Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33342e302f32342d3234203d3e20313430373236.roa
File:                     3130332e382e33342e302f32342d3234203d3e20313430373236.roa (raw, json)
Hash identifier:          JCGd1C1Wf1E9+GLgPxZv3lXwNa0mqdnQIY/nBaByWFc=
Subject key identifier:   24:5E:68:9E:6D:33:89:20:79:17:6B:C6:97:21:18:B8:18:77:53:C7
Certificate issuer:       /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Certificate serial:       52E807B22F7FA5B0271EED8D3787CDA7C56C5B28
Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33342e302f32342d3234203d3e20313430373236.roa
Signing time:             Fri 29 May 2026 06:36:46 +0000
ROA not before:           Fri 29 May 2026 06:31:46 +0000
ROA not after:            Fri 28 May 2027 06:36:46 +0000
asID:                     140726
IP address blocks:        103.8.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e8:07:b2:2f:7f:a5:b0:27:1e:ed:8d:37:87:cd:a7:c5:6c:5b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
        Validity
            Not Before: May 29 06:31:46 2026 GMT
            Not After : May 28 06:36:46 2027 GMT
        Subject: CN=245E689E6D33892079176BC6972118B8187753C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:cc:cf:54:3b:ac:7c:3d:a6:91:c4:fb:60:
                    13:8d:89:e3:14:51:c4:61:62:10:de:8d:b0:40:4c:
                    9b:77:ab:a5:b2:b1:49:0b:bf:9c:c0:72:90:9b:b0:
                    c6:46:cb:a0:cd:66:87:3e:d0:83:eb:c4:78:44:a5:
                    71:f5:a7:f4:e0:a8:27:f7:36:1a:a3:6d:ff:2f:7f:
                    de:b4:0d:21:2d:cb:45:a3:58:5e:6b:67:f3:72:02:
                    48:3b:b6:df:0d:36:54:93:b9:ae:08:ec:66:d1:31:
                    0e:14:74:64:26:4f:28:b4:10:88:dd:f3:30:c3:92:
                    88:83:53:cf:34:89:d2:4a:3e:42:e6:db:e8:d8:39:
                    93:f5:68:29:0b:6e:7c:b3:6f:29:a0:dc:b5:a7:82:
                    da:2d:73:8e:ce:1b:ad:94:8f:9a:c8:b7:c3:f3:f0:
                    47:ef:73:c9:f5:f5:2c:da:fa:bf:57:ee:93:ab:46:
                    ab:a7:97:d5:65:50:6b:b4:e9:4b:5e:50:24:c0:a9:
                    53:30:59:f7:df:a3:c3:9d:49:6f:2b:f4:7d:43:f1:
                    77:a6:16:2f:2d:a6:a8:93:12:7d:4d:d3:3b:b3:11:
                    ae:23:2d:a6:f9:78:66:4f:b4:52:8d:89:e3:60:97:
                    29:7b:83:4d:f9:fe:ef:ba:8c:f0:8e:5e:3d:54:47:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5E:68:9E:6D:33:89:20:79:17:6B:C6:97:21:18:B8:18:77:53:C7
            X509v3 Authority Key Identifier:
                keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33342e302f32342d3234203d3e20313430373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:00:95:ca:13:1c:92:42:34:f3:46:ed:94:f4:cb:e2:39:99:
         e5:26:1c:7d:03:f4:b2:03:f9:60:05:a5:1f:d6:fa:2a:b0:30:
         aa:ab:9d:6b:3b:38:ed:d8:4b:28:54:fb:3d:0e:f4:05:21:86:
         ab:1c:24:77:0a:f4:68:1e:61:a2:2f:84:6f:55:4b:c0:be:f5:
         bd:48:45:1e:d8:b7:94:1f:5f:42:50:92:a6:66:59:23:c5:ee:
         50:60:2a:f8:74:d5:f3:eb:33:2d:ae:41:76:1c:c5:e5:6c:99:
         53:9e:2c:fc:5c:d0:5a:8b:31:11:74:6c:68:e9:c8:ec:51:fd:
         15:39:5c:65:6f:b2:29:f8:56:66:7a:7f:e1:fc:9d:40:2d:68:
         a3:3b:ee:64:a3:39:31:2c:84:e7:85:17:7b:9a:ae:dd:ab:ab:
         f2:bf:56:25:03:f5:13:7b:20:58:a0:e9:be:30:29:42:67:f5:
         3a:73:73:ce:48:2b:13:13:d1:f0:60:0a:93:d1:84:67:7f:84:
         84:c4:57:04:15:90:82:06:63:d3:1b:6e:07:a9:18:80:b7:b5:
         c4:1b:79:03:2e:82:6d:3f:e7:74:7a:dc:04:76:88:d9:34:4b:
         4c:49:c0:13:76:b4:cc:eb:12:ea:cf:86:d2:de:9a:45:cf:88:
         1a:e9:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:10 2026 by rpki-client