Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35352e302f32342d3234203d3e2034383038.roa
File:                     3130332e3131382e35352e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          OUMKjqnkkGp3PVwr7CXbPojjV56LxWcDa/5MEngiGbw=
Subject key identifier:   9E:AA:9B:EB:25:0D:DF:10:F2:19:90:71:96:E2:7F:13:BA:97:C6:81
Certificate issuer:       /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8
Certificate serial:       43FF723D8F6CCDFF64B241278F9070F089DDFF24
Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35352e302f32342d3234203d3e2034383038.roa
Signing time:             Thu 21 May 2026 07:57:43 +0000
ROA not before:           Thu 21 May 2026 07:52:43 +0000
ROA not after:            Thu 20 May 2027 07:57:43 +0000
asID:                     4808
IP address blocks:        103.118.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ff:72:3d:8f:6c:cd:ff:64:b2:41:27:8f:90:70:f0:89:dd:ff:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8
        Validity
            Not Before: May 21 07:52:43 2026 GMT
            Not After : May 20 07:57:43 2027 GMT
        Subject: CN=9EAA9BEB250DDF10F219907196E27F13BA97C681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:a5:f8:17:c7:32:b4:be:97:e9:45:e7:60:
                    71:4f:dd:ac:c5:49:02:92:95:39:d5:26:66:16:bc:
                    c5:55:e7:84:3c:5d:63:70:61:fc:da:a5:58:b6:a0:
                    2c:6a:19:84:38:72:16:ff:83:a5:e3:16:0e:b2:fe:
                    2e:3d:a9:b4:44:28:15:69:7a:8b:41:3a:a9:20:1d:
                    9d:15:fa:d6:9d:4e:e2:02:00:2d:d5:e6:6f:92:26:
                    60:3c:1a:ca:e6:1b:ec:ad:23:b9:ec:41:24:d1:74:
                    5e:6d:25:34:7b:fe:90:95:d5:99:bf:9f:14:f4:0b:
                    3a:65:75:90:0b:96:ac:14:10:2b:a7:df:ff:0c:c3:
                    77:99:df:b0:84:a5:63:03:11:cf:a5:eb:4f:1c:06:
                    7b:1e:97:05:ea:53:8f:32:f3:cb:86:c1:1b:f3:d1:
                    d5:91:cb:0d:bd:f5:73:d3:db:d5:4c:e1:50:97:60:
                    2d:53:f6:1f:2b:6b:30:32:05:d2:94:cf:c3:d2:c5:
                    5e:1b:17:f4:1f:c7:04:9e:5b:60:cd:36:3a:8d:c3:
                    8c:db:e6:24:d8:ec:c0:8e:75:db:fc:92:4f:06:05:
                    2f:bc:98:16:b1:15:75:c6:28:52:b0:14:1d:93:d3:
                    51:61:eb:a5:9b:df:0d:32:a0:f5:90:c8:1a:86:1d:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AA:9B:EB:25:0D:DF:10:F2:19:90:71:96:E2:7F:13:BA:97:C6:81
            X509v3 Authority Key Identifier:
                keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/3130332e3131382e35352e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ad:4d:3b:00:7e:6f:cc:b4:4c:25:84:fd:6c:74:35:c3:2d:
         75:66:ab:2a:68:c9:57:5f:f0:bc:5a:6d:74:df:38:2f:e4:80:
         17:35:06:8f:9d:f1:23:57:6d:c7:1a:d8:29:7b:1d:13:2b:59:
         37:d5:bf:b8:3c:02:46:aa:7f:a2:0c:b6:30:93:03:ef:57:76:
         b6:28:12:ea:5c:75:3a:66:4e:9d:56:03:0b:86:10:ce:55:81:
         13:aa:49:5b:24:95:19:20:14:7c:22:a4:48:50:27:8e:42:f2:
         c3:42:8f:06:e5:34:3e:b5:99:71:dc:a2:1d:42:bc:f3:08:84:
         6f:00:2f:df:49:ec:92:64:37:36:c3:18:86:50:78:42:e0:59:
         5c:e8:f1:15:45:fe:76:25:59:c1:c5:4d:bd:0a:59:d8:82:2d:
         0e:fa:27:ca:af:d5:dd:e5:50:56:e2:b5:ce:f5:90:cd:2f:e9:
         9b:49:44:3b:64:6d:14:ea:82:eb:ca:ea:b9:ec:26:c1:54:a3:
         ce:99:3d:8a:d9:91:f5:da:e6:39:35:8e:86:30:4a:42:f6:9b:
         8b:9d:cf:18:ba:59:77:11:20:a4:8d:aa:d2:b9:e9:37:b0:35:
         a0:a4:2a:b2:25:fe:70:5d:44:70:7d:1a:d5:66:d4:0d:5f:a9:
         c3:4c:fb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:53 2026 by rpki-client