Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/3130332e3231342e34382e302f32342d3234203d3e2034383337.roa
File:                     3130332e3231342e34382e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          q/GlwgMVJgPz2YueX/zYdDdwd1pwk2ZMLOJoiBEhT3c=
Subject key identifier:   79:B1:A4:EE:47:7F:32:5A:96:B4:38:A7:35:3A:F0:4B:81:B1:DC:87
Certificate issuer:       /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Certificate serial:       54B194586A36AB130CD01FE3BC3662D248558F9E
Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/3130332e3231342e34382e302f32342d3234203d3e2034383337.roa
Signing time:             Wed 27 May 2026 03:29:46 +0000
ROA not before:           Wed 27 May 2026 03:24:46 +0000
ROA not after:            Wed 26 May 2027 03:29:46 +0000
asID:                     4837
IP address blocks:        103.214.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b1:94:58:6a:36:ab:13:0c:d0:1f:e3:bc:36:62:d2:48:55:8f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
        Validity
            Not Before: May 27 03:24:46 2026 GMT
            Not After : May 26 03:29:46 2027 GMT
        Subject: CN=79B1A4EE477F325A96B438A7353AF04B81B1DC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:92:1a:19:0a:59:7e:91:43:2b:6a:0f:76:1d:
                    7f:a5:f7:0f:2c:51:2e:db:f7:3c:4a:25:17:fc:7a:
                    54:ee:fc:6f:f4:b2:7a:c5:24:29:34:8b:6b:e8:c6:
                    ce:7f:c5:51:81:c9:df:a0:6b:ef:57:7e:a2:cc:92:
                    4a:ed:b0:40:ff:92:b7:16:ef:6c:17:67:86:ae:2e:
                    a3:a3:cc:63:0f:40:d6:6d:bb:36:6f:e5:de:ab:34:
                    bb:a6:78:2e:c8:0f:df:4f:61:9f:43:71:23:9b:0c:
                    06:da:64:3a:ba:9c:9b:09:6c:22:21:7d:93:46:36:
                    ff:f4:8f:88:6d:84:d2:95:d3:df:48:7f:0e:34:d4:
                    ea:37:88:0b:d7:dc:49:ff:a0:a0:31:0e:b8:38:98:
                    95:bd:dd:5c:7d:fe:3b:95:92:52:af:44:2d:60:1f:
                    61:ae:f8:95:37:74:12:2d:f0:05:80:e6:cb:c8:5b:
                    1e:a5:d3:5d:67:2d:06:5f:f2:1b:db:bf:6a:2c:2b:
                    ac:26:c2:0a:56:09:c6:90:8d:05:cd:6f:d6:28:49:
                    85:3d:f8:ad:fd:5c:ea:d4:7a:10:ce:b2:72:95:c7:
                    db:d0:7e:e2:58:34:82:32:04:31:d4:a3:6c:88:0b:
                    26:42:ee:79:8f:dc:ba:86:bf:04:10:51:f1:ec:d8:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B1:A4:EE:47:7F:32:5A:96:B4:38:A7:35:3A:F0:4B:81:B1:DC:87
            X509v3 Authority Key Identifier:
                keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/3130332e3231342e34382e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:dc:2e:77:aa:15:23:95:75:3b:db:f0:30:cb:33:54:a3:c9:
         39:ae:b0:e9:47:54:aa:55:2a:55:aa:ac:2f:9b:fe:44:67:82:
         89:7e:f8:dd:bc:73:88:44:1c:7b:90:89:d5:2f:e2:65:81:66:
         89:77:91:7d:ed:04:13:b1:a1:79:15:eb:07:b2:be:75:c4:e3:
         b5:00:e3:63:c0:fa:28:84:45:31:64:86:f5:a9:16:15:53:e5:
         41:96:49:15:0a:93:27:14:9c:45:92:27:45:a1:f0:75:9b:f6:
         a6:ef:f9:1c:8d:57:0e:ec:74:2c:0a:16:0f:03:d1:c3:23:d7:
         93:8a:3c:d6:0e:44:dd:c3:6e:a2:e5:43:eb:a1:4a:68:04:6f:
         1a:ef:92:33:75:b0:c1:43:4c:be:78:66:af:e1:cc:7a:ff:26:
         6f:d7:04:bc:e2:8f:e0:01:80:d8:c1:7a:1e:65:41:50:76:d0:
         2d:98:77:86:eb:4e:68:9f:86:cb:a3:40:27:57:d5:ef:08:b8:
         58:29:80:09:7f:14:32:d8:eb:2c:46:bb:1d:26:21:29:cb:80:
         77:a0:78:9f:b6:7d:80:f8:9b:2a:ac:54:00:5d:d9:02:96:1d:
         e6:02:db:52:8e:d7:1a:a9:49:08:6c:4f:09:1a:ef:93:3f:46:
         92:57:79:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:51 2026 by rpki-client