Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111918323395788817/0/3130332e34362e36392e302f32342d3234203d3e203539303337.roa
File:                     3130332e34362e36392e302f32342d3234203d3e203539303337.roa (raw, json)
Hash identifier:          bc0uSG3fFcbMIoD1WQvItKBrp6Lcjsy+K1KI8zMcuo0=
Subject key identifier:   6F:E8:77:AA:7E:6D:38:A0:CD:FD:E0:53:66:56:A0:9C:B1:F7:E2:7C
Certificate issuer:       /CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D
Certificate serial:       4D3FEECDDAE1221BC58631DB5AE603ACC2D77F33
Authority key identifier: B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/3130332e34362e36392e302f32342d3234203d3e203539303337.roa
Signing time:             Wed 27 May 2026 07:43:48 +0000
ROA not before:           Wed 27 May 2026 07:38:48 +0000
ROA not after:            Wed 26 May 2027 07:43:48 +0000
asID:                     59037
IP address blocks:        103.46.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3f:ee:cd:da:e1:22:1b:c5:86:31:db:5a:e6:03:ac:c2:d7:7f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D
        Validity
            Not Before: May 27 07:38:48 2026 GMT
            Not After : May 26 07:43:48 2027 GMT
        Subject: CN=6FE877AA7E6D38A0CDFDE0536656A09CB1F7E27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cd:35:1d:1a:8a:17:1a:41:a9:4c:46:e2:e8:
                    88:8b:43:5e:d4:d2:16:78:eb:a6:ba:01:fe:2c:4e:
                    da:95:7e:0f:85:0a:5d:8e:68:9e:95:7d:cc:49:27:
                    32:5a:97:29:8f:24:2e:61:7c:73:32:54:0c:65:21:
                    f6:e7:73:6d:a1:20:75:0e:2a:b0:d6:09:91:57:de:
                    b7:1e:94:c2:08:f7:a9:cc:e6:17:38:9f:68:6f:98:
                    5c:4f:91:c7:1e:09:77:6d:0c:2a:ff:79:15:bd:3c:
                    87:fb:c7:54:f4:4a:71:ac:c9:25:45:26:97:c0:80:
                    09:79:43:82:2c:b4:98:07:08:2d:de:fb:d0:6e:52:
                    80:09:4b:2b:50:ea:28:a4:e1:1e:6b:4a:48:c7:a1:
                    48:ef:f6:b6:45:49:59:60:28:aa:7e:78:8a:e6:ef:
                    49:8b:58:5e:13:31:eb:36:ed:ca:4d:49:5f:01:36:
                    45:8e:2f:3a:f3:23:27:ab:37:c1:80:84:da:e9:f9:
                    8b:cf:f9:f6:40:5f:af:3a:34:ac:d1:35:b9:cf:60:
                    89:a6:b2:b2:3d:d8:40:08:b1:2c:c9:46:96:16:c5:
                    c4:40:00:f2:ab:e1:c7:c6:7b:52:38:0e:1b:9b:b1:
                    08:57:11:0c:94:09:8d:a5:5e:46:8f:8a:19:5f:e0:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E8:77:AA:7E:6D:38:A0:CD:FD:E0:53:66:56:A0:9C:B1:F7:E2:7C
            X509v3 Authority Key Identifier:
                keyid:B8:CC:D8:B5:71:FE:C8:C5:EA:12:5D:5B:35:C2:2C:C1:FC:6F:77:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8CCD8B571FEC8C5EA125D5B35C22CC1FC6F770D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111918323395788817/0/3130332e34362e36392e302f32342d3234203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:40:a1:0e:b2:80:04:2e:cb:74:07:c6:49:9b:c1:8f:92:df:
         21:e3:b6:68:85:cb:4a:71:b7:9f:f9:87:64:ce:ed:e6:3f:b6:
         82:91:39:c4:bd:23:82:ed:d2:bf:d2:27:df:5b:85:27:0b:5b:
         b7:59:7d:76:78:7d:3e:05:52:46:6f:a5:22:f8:ff:0b:c5:fd:
         62:c0:aa:3d:85:ec:1e:8d:43:0f:62:04:a8:a7:34:4c:b7:4d:
         1e:f8:5a:38:17:9c:d4:ca:43:93:a9:b3:6c:5b:df:2d:89:3b:
         36:91:27:1a:1c:6c:ac:63:78:e8:c5:0c:6d:dd:66:45:16:69:
         f8:16:35:c4:f0:4f:c5:ab:ac:a5:18:17:50:e9:b9:4c:40:0e:
         1a:69:41:8b:68:c9:18:62:e7:49:56:4c:09:aa:25:42:05:8c:
         2e:81:15:b0:4f:9e:22:fe:44:52:f0:ca:52:48:79:d3:5e:a5:
         2d:9c:5a:2c:53:a4:c3:ba:7e:24:f7:b4:52:a4:97:bd:3d:f1:
         fc:ab:81:3c:1a:9c:2f:e7:e6:4a:ee:10:ee:e3:79:8c:18:4a:
         95:a1:98:23:5f:5f:b1:2c:a1:c4:d0:18:33:77:65:c3:9c:54:
         de:36:54:1d:b6:87:c9:db:38:d4:de:79:b4:6c:ec:5b:89:f4:
         26:13:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:08 2026 by rpki-client