b7:7d:19:7a:10:55:88:87:59:b3:91:b7:06:85:84:
                    39:42:ae:62:dc:bc:a1:92:59:d8:cf:85:f6:ff:1d:
                    13:55:c5:ac:15:31:f6:3d:4e:45:fe:36:88:0e:40:
                    87:57:e1:7f:d8:1c:68:8b:d7:54:51:9e:fa:6e:9e:
                    ec:63:0e:7c:35:19:fb:92:92:95:4b:c8:9c:5c:a5:
                    23:39:5c:c9:8e:9c:76:da:3d:f1:6b:08:03:30:cf:
                    78:33:9c:ba:e3:49:60:53:e7:a5:15:a6:0d:de:4c:
                    e0:60:16:a0:5a:33:8a:9a:c6:5d:c8:b2:49:da:bb:
                    66:0c:bb:ce:ef:ec:2a:da:c9:b2:45:b3:82:cb:4c:
                    2b:7d:2b:77:e9:15:21:a0:58:4c:a1:27:b0:81:aa:
                    c1:a6:ca:a2:e1:6a:c2:05:b3:2f:6d:37:f2:27:a5:
                    32:4f:80:88:84:af:6f:ad:19:2e:7d:67:e7:06:53:
                    d2:e7:de:5d:62:8e:42:7c:6e:c0:e3:07:a0:72:19:
                    de:c4:12:cf:3a:16:ae:85:de:48:76:1d:78:d3:fc:
                    3f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0F:FD:FB:70:70:1C:16:25:A8:A7:23:97:DB:39:30:ED:A4:EF:EB
            X509v3 Authority Key Identifier:
                keyid:C1:78:E8:9A:C5:82:AE:71:D7:88:1F:C8:6E:20:14:66:F0:9D:84:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/C178E89AC582AE71D7881FC86E201466F09D849B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C178E89AC582AE71D7881FC86E201466F09D849B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107508285184933905/0/3130332e35332e3230382e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:13:89:15:dd:a9:12:fc:7c:15:15:26:a6:39:33:24:9c:c7:
         a6:bb:33:40:46:97:80:f2:81:da:d5:77:91:62:7a:76:79:45:
         63:bf:48:f0:14:75:b0:cb:2e:9e:64:00:22:a0:1e:40:74:89:
         19:cc:27:20:4e:69:7b:2f:3b:c3:01:8e:d0:41:7f:98:05:ab:
         7e:bc:21:2b:c7:63:1a:5c:6c:34:a9:48:10:6a:97:ed:43:69:
         f6:98:14:a3:6b:0b:05:20:fe:b6:44:83:53:86:54:60:68:13:
         39:e4:c5:42:84:d9:0f:4a:58:8e:28:44:87:e6:7d:79:c8:90:
         fd:dd:1a:86:6e:5d:b2:ab:89:bf:f7:54:43:f1:f5:7e:e2:07:
         54:5f:fa:6e:72:45:96:9c:16:7e:d2:c6:25:e7:62:72:a6:3e:
         d8:53:2e:12:7a:fa:ca:ff:b9:ae:a4:6a:54:51:c9:cf:86:4f:
         6d:00:14:8b:4b:f5:a9:79:df:bc:7c:e6:ce:23:83:a1:1b:88:
         5f:3e:1d:40:40:09:02:e8:7c:2a:93:30:c8:6b:7a:62:cf:39:
         86:79:53:4b:70:90:23:e6:20:bb:f4:48:1a:61:be:9a:3c:39:
         da:11:22:83:98:20:4e:71:93:ff:e9:8d:e7:31:e1:cd:94:bd:
         03:f1:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:47 2026 by rpki-client