Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/3130332e38332e34362e302f32342d3234203d3e2034383437.roa
File:                     3130332e38332e34362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          mdSscBSM9XKJNkb7F/9rJNPLkHKycB/dFizvvcw5fCs=
Subject key identifier:   3A:D3:B5:04:C9:B3:BD:C7:80:BF:72:3B:30:7E:2A:9A:DC:3F:A0:3E
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       138DB0E87630505911094AA881D50B628439CB31
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/3130332e38332e34362e302f32342d3234203d3e2034383437.roa
Signing time:             Sat 27 Jun 2026 17:12:30 +0000
ROA not before:           Sat 27 Jun 2026 17:07:30 +0000
ROA not after:            Sat 26 Jun 2027 17:12:30 +0000
asID:                     4847
IP address blocks:        103.83.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 13:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8d:b0:e8:76:30:50:59:11:09:4a:a8:81:d5:0b:62:84:39:cb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: Jun 27 17:07:30 2026 GMT
            Not After : Jun 26 17:12:30 2027 GMT
        Subject: CN=3AD3B504C9B3BDC780BF723B307E2A9ADC3FA03E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:66:ed:95:1c:3d:36:b9:b1:4b:6a:08:c9:
                    ae:c1:22:62:06:37:da:fd:6d:08:1b:7d:6c:7b:36:
                    24:33:60:0d:6d:56:40:ca:64:ce:08:29:a1:86:e3:
                    2b:8a:80:7a:ab:6d:97:e2:85:a8:27:20:c8:93:ee:
                    a2:28:fc:3d:06:ee:f0:7a:c6:6a:49:c1:23:f8:c4:
                    76:bf:1b:35:f4:90:67:b4:e8:8c:e0:ec:dc:74:06:
                    54:cf:8d:1f:a8:1a:d7:67:05:87:d1:8a:65:2b:f5:
                    89:a1:25:9b:d8:53:7c:5d:4b:be:2f:c8:86:de:a8:
                    f1:f3:1e:47:bd:73:09:50:0d:ae:ed:33:c9:c2:c2:
                    fc:e7:08:f1:af:22:aa:02:6f:96:5a:91:d6:35:0f:
                    35:e0:44:85:1b:39:20:e6:bd:d4:37:9e:9b:97:d0:
                    07:85:44:d4:9b:2d:0e:92:a8:fd:99:28:12:b0:c8:
                    1a:cd:0a:21:36:dc:8e:02:a2:6d:b6:38:60:f8:a5:
                    73:0c:5a:94:a3:0a:8b:cd:8c:40:07:97:98:0f:48:
                    2f:47:2a:bd:e8:f2:b6:2e:c7:ab:5b:bd:fa:0a:f5:
                    48:d3:74:80:75:14:01:a0:7f:e4:7e:02:33:40:f8:
                    33:e6:d4:10:2a:45:bc:21:20:a2:63:4a:a3:e5:cd:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D3:B5:04:C9:B3:BD:C7:80:BF:72:3B:30:7E:2A:9A:DC:3F:A0:3E
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/3130332e38332e34362e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:21:9d:a8:5e:23:b0:5d:0a:45:24:60:a9:5f:9a:67:57:
         23:55:d5:c0:aa:d2:9b:b1:4a:9f:a7:de:c2:39:33:3a:06:0b:
         29:92:58:29:80:84:0f:c1:ac:b4:2a:8e:76:7a:5d:78:60:5e:
         9d:59:49:df:12:b8:17:05:16:98:e1:ab:37:8d:08:ce:4f:11:
         9a:03:2a:09:27:fe:0b:6e:46:3e:2a:93:ef:8f:17:9d:38:96:
         1f:56:92:ca:00:11:4d:48:ba:e2:e4:62:46:95:2f:b7:31:67:
         71:2f:bf:16:bf:fb:86:eb:32:c0:06:4d:42:06:c9:15:6a:ae:
         6b:91:55:16:a3:28:bc:4f:c7:53:de:24:87:93:c6:83:ca:e5:
         84:5d:71:cb:94:28:ee:b2:7d:8e:e8:55:79:67:2d:a6:ac:00:
         b8:59:f6:02:88:15:c3:6d:d5:78:f9:1c:89:a8:aa:a7:49:27:
         7b:93:1c:b6:b9:83:98:f6:51:79:8e:d5:6a:ce:8d:b9:9d:36:
         b0:b8:f1:7e:77:5f:1f:4f:dc:76:8b:74:87:1b:48:bf:bf:1e:
         91:a0:b4:4e:1f:77:af:f0:0b:57:e6:ed:fb:65:08:a7:9b:a2:
         48:59:29:e0:91:80:cd:51:3e:8a:8c:b9:a7:2e:02:2d:3d:1f:
         28:b5:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:19 2026 by rpki-client