Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139332e302f32342d3234203d3e20313337373436.roa
File:                     3130332e3133352e3139332e302f32342d3234203d3e20313337373436.roa (raw, json)
Hash identifier:          6GTJttgnXcncDO46u6D953/FNcSOT1iYi07RRqhihIc=
Subject key identifier:   58:E8:BA:66:B9:81:B9:4E:D3:7F:62:E3:4B:5F:C7:DF:93:A9:DA:1E
Certificate issuer:       /CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7
Certificate serial:       17687567BAE89002087D42B57BE7A6ACB7107A8A
Authority key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139332e302f32342d3234203d3e20313337373436.roa
Signing time:             Tue 26 May 2026 10:20:45 +0000
ROA not before:           Tue 26 May 2026 10:15:45 +0000
ROA not after:            Tue 25 May 2027 10:20:45 +0000
asID:                     137746
IP address blocks:        103.135.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:68:75:67:ba:e8:90:02:08:7d:42:b5:7b:e7:a6:ac:b7:10:7a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7
        Validity
            Not Before: May 26 10:15:45 2026 GMT
            Not After : May 25 10:20:45 2027 GMT
        Subject: CN=58E8BA66B981B94ED37F62E34B5FC7DF93A9DA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:33:a1:05:ab:4c:60:77:33:de:42:bf:54:0a:
                    0d:21:80:d4:b3:e0:89:26:1c:d5:15:d2:ea:39:7e:
                    91:8d:7e:22:e3:82:1a:06:95:5d:91:34:58:90:e7:
                    71:3b:da:9b:29:fc:92:6d:69:b8:57:17:8c:88:8c:
                    f5:17:76:45:5a:52:e0:7c:1c:d1:dc:82:b8:da:3d:
                    80:a5:a5:3f:f6:5d:2f:f3:61:d0:83:17:fc:a2:81:
                    a5:3b:7d:56:f1:d4:0e:95:d7:1a:8f:e0:f0:d7:f1:
                    cf:dd:c6:d8:f7:55:5d:4d:f6:a5:76:c1:22:cd:e2:
                    4e:26:5c:58:f8:18:91:e6:94:8f:b2:da:2e:73:55:
                    e4:58:9e:25:cb:e3:b1:e9:9d:a7:cc:86:c9:a9:8e:
                    a7:4e:0c:fc:24:d1:89:cc:8b:81:2a:c9:89:1d:82:
                    8a:13:37:a1:7a:6a:11:6b:0b:70:d2:85:0f:a6:4d:
                    9a:b6:36:c1:e1:d0:1b:94:4c:4d:be:8b:1b:dd:83:
                    a1:58:7b:76:3e:2c:c0:d6:12:0c:47:7f:3c:c9:4f:
                    7d:15:49:44:39:f7:b1:3e:e0:f5:bf:51:95:f3:a1:
                    0c:23:92:2a:59:a2:4e:fd:83:5a:ca:42:41:6f:1f:
                    33:a7:e8:bc:f3:44:19:be:7b:cd:e7:86:1b:5f:0f:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:BA:66:B9:81:B9:4E:D3:7F:62:E3:4B:5F:C7:DF:93:A9:DA:1E
            X509v3 Authority Key Identifier:
                keyid:A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139332e302f32342d3234203d3e20313337373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:7f:dd:46:33:9d:f2:03:b3:54:ba:02:bd:55:02:5d:86:29:
         0a:6c:62:01:2a:76:95:86:b9:0c:31:dc:a8:c8:af:ec:93:6b:
         5c:e9:a6:98:91:4c:c6:e9:ea:e0:e1:a7:ee:1a:37:2c:39:55:
         b3:55:f3:37:04:85:c0:cd:8a:ce:93:9c:54:63:53:39:44:82:
         53:34:3a:0f:17:da:8e:a3:3b:85:5b:fd:a4:fe:ae:c6:fd:67:
         f9:a9:00:0f:b4:bf:7a:2c:ce:91:48:9f:dd:0f:c0:a1:0b:30:
         7e:2f:78:c1:65:fe:98:98:c5:8f:3d:be:21:da:2e:f3:3e:3e:
         46:90:cb:6e:64:0f:70:d0:c7:83:f7:c4:c3:0f:7f:1c:50:c4:
         8a:ae:44:ef:48:93:fc:05:46:bd:ac:c5:85:e7:61:22:32:9b:
         b8:90:82:30:39:c4:04:73:0c:f0:3c:12:2d:0c:78:f1:a4:3b:
         3d:ac:2e:d3:70:bd:dd:6a:1e:37:0e:86:b1:79:77:00:8e:b3:
         b9:71:b6:47:e2:f3:89:1a:48:eb:2e:6e:8b:e4:80:ae:4f:c4:
         b0:e1:4d:fe:50:88:8e:97:18:45:ee:42:cc:a5:02:65:c2:36:
         e4:4a:ce:50:67:7e:46:86:25:ab:09:f2:26:bf:75:62:83:35:
         63:f9:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:51 2026 by rpki-client