Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36342e302f32322d3232203d3e203538353139.roa
File:                     3130332e3232302e36342e302f32322d3232203d3e203538353139.roa (raw, json)
Hash identifier:          skWq9DVjr/L+lEV4OnmJAyThXYF3upqH3K4mAGCnER0=
Subject key identifier:   0E:C2:AE:3A:C5:81:36:DE:76:5C:F2:10:54:7E:44:0C:03:E3:62:30
Certificate issuer:       /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial:       30D549C0599AC707AF3A528260664B20CBE50252
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36342e302f32322d3232203d3e203538353139.roa
Signing time:             Thu 02 Jul 2026 03:38:03 +0000
ROA not before:           Thu 02 Jul 2026 03:33:03 +0000
ROA not after:            Thu 01 Jul 2027 03:38:03 +0000
asID:                     58519
IP address blocks:        103.220.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d5:49:c0:59:9a:c7:07:af:3a:52:82:60:66:4b:20:cb:e5:02:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
        Validity
            Not Before: Jul  2 03:33:03 2026 GMT
            Not After : Jul  1 03:38:03 2027 GMT
        Subject: CN=0EC2AE3AC58136DE765CF210547E440C03E36230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:3d:0b:75:33:d7:9f:0f:0f:fc:5e:d6:92:
                    32:d1:be:12:bb:4f:f6:c7:a8:e4:d0:2d:61:25:6a:
                    52:4b:a2:bf:39:6a:33:33:a7:58:bf:24:81:66:76:
                    73:55:28:af:35:ff:e6:b8:fe:86:33:92:84:7f:26:
                    f6:e4:93:3c:29:e6:5b:ab:a2:f0:5d:76:64:13:a4:
                    3a:70:b4:97:e4:b2:73:92:4e:17:2b:0e:d3:6b:91:
                    c2:b9:fb:c8:dd:7d:03:bb:ed:b5:06:19:64:09:5d:
                    5a:02:1c:78:75:a4:61:0a:3e:6b:96:a0:d7:40:8d:
                    76:cf:1e:bf:28:29:64:9f:0e:fe:fa:62:94:bd:55:
                    bb:4d:68:4c:1b:0a:b6:22:51:bd:49:b1:7f:b0:16:
                    1d:91:2b:38:23:71:4a:c8:b6:92:70:11:a0:fb:ba:
                    ea:d0:94:51:f6:bf:e6:bd:53:4b:cd:67:66:40:22:
                    af:54:87:a9:01:a0:67:39:4d:f1:66:3d:eb:71:42:
                    93:b4:80:60:9d:fd:4a:b1:1c:7d:8d:b0:57:2f:a9:
                    88:4e:24:e6:3e:a8:6e:f3:0b:59:9e:aa:e7:0f:9e:
                    48:47:c0:8e:35:2c:65:bc:27:81:e7:a1:cf:74:05:
                    b8:9c:8b:a3:dd:1c:28:a8:3f:a9:1d:6a:96:3d:16:
                    7f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C2:AE:3A:C5:81:36:DE:76:5C:F2:10:54:7E:44:0C:03:E3:62:30
            X509v3 Authority Key Identifier:
                keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36342e302f32322d3232203d3e203538353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:c9:b5:cf:af:97:f7:d9:ad:3d:87:e7:8c:0c:84:b0:c9:91:
         dd:ca:b5:05:44:dc:aa:c4:7d:b4:02:58:c7:a9:83:62:af:8b:
         1e:a4:07:91:3c:66:27:ee:ff:d2:a5:a0:4e:9b:2e:4a:28:ef:
         d4:f4:ba:9d:01:bc:15:61:56:33:ff:1b:8e:ef:4f:72:7f:95:
         18:ea:f7:0d:8c:82:12:ae:6c:39:ef:c8:40:8c:58:35:92:ad:
         c9:23:b4:f4:e5:bd:cc:a5:37:78:71:94:60:76:e9:f2:5f:a2:
         e1:df:18:00:80:d6:68:63:8f:85:f1:2b:cb:ee:16:86:c5:cb:
         7f:e6:60:cf:ad:4a:17:f6:e1:82:c3:b4:70:88:8a:a7:b1:7c:
         6a:80:f1:cb:50:b0:bd:33:49:bf:eb:1d:99:04:78:55:51:1d:
         18:da:96:c5:55:29:b6:45:4b:f0:01:4f:1b:e2:22:05:d5:40:
         c3:60:2d:b6:37:a7:c8:ab:f8:ee:d8:43:72:2e:5e:a1:2d:d7:
         31:ca:52:69:c2:01:db:c3:8a:fe:16:d9:ba:48:55:50:65:c8:
         f3:6f:dc:c1:d1:bf:78:b4:86:42:49:2d:cf:01:b2:f0:10:1a:
         45:14:a6:9a:8a:51:13:12:b9:4b:82:fb:4a:00:4c:7e:a7:67:
         3d:05:ec:f6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUMNVJwFmaxwevOlKCYGZLIMvlAlIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw
OThCQzhEMjAeFw0yNjA3MDIwMzMzMDNaFw0yNzA3MDEwMzM4MDNaMDMxMTAvBgNV
BAMTKDBFQzJBRTNBQzU4MTM2REU3NjVDRjIxMDU0N0U0NDBDMDNFMzYyMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAgz0LdTPXnw8P/F7WkjLRvhK7
T/bHqOTQLWElalJLor85ajMzp1i/JIFmdnNVKK81/+a4/oYzkoR/Jvbkkzwp5lur
ovBddmQTpDpwtJfksnOSThcrDtNrkcK5+8jdfQO77bUGGWQJXVoCHHh1pGEKPmuW
oNdAjXbPHr8oKWSfDv76YpS9VbtNaEwbCrYiUb1JsX+wFh2RKzgjcUrItpJwEaD7
uurQlFH2v+a9U0vNZ2ZAIq9Uh6kBoGc5TfFmPetxQpO0gGCd/UqxHH2NsFcvqYhO
JOY+qG7zC1mequcPnkhHwI41LGW8J4Hnoc90Bbici6PdHCioP6kdapY9Fn+nAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUDsKuOsWBNt52XPIQVH5EDAPjYjAwHwYDVR0j
BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5
MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwOTM1NDAzNjg2OTQ2NDA4NS8wLzMxMzAzMzJlMzIz
MjMwMmUzNjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM1MzEzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfcQDANBgkqhkiG9w0BAQsFAAOCAQEAb8m1z6+X99mtPYfnjAyEsMmR
3cq1BUTcqsR9tAJYx6mDYq+LHqQHkTxmJ+7/0qWgTpsuSijv1PS6nQG8FWFWM/8b
ju9Pcn+VGOr3DYyCEq5sOe/IQIxYNZKtySO09OW9zKU3eHGUYHbp8l+i4d8YAIDW
aGOPhfEry+4WhsXLf+Zgz61KF/bhgsO0cIiKp7F8aoDxy1CwvTNJv+sdmQR4VVEd
GNqWxVUptkVL8AFPG+IiBdVAw2AttjenyKv47thDci5eoS3XMcpSacIB28OK/hbZ
ukhVUGXI82/cwdG/eLSGQkktzwGy8BAaRRSmmopRExK5S4L7SgBMfqdnPQXs9g==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:13 2026 by rpki-client