Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33322e302f32342d3234203d3e2034313334.roa
File:                     3130332e382e33322e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier:          wNOnwlciSCkgqRaqEPPKB6JorJz54eTYd07doS61EyM=
Subject key identifier:   18:42:08:EE:0E:AC:80:51:0B:5D:71:C2:F6:06:5F:FE:07:5A:BD:F5
Certificate issuer:       /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Certificate serial:       2C2CD7D8DA3E521CAF2D26E750646B0B4D04E50B
Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33322e302f32342d3234203d3e2034313334.roa
Signing time:             Fri 29 May 2026 06:36:47 +0000
ROA not before:           Fri 29 May 2026 06:31:47 +0000
ROA not after:            Fri 28 May 2027 06:36:47 +0000
asID:                     4134
IP address blocks:        103.8.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2c:d7:d8:da:3e:52:1c:af:2d:26:e7:50:64:6b:0b:4d:04:e5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
        Validity
            Not Before: May 29 06:31:47 2026 GMT
            Not After : May 28 06:36:47 2027 GMT
        Subject: CN=184208EE0EAC80510B5D71C2F6065FFE075ABDF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2d:98:02:1c:a4:eb:69:b2:47:1f:8c:9b:ff:
                    03:36:02:7f:a6:41:ac:3d:ca:48:2f:42:32:f6:73:
                    d4:90:12:e5:f3:25:a5:51:16:7d:c4:01:e6:79:95:
                    cb:a9:45:34:55:9a:75:a4:4b:4a:a0:16:92:85:d7:
                    44:ff:5a:96:87:49:17:05:a0:62:76:38:0f:74:98:
                    72:ae:cd:85:e4:dd:d1:45:66:ca:79:18:35:bf:70:
                    13:44:92:2f:b5:47:73:7d:51:91:92:ce:79:57:55:
                    3e:da:fc:5e:12:7c:b5:df:52:b2:8b:4b:92:78:ca:
                    11:66:9d:e1:ec:c2:cd:e8:18:6a:fd:08:e1:5d:ff:
                    1c:8b:1c:37:f3:0e:60:fd:5f:15:73:b1:4a:5e:ba:
                    e2:f8:d6:0e:d4:e2:bc:9b:30:48:13:1c:78:eb:9f:
                    6b:20:de:67:25:59:ce:8f:22:35:d8:da:16:62:3b:
                    c1:31:e6:c0:74:3a:a2:3b:50:64:29:9a:3c:19:71:
                    7c:be:4f:de:cb:4d:7c:fa:68:93:e7:35:5e:8c:1b:
                    ce:1b:8c:e7:ca:7e:63:f3:b2:23:9a:44:7f:f9:63:
                    8a:7e:f3:3f:bf:99:97:71:93:52:21:7e:13:64:61:
                    9d:5f:40:24:cd:f8:50:fc:ba:02:83:d0:61:14:5e:
                    8c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:42:08:EE:0E:AC:80:51:0B:5D:71:C2:F6:06:5F:FE:07:5A:BD:F5
            X509v3 Authority Key Identifier:
                keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33322e302f32342d3234203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:58:67:53:aa:74:de:53:1b:1c:ef:40:1a:8d:27:68:95:7b:
         b9:2a:13:3f:76:11:64:78:e9:cb:b9:99:0d:ca:82:62:0b:14:
         43:72:2d:86:f4:3f:c1:1e:09:64:da:15:b8:53:eb:ae:ff:9a:
         90:d8:a2:4e:5b:c6:8a:a4:a2:db:bd:8f:ab:23:56:59:f4:4b:
         35:59:9e:99:84:46:e8:b9:a1:72:d1:ef:3b:02:3d:72:9d:cb:
         01:b6:7d:b2:f3:dc:62:69:b8:43:78:f2:53:66:71:fe:d0:92:
         c0:86:df:75:c6:78:be:65:b7:47:98:ed:32:32:0b:3b:57:0d:
         51:c8:b8:31:8a:8e:de:56:db:ea:fe:fb:5f:ec:1c:66:19:bd:
         16:18:e7:14:c9:b9:39:9c:27:f5:59:23:10:5e:4f:08:03:aa:
         f2:91:82:70:7c:eb:3c:55:e0:d0:00:5c:53:9b:25:7f:31:91:
         29:ea:ab:0e:80:35:ad:5f:5a:f7:cb:9a:a6:dd:58:ae:9f:1c:
         a4:d6:6b:1b:d2:f3:42:72:50:73:53:aa:07:ee:b1:79:4e:da:
         07:8f:36:18:a5:64:12:c5:19:1a:7b:22:80:64:c0:37:0f:91:
         9d:d0:47:fb:15:9f:d7:74:47:01:7a:dd:c9:c8:18:36:8a:8a:
         9e:62:40:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:04 2026 by rpki-client