Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/3130332e38332e34372e302f32342d3234203d3e2034383437.roa
File:                     3130332e38332e34372e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          Y10Vqyb0XJ0HNTfHx0Vvch3nLgELGfJsukHkkTDyvyQ=
Subject key identifier:   69:2C:5E:5B:4D:96:0C:F7:58:49:5E:27:DC:7A:A9:7C:89:02:F6:B7
Certificate issuer:       /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial:       3A0729D962EF7B42CA0DCDCB6161CC37871C5474
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/3130332e38332e34372e302f32342d3234203d3e2034383437.roa
Signing time:             Sat 27 Jun 2026 17:12:30 +0000
ROA not before:           Sat 27 Jun 2026 17:07:30 +0000
ROA not after:            Sat 26 Jun 2027 17:12:30 +0000
asID:                     4847
IP address blocks:        103.83.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 13:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:29:d9:62:ef:7b:42:ca:0d:cd:cb:61:61:cc:37:87:1c:54:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
        Validity
            Not Before: Jun 27 17:07:30 2026 GMT
            Not After : Jun 26 17:12:30 2027 GMT
        Subject: CN=692C5E5B4D960CF758495E27DC7AA97C8902F6B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:15:4c:1d:cc:5f:fd:ec:85:0c:7b:59:7c:
                    dd:bb:9d:fe:84:98:6a:bf:6a:6b:d1:ed:a6:b6:3e:
                    0a:b2:da:6d:e8:c5:5d:26:b6:61:db:b1:b9:4d:ae:
                    cd:6f:46:99:ab:54:41:41:db:61:a5:96:c3:85:f9:
                    75:27:d8:16:85:09:b9:eb:6a:69:65:af:57:d2:dc:
                    3f:83:85:6b:7e:3a:67:07:b4:ca:a6:36:d9:ee:17:
                    5c:7e:30:f5:fa:04:34:8c:98:ac:ba:d4:6f:0f:51:
                    49:ce:62:7d:c3:fd:c9:b8:a5:9e:c3:a5:5d:0e:2c:
                    1b:be:30:47:81:3f:bb:94:21:44:57:16:f7:99:5e:
                    62:45:33:7b:cc:1a:22:1e:a1:3f:24:44:75:ac:47:
                    32:a5:bf:8d:64:d8:e6:7a:6e:14:10:d6:a2:56:2e:
                    db:38:4e:e1:3a:1a:3a:9b:64:c0:0a:e3:86:d4:19:
                    eb:f5:f6:45:34:f3:b9:8c:2b:cd:8c:28:4b:d9:a1:
                    20:f1:c3:f7:f2:8b:00:40:97:db:91:5f:39:d3:25:
                    2c:84:ed:ba:b8:88:f4:e7:cb:97:7c:5e:80:4e:88:
                    b6:75:1d:a0:27:12:75:f2:99:c1:ac:80:fd:56:03:
                    80:72:72:f5:e9:d7:dd:61:26:e6:cc:b8:16:0d:37:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2C:5E:5B:4D:96:0C:F7:58:49:5E:27:DC:7A:A9:7C:89:02:F6:B7
            X509v3 Authority Key Identifier:
                keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/3130332e38332e34372e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:73:0a:41:3d:83:90:59:f6:86:c4:0d:39:b7:99:f9:24:fa:
         9e:c0:4d:e3:32:0b:fb:64:d4:3f:23:6d:aa:bf:b0:37:1e:95:
         13:5d:60:2a:23:3d:2c:2a:f4:c6:5b:bf:68:27:f1:41:67:b7:
         f5:6b:9c:5f:5f:ae:c8:28:de:dc:de:86:1b:5f:0d:ad:bf:00:
         89:60:e6:61:40:06:4e:ba:22:cb:d0:c7:ad:b1:b9:95:aa:15:
         39:e9:94:9a:27:47:a0:d9:c4:ba:42:7c:30:5f:23:9f:6f:02:
         8c:ea:a8:54:8d:4d:dc:62:5f:7e:83:13:82:22:3b:68:fd:91:
         bc:0d:2c:a0:55:44:97:e6:23:ce:dc:f5:32:83:37:13:2c:12:
         cd:ad:b1:6a:eb:6c:57:21:28:e3:80:50:34:ac:a8:d2:84:b4:
         9c:17:7d:4a:92:f5:b0:1a:72:fa:41:5f:6a:be:88:ac:90:ab:
         bd:81:cb:80:ae:d9:68:af:f7:bc:cc:ed:c9:df:ec:12:58:d6:
         81:b4:cb:7d:bf:17:a9:24:db:5d:2c:98:a7:10:44:de:b6:e4:
         2d:7a:07:8e:c8:25:10:84:f3:eb:60:1c:75:a1:a2:a8:1d:fc:
         04:83:9e:ef:ad:e5:e5:9c:c3:a2:c1:17:e2:1f:79:b3:6b:6a:
         e0:f0:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:21 2026 by rpki-client