Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/3130332e38332e34352e302f32342d3234203d3e2034383437.roa
File:                     3130332e38332e34352e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          +MbSziKgPrPl1SsyN4rJPpOURE3gwv64hE9pCH5hC7M=
Subject key identifier:   94:44:F4:F0:C1:82:BE:30:34:EC:0D:9C:0B:9A:2D:94:10:4D:49:CF
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       6B2169374CB44A9304D9F7AD9BA8D05E172DCB58
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/3130332e38332e34352e302f32342d3234203d3e2034383437.roa
Signing time:             Sat 27 Jun 2026 17:12:30 +0000
ROA not before:           Sat 27 Jun 2026 17:07:30 +0000
ROA not after:            Sat 26 Jun 2027 17:12:30 +0000
asID:                     4847
IP address blocks:        103.83.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 13:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:21:69:37:4c:b4:4a:93:04:d9:f7:ad:9b:a8:d0:5e:17:2d:cb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: Jun 27 17:07:30 2026 GMT
            Not After : Jun 26 17:12:30 2027 GMT
        Subject: CN=9444F4F0C182BE3034EC0D9C0B9A2D94104D49CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:95:fa:8f:39:bb:2b:58:de:11:4f:d8:3c:
                    2c:48:73:d2:65:c3:b4:b0:28:dd:5f:46:b8:6f:12:
                    f1:6c:10:88:29:e1:84:b9:77:00:4c:28:db:2c:29:
                    21:00:31:ff:11:cb:44:83:ab:a9:33:e2:e8:6d:0f:
                    6a:90:c2:19:95:de:c8:3f:a2:a8:7d:c6:d3:84:7f:
                    4d:bb:25:03:0c:74:13:2d:17:0b:57:e4:30:8a:77:
                    5f:99:75:b5:63:d8:21:af:5f:96:b3:8d:6a:c9:18:
                    8e:dc:07:52:54:b5:b6:34:08:db:d7:89:9a:57:42:
                    13:3b:51:f5:e9:0a:5d:f1:2f:7a:79:96:57:18:f4:
                    4f:b1:1c:3e:ac:69:1e:60:33:10:c1:da:ef:49:81:
                    91:3b:aa:65:29:ef:b8:87:e0:ad:48:52:db:c6:3a:
                    d0:8f:0c:63:bb:f6:37:4f:f7:76:96:a8:34:4f:8b:
                    ae:78:0c:da:97:be:4c:07:52:08:a1:85:47:e6:96:
                    0c:5a:ac:8d:2a:1b:01:23:fd:53:dc:95:74:7e:c7:
                    cb:af:31:c3:18:34:4e:ba:0a:b0:06:a9:49:10:9a:
                    4b:c4:66:d4:03:7b:09:c8:50:a3:4d:61:5f:a2:2b:
                    75:9c:2e:1e:7d:2f:7d:01:29:d7:63:d7:e5:cf:03:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:44:F4:F0:C1:82:BE:30:34:EC:0D:9C:0B:9A:2D:94:10:4D:49:CF
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/3130332e38332e34352e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:39:a1:ec:46:4c:55:9f:2e:99:b2:35:55:ea:62:67:4d:eb:
         99:0c:30:f1:b0:ee:8a:d0:35:4b:bb:c4:ad:6b:f2:3e:1e:da:
         31:74:64:8a:07:83:c3:de:ed:2d:ad:20:a8:a4:0f:c5:43:57:
         4d:05:18:d0:29:68:a0:4b:77:81:24:58:8e:ab:73:e6:de:c8:
         d2:2c:4b:b6:b0:8d:e3:aa:fb:4f:d1:47:30:bc:77:ab:38:08:
         cc:43:19:a0:3f:61:ea:f2:26:65:47:61:b6:15:59:fc:25:e2:
         d5:4f:bb:e6:53:21:75:fa:85:99:83:e1:b8:82:30:d2:17:13:
         a5:27:69:31:1d:a2:e0:d5:52:eb:26:b1:3c:11:35:a6:ba:41:
         02:a3:01:e4:64:06:66:eb:1a:dd:20:fe:30:6f:0a:8b:ba:dd:
         d7:37:2d:c7:46:5e:74:00:08:95:b0:5d:0d:a2:99:b5:01:32:
         fb:61:bc:ad:1f:4c:09:aa:58:74:68:e8:35:e3:93:76:82:fa:
         cb:87:48:88:03:0f:7e:8c:fc:a1:9c:4d:fe:71:50:e4:85:59:
         8e:04:23:f2:86:c2:23:a4:fa:08:80:1c:21:70:17:53:f3:c4:
         eb:8c:62:ba:35:9f:a5:44:8d:5e:a5:d2:0a:9e:b7:92:4b:71:
         df:f9:69:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:20 2026 by rpki-client