Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/3130332e3233352e35362e302f32322d3232203d3e2030.roa
File:                     3130332e3233352e35362e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=
Subject key identifier:   39:1A:DE:13:D5:71:6F:DF:32:C6:1A:56:56:89:CB:5D:C4:56:8F:C8
Certificate issuer:       /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1
Certificate serial:       46A4093000B3B66E8A75E3AC380F547001D6E5A2
Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/3130332e3233352e35362e302f32322d3232203d3e2030.roa
Signing time:             Thu 28 May 2026 07:57:00 +0000
ROA not before:           Thu 28 May 2026 07:52:00 +0000
ROA not after:            Thu 27 May 2027 07:57:00 +0000
asID:                     0
IP address blocks:        103.235.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 05:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a4:09:30:00:b3:b6:6e:8a:75:e3:ac:38:0f:54:70:01:d6:e5:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1
        Validity
            Not Before: May 28 07:52:00 2026 GMT
            Not After : May 27 07:57:00 2027 GMT
        Subject: CN=391ADE13D5716FDF32C61A565689CB5DC4568FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:ed:a6:f3:c3:42:b5:25:a2:35:24:b8:0a:
                    70:14:de:17:1b:f3:1a:96:db:0a:06:71:5f:e1:d4:
                    7b:e4:f3:7d:ff:4c:67:e4:c7:d3:72:17:03:54:d3:
                    f2:6d:c7:57:b3:ac:43:15:98:15:72:49:1c:61:fa:
                    0e:d7:aa:e8:7e:df:fc:65:68:1a:5d:42:5d:94:37:
                    f3:37:e0:fa:da:14:fd:02:40:29:b3:07:b6:b7:d4:
                    d4:00:42:04:e6:e1:00:dd:26:e6:ce:25:ed:0f:09:
                    e8:d2:82:ab:98:93:28:2b:ea:fa:f1:fa:bc:07:b7:
                    56:25:71:ce:e0:10:be:be:8b:26:97:ea:d1:94:ac:
                    44:d9:6f:fb:f7:10:c4:53:fc:79:d5:3d:54:4e:62:
                    45:69:b2:cc:48:77:d2:e5:c9:53:70:70:54:bd:cf:
                    6a:bb:9a:06:e1:55:10:6d:0e:7d:3a:3c:80:d1:aa:
                    80:77:bd:18:d9:6c:33:04:b7:4c:66:01:1a:85:6e:
                    79:c1:49:6e:f1:a9:30:77:17:65:c1:77:e4:04:d5:
                    7f:a2:88:e1:66:10:49:bf:8b:37:f6:ab:35:5c:b9:
                    f8:a5:97:61:f7:c4:5c:43:e3:8b:8c:51:d4:95:36:
                    0f:a9:ad:06:b4:92:c6:03:31:6d:90:dd:56:36:69:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1A:DE:13:D5:71:6F:DF:32:C6:1A:56:56:89:CB:5D:C4:56:8F:C8
            X509v3 Authority Key Identifier:
                keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/3130332e3233352e35362e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:79:3c:6f:87:63:8a:d1:98:4e:28:6e:cf:7c:72:b2:71:17:
         57:6a:ec:5b:5c:d8:62:c0:be:37:f6:d1:3e:d7:b9:61:dd:be:
         53:3a:c5:26:ce:53:29:15:28:0a:64:d7:fb:c9:a8:51:b6:8e:
         85:b5:ac:2f:3a:63:99:40:04:fc:ad:d1:fe:0c:3f:64:8c:52:
         bb:fc:9b:9f:af:05:72:84:bf:2b:44:df:40:a6:b2:1a:29:b9:
         69:96:58:2b:91:67:40:40:57:1c:dd:4e:00:5b:94:dd:06:c4:
         10:b2:4a:14:cf:20:64:5b:72:80:cd:8d:29:f3:d9:87:81:62:
         f0:6b:6f:dc:19:b6:da:22:eb:1c:3c:18:27:9c:a7:1a:89:30:
         c1:3f:6c:c8:98:26:c5:49:b5:5d:9d:c3:79:18:19:37:a0:54:
         d8:36:c5:fb:b2:1a:e4:8a:4d:61:5b:98:20:0b:51:74:f4:a2:
         59:d8:76:55:3c:56:c0:53:90:43:0f:0f:5b:5f:7b:e1:c2:2f:
         60:c2:14:c0:7f:41:82:f0:45:77:c5:8d:38:96:d6:f1:f6:20:
         31:21:49:36:f9:4b:c5:d4:80:07:0e:d5:fe:38:d9:5c:fc:e5:
         e7:68:01:44:b9:aa:60:0e:ba:5a:5e:66:ae:60:7f:9c:37:89:
         94:f0:c4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:53 2026 by rpki-client