Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa
File:                     3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa (raw, json)
Hash identifier:          f5TeL2PmYZzcfkLz1OIr3FDUXdxfbFHFxYiszVWK0Yk=
Subject key identifier:   8C:98:9F:B4:18:D6:95:B5:94:C4:59:D0:81:6F:E8:0F:B7:29:DF:DE
Certificate issuer:       /CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7
Certificate serial:       07128544675469969B4E3AEB59496D75A98DAB52
Authority key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa
Signing time:             Tue 26 May 2026 10:20:45 +0000
ROA not before:           Tue 26 May 2026 10:15:45 +0000
ROA not after:            Tue 25 May 2027 10:20:45 +0000
asID:                     137746
IP address blocks:        103.135.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:12:85:44:67:54:69:96:9b:4e:3a:eb:59:49:6d:75:a9:8d:ab:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7
        Validity
            Not Before: May 26 10:15:45 2026 GMT
            Not After : May 25 10:20:45 2027 GMT
        Subject: CN=8C989FB418D695B594C459D0816FE80FB729DFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:78:04:89:5b:c7:a6:58:ee:55:92:e7:04:
                    e3:57:68:49:f7:e0:18:06:9d:e6:3a:b8:93:c2:82:
                    cb:7d:d1:34:f3:10:92:b5:62:c5:f6:fd:b4:26:ee:
                    cf:e4:42:7f:25:46:8c:bd:79:4b:c5:fb:af:bd:56:
                    bb:3a:44:4d:5a:63:76:a2:fb:67:0f:33:0b:61:27:
                    30:c6:7f:66:af:41:e8:bc:e2:ac:8f:9a:eb:cb:73:
                    43:d9:f9:8f:6d:f3:41:1e:8b:da:bc:e2:db:1f:de:
                    94:07:0a:a6:39:b3:47:d4:1d:94:62:47:02:7d:b7:
                    93:d1:b8:a8:4b:78:3d:10:04:8f:18:79:4a:c0:c4:
                    f4:56:be:70:00:8d:25:85:78:60:5e:12:ad:28:5b:
                    bd:ad:85:54:8f:61:f4:ce:df:14:7f:d2:9c:4e:b0:
                    3d:7b:13:b3:0c:96:c6:d7:0f:59:91:09:86:fd:a9:
                    72:d3:09:33:6d:97:0b:df:14:c7:e3:00:28:e1:e1:
                    34:2d:b8:50:de:63:6b:71:06:f3:43:fd:69:b1:51:
                    41:2b:40:82:67:cb:50:25:22:13:a2:d2:12:cd:db:
                    10:a7:85:c4:5a:b2:d8:eb:38:7f:a1:8e:83:d1:4d:
                    46:68:d1:a2:18:7b:f7:9e:bf:36:0c:a3:a9:13:99:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:98:9F:B4:18:D6:95:B5:94:C4:59:D0:81:6F:E8:0F:B7:29:DF:DE
            X509v3 Authority Key Identifier:
                keyid:A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:1e:0e:16:02:29:d9:b8:d2:f0:d6:c8:ef:5f:98:af:e2:dc:
         9a:54:f7:59:1b:c7:fd:60:88:21:83:d5:4d:23:da:65:55:bb:
         29:83:d2:b1:38:98:ab:d0:a5:73:32:76:68:58:12:6f:24:f8:
         23:a4:e5:6c:04:b6:e8:fc:b9:93:fc:b8:52:20:00:43:d4:d7:
         3d:be:b2:28:06:38:24:73:af:b8:1f:01:01:95:23:de:8e:8a:
         51:4e:9e:d6:f2:b0:d3:8a:85:68:08:87:4a:16:44:c0:29:c0:
         7d:d7:15:87:de:8a:01:00:0f:f1:37:56:01:1c:fa:8c:91:ec:
         1c:f0:f8:f8:a3:bf:db:a9:3a:fc:ee:5f:ca:57:c6:6d:d3:05:
         16:c0:31:0a:bc:7a:5d:dd:ee:9b:1d:be:ec:e9:e0:7d:05:ba:
         71:43:91:ba:0d:a7:96:0a:84:e0:f1:f8:7c:be:3a:78:d7:5a:
         cb:21:44:99:a9:f7:0e:82:7e:6c:c9:54:49:ac:31:b3:19:ab:
         ec:b1:c1:7e:15:0e:74:f8:8d:dc:cb:6b:b1:38:f1:21:65:11:
         a0:35:e4:54:39:54:99:0a:75:04:64:18:2e:b4:00:a1:fb:67:
         3c:84:c6:58:66:ad:61:c9:e2:8f:bf:d4:fd:69:3c:d7:80:f7:
         d6:aa:28:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:55 2026 by rpki-client