Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33342e302f32332d3233203d3e2034383337.roa
File:                     3130332e382e33342e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier:          JWCpOL58jnfjNneX9gL3amLDhbCleye0c+pPylUKcKI=
Subject key identifier:   17:A1:55:4F:BD:51:D7:8C:3D:CF:0B:95:78:00:DD:8E:56:1D:F9:06
Certificate issuer:       /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Certificate serial:       56542B970834A05489702A2BBEC62C373D781FE1
Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33342e302f32332d3233203d3e2034383337.roa
Signing time:             Fri 29 May 2026 06:36:47 +0000
ROA not before:           Fri 29 May 2026 06:31:47 +0000
ROA not after:            Fri 28 May 2027 06:36:47 +0000
asID:                     4837
IP address blocks:        103.8.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:54:2b:97:08:34:a0:54:89:70:2a:2b:be:c6:2c:37:3d:78:1f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
        Validity
            Not Before: May 29 06:31:47 2026 GMT
            Not After : May 28 06:36:47 2027 GMT
        Subject: CN=17A1554FBD51D78C3DCF0B957800DD8E561DF906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:03:61:f9:47:e5:c9:3d:c7:87:66:f9:21:
                    a5:f2:8b:1f:88:f7:36:4f:bf:5c:b3:1b:65:c1:38:
                    4a:45:c0:31:c5:ab:39:1c:26:30:b2:43:1e:09:eb:
                    e2:73:0c:11:a6:0c:cd:8f:bf:34:1e:41:35:6b:d0:
                    f5:cd:63:2b:2a:e2:3a:ee:d6:bd:63:b6:78:a9:d4:
                    0c:38:38:fc:54:cd:d3:f3:24:33:61:b2:e5:44:f8:
                    38:c5:7d:2f:d8:06:9d:dd:c9:15:ba:10:2f:9b:0e:
                    27:6c:13:c4:c7:b2:ad:fa:cf:a4:fc:39:4d:16:ad:
                    ed:6e:e2:14:8d:16:ba:70:fc:73:8b:32:64:d0:9a:
                    19:2c:f6:0e:b8:0e:c8:50:f7:16:80:66:5c:ac:5f:
                    a6:06:e5:4f:4b:d6:b7:54:dd:bc:dc:7a:77:db:5c:
                    a7:65:42:f9:aa:d3:5d:a7:c7:de:a6:69:a6:b3:14:
                    3e:90:58:81:97:77:61:c9:95:89:65:2c:04:c8:78:
                    27:7c:01:44:d8:bc:46:99:36:82:69:fd:8a:6c:96:
                    3e:51:dd:73:26:51:fe:8b:cc:a7:2e:59:32:0e:fb:
                    62:bf:57:41:1f:61:d1:c3:32:e0:f9:82:fb:e6:d4:
                    be:bb:97:ae:a5:08:21:fb:3e:01:d7:eb:58:f8:0a:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:55:4F:BD:51:D7:8C:3D:CF:0B:95:78:00:DD:8E:56:1D:F9:06
            X509v3 Authority Key Identifier:
                keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33342e302f32332d3233203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:20:a6:70:92:99:9c:cf:61:49:47:00:e9:d7:39:95:16:e5:
         c6:61:ad:fb:8b:a3:3f:9f:0e:e3:4e:eb:a9:a1:76:c1:8b:aa:
         f2:2e:21:e2:76:08:67:d4:6a:5a:fb:9c:95:96:f2:6c:ac:f0:
         ac:e4:87:0e:c0:ec:23:f8:13:d9:48:d5:bd:a2:ee:11:f4:38:
         f6:78:89:a0:bf:c7:cf:d3:96:c4:b3:be:09:ad:65:39:12:55:
         cb:6e:70:db:35:25:69:ac:5a:42:56:64:0e:bb:d6:94:88:6e:
         83:ed:18:a5:e0:b5:8b:b6:55:82:df:18:6d:10:d3:7a:b0:2d:
         c9:f7:91:07:88:4b:e8:f5:d2:69:bd:84:5b:84:44:07:6b:2a:
         d6:37:fe:30:e6:bf:9c:c1:7b:71:92:99:1a:20:87:c4:75:00:
         65:26:f2:1d:af:c0:de:cc:00:03:33:ed:c6:ed:af:6b:9c:3c:
         1c:b9:81:4c:51:35:12:f1:82:cd:f3:d6:28:50:69:c4:13:d3:
         80:fc:c7:c5:7a:12:df:cb:fd:ec:44:25:b9:b6:09:12:e2:a5:
         01:be:67:85:09:5a:5e:f0:d1:b8:fe:cd:d3:c8:5c:00:32:db:
         35:d6:f6:58:16:40:33:dd:e3:f6:48:fe:6c:2a:49:7b:e3:17:
         4b:0c:ee:74
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUVlQrlwg0oFSJcCorvsYsNz14H+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEy
QUQ4RDNEOTAeFw0yNjA1MjkwNjMxNDdaFw0yNzA1MjgwNjM2NDdaMDMxMTAvBgNV
BAMTKDE3QTE1NTRGQkQ1MUQ3OEMzRENGMEI5NTc4MDBERDhFNTYxREY5MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdwNh+UflyT3Hh2b5IaXyix+I
9zZPv1yzG2XBOEpFwDHFqzkcJjCyQx4J6+JzDBGmDM2PvzQeQTVr0PXNYysq4jru
1r1jtnip1Aw4OPxUzdPzJDNhsuVE+DjFfS/YBp3dyRW6EC+bDidsE8THsq36z6T8
OU0Wre1u4hSNFrpw/HOLMmTQmhks9g64DshQ9xaAZlysX6YG5U9L1rdU3bzcenfb
XKdlQvmq012nx96maaazFD6QWIGXd2HJlYllLATIeCd8AUTYvEaZNoJp/Ypslj5R
3XMmUf6LzKcuWTIO+2K/V0EfYdHDMuD5gvvm1L67l66lCCH7PgHX61j4CkynAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUF6FVT71R14w9zwuVeADdjlYd+QYwHwYDVR0j
BBgwFoAUWoEBc6RyF+u2DJ/ZXIM7ASrY09kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjYyNDE3NzgzNzI0NDQzNS8wLzVBODEwMTczQTQ3MjE3RUJCNjBDOUZEOTVDODMz
QjAxMkFEOEQzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEyQUQ4RDNEOS5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNjI0MTc3ODM3MjQ0NDM1LzAvMzEzMDMzMmUzODJl
MzMzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
ZwgiMA0GCSqGSIb3DQEBCwUAA4IBAQBlIKZwkpmcz2FJRwDp1zmVFuXGYa37i6M/
nw7jTuupoXbBi6ryLiHidghn1Gpa+5yVlvJsrPCs5IcOwOwj+BPZSNW9ou4R9Dj2
eImgv8fP05bEs74JrWU5ElXLbnDbNSVprFpCVmQOu9aUiG6D7Ril4LWLtlWC3xht
ENN6sC3J95EHiEvo9dJpvYRbhEQHayrWN/4w5r+cwXtxkpkaIIfEdQBlJvIdr8De
zAADM+3G7a9rnDwcuYFMUTUS8YLN89YoUGnEE9OA/MfFehLfy/3sRCW5tgkS4qUB
vmeFCVpe8NG4/s3TyFwAMts11vZYFkAz3eP2SP5sKkl74xdLDO50
-----END CERTIFICATE-----
Generated at Fri May 29 23:49:59 2026 by rpki-client