Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35322e302f32342d3234203d3e2034383038.roa
File:                     3130332e3131382e35322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          t+UcDtfuQc57H7Nf+QogZp2E/pRJKxaQ+uABOn1R814=
Subject key identifier:   9E:2F:3B:D1:C1:5C:99:A3:D1:19:C2:31:03:70:CB:79:3A:81:0C:CA
Certificate issuer:       /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8
Certificate serial:       4CA3D7061CD7846CE83F06C127E3EF8D1A773406
Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35322e302f32342d3234203d3e2034383038.roa
Signing time:             Thu 21 May 2026 07:57:44 +0000
ROA not before:           Thu 21 May 2026 07:52:44 +0000
ROA not after:            Thu 20 May 2027 07:57:44 +0000
asID:                     4808
IP address blocks:        103.118.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a3:d7:06:1c:d7:84:6c:e8:3f:06:c1:27:e3:ef:8d:1a:77:34:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8
        Validity
            Not Before: May 21 07:52:44 2026 GMT
            Not After : May 20 07:57:44 2027 GMT
        Subject: CN=9E2F3BD1C15C99A3D119C2310370CB793A810CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:d2:35:b9:2a:13:f3:5c:78:ee:cf:c3:55:
                    f0:0b:d2:2b:ec:7d:41:55:3f:4e:8e:06:0f:84:b9:
                    dd:da:f4:8f:1c:1d:ee:e5:1f:ff:e5:b2:98:1f:4b:
                    6a:bf:f1:97:78:7a:9c:80:38:d2:19:6b:ca:3c:30:
                    05:19:87:40:52:9b:85:fd:2d:8c:4a:18:bc:6f:02:
                    cb:2e:d6:75:82:8b:13:76:c6:f2:19:5b:9d:13:a0:
                    0d:2a:e2:66:26:b4:b2:83:71:28:db:e0:9e:d6:11:
                    93:31:33:90:80:5e:2b:e3:b6:5f:34:fa:9c:62:3f:
                    38:1a:30:a0:af:16:01:a4:ad:1d:1a:9c:63:56:da:
                    23:e2:82:ca:46:0c:64:e7:98:9a:fb:0b:cf:2c:32:
                    e9:d4:63:1c:48:b6:bc:47:7c:e7:c2:7e:24:d1:99:
                    e5:f4:ac:b3:ee:b3:97:01:77:ac:e4:aa:3c:5d:46:
                    63:8b:a7:7a:d0:3d:50:ba:db:f2:e5:f6:fe:62:bf:
                    e1:41:f5:a1:5f:5f:66:8e:1d:b4:50:c3:14:76:43:
                    96:ae:ef:53:0b:41:d1:05:e4:a8:bd:d7:1c:59:cc:
                    f2:eb:29:6b:17:92:13:0d:a1:15:08:e2:2c:9a:0d:
                    5b:9d:0b:8e:b7:bc:1d:fe:16:c5:38:83:1e:a4:7e:
                    71:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2F:3B:D1:C1:5C:99:A3:D1:19:C2:31:03:70:CB:79:3A:81:0C:CA
            X509v3 Authority Key Identifier:
                keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:07:b1:ec:d0:7a:4d:19:ac:2f:ae:b6:c7:9f:5e:98:40:ee:
         16:e3:62:32:e3:bb:7c:61:c4:0e:6a:03:ad:57:82:c7:7e:7d:
         66:06:ad:ec:e4:d6:f8:a6:e7:bb:97:af:2b:4d:60:20:cf:37:
         49:de:7a:7c:b9:03:a9:ad:0c:d2:ce:2c:a0:5d:4d:e7:d8:0d:
         04:c3:ae:05:9a:86:6d:12:3c:50:ca:ae:1f:2e:ae:42:d2:c1:
         14:fc:5f:4d:a0:a6:cf:6b:fa:94:13:60:e2:0e:b8:c0:05:cf:
         5d:5a:e9:14:68:55:e0:dd:2e:bd:be:7e:c3:c8:9d:d4:14:18:
         8e:06:a3:93:da:5f:1f:e8:ab:39:92:f8:f3:61:a4:bf:02:2e:
         ce:10:f9:6b:26:dc:e6:60:8a:6b:86:6f:f2:cd:fb:dc:ea:ed:
         dd:d6:4f:14:05:a9:bd:53:d5:11:30:a9:8c:ce:70:42:44:56:
         3f:bc:72:2d:01:0f:1e:d3:f5:6e:9f:57:a7:f5:59:6e:c7:88:
         f3:ff:6d:bd:48:9f:f0:83:0d:b8:d5:ed:79:fa:bd:85:46:72:
         1b:3a:76:8e:07:77:0e:ce:0a:1c:d9:3b:f5:64:8d:c2:bd:7c:
         04:bc:b6:1a:94:2c:52:dc:bd:55:35:c8:64:00:3d:f1:25:77:
         c5:7b:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:40 2026 by rpki-client