Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/3130332e3231342e35302e302f32342d3234203d3e2034383337.roa
File:                     3130332e3231342e35302e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          QO8gfo6WmKKlnAdCSBncVA0jNKjPGbdc+9tghke8cWs=
Subject key identifier:   CD:52:B9:C3:A9:DF:34:CF:6B:1D:4E:77:9E:B5:A5:CD:E4:48:0A:ED
Certificate issuer:       /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
Certificate serial:       134BD15E290B5FF7AAF7102BD00AD99190148055
Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/3130332e3231342e35302e302f32342d3234203d3e2034383337.roa
Signing time:             Wed 27 May 2026 03:29:46 +0000
ROA not before:           Wed 27 May 2026 03:24:46 +0000
ROA not after:            Wed 26 May 2027 03:29:46 +0000
asID:                     4837
IP address blocks:        103.214.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4b:d1:5e:29:0b:5f:f7:aa:f7:10:2b:d0:0a:d9:91:90:14:80:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C
        Validity
            Not Before: May 27 03:24:46 2026 GMT
            Not After : May 26 03:29:46 2027 GMT
        Subject: CN=CD52B9C3A9DF34CF6B1D4E779EB5A5CDE4480AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:bf:ac:27:f5:18:93:f3:62:d3:d5:41:c5:
                    1b:74:71:6a:82:8f:14:5b:22:15:f1:c2:2a:5b:35:
                    92:b6:a9:e6:30:c6:78:ae:41:ee:9e:13:03:f8:07:
                    97:f9:5f:e1:36:0a:d8:ee:31:ca:34:e0:f7:cc:82:
                    54:5c:93:b2:ee:97:0a:d3:eb:37:53:3c:bb:01:c7:
                    87:2b:e1:e3:fb:c9:9b:70:24:fe:6f:76:b5:14:4e:
                    91:48:af:12:18:81:a8:28:f9:e1:aa:21:a4:4c:32:
                    59:d9:a8:ef:a9:81:38:96:6f:e2:16:a6:b9:af:67:
                    7d:e6:c8:de:4a:9f:9e:9f:23:ff:4e:41:7d:a8:80:
                    af:2a:83:e7:8f:54:c7:7d:28:d4:82:2d:11:7f:01:
                    b8:8c:25:3c:35:0f:d4:42:16:d6:97:96:36:60:f9:
                    ae:06:5c:79:67:6e:e9:7d:97:84:97:ad:47:fc:0f:
                    5a:d7:6d:c2:38:56:f0:d9:63:2b:72:2b:c8:60:dc:
                    ff:d9:28:64:26:d9:a1:ed:6f:e4:ea:e5:82:fc:8a:
                    59:3a:ff:6b:d0:3f:85:7f:79:8c:3a:fb:ba:7f:9b:
                    de:7f:01:bf:7b:e9:64:4b:61:68:66:9a:cd:cf:72:
                    65:25:98:d1:f3:58:5b:ec:de:f6:cd:ee:5a:dd:2e:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:52:B9:C3:A9:DF:34:CF:6B:1D:4E:77:9E:B5:A5:CD:E4:48:0A:ED
            X509v3 Authority Key Identifier:
                keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/3130332e3231342e35302e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1f:40:bd:66:6c:5d:a3:65:19:20:2c:3e:02:94:76:e1:67:
         d4:ba:92:1f:b2:bd:35:d1:94:8d:61:3d:b6:f3:08:fd:95:4e:
         43:2f:11:9f:3a:9f:a9:3d:8e:02:56:87:01:8c:97:92:23:4c:
         90:49:f2:58:d1:36:f1:1b:90:48:ea:5c:0d:bc:b3:8b:35:f0:
         55:1f:7d:c1:24:a0:cb:f8:82:99:a0:12:1b:31:88:45:54:2e:
         fb:e8:ba:c9:13:d7:d4:4a:a0:80:21:6d:cf:f5:ef:4d:46:ae:
         46:df:fc:9e:96:7e:48:8a:d6:a7:6c:64:e3:dc:a7:b9:59:44:
         18:7b:f3:44:24:dc:40:ec:b7:b5:0b:e4:9d:85:f0:b4:5c:0e:
         c2:42:80:b2:9e:15:48:64:5d:f5:2a:ae:7b:92:bd:a5:ee:c8:
         22:73:69:b9:4c:67:08:50:59:2e:76:b1:98:80:eb:ea:11:46:
         2d:e5:07:84:58:92:a0:e4:9c:a5:21:8d:c4:ad:81:c9:0f:12:
         c4:62:3d:6e:99:39:7e:cb:09:0c:9c:ab:42:36:66:ea:74:f7:
         73:af:f3:f9:d7:1d:2b:e6:a5:f6:ca:8e:50:c0:0e:ea:64:00:
         c7:48:94:ae:93:27:93:ad:9d:2d:a7:94:91:cc:ef:a0:0f:0a:
         03:9c:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:50:35 2026 by rpki-client