Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33352e302f32342d3234203d3e2034383337.roa
File:                     3130332e382e33352e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          GF8R9y/TBmc5cxAi05epTBCcdlrps0l6xAqDYhmKV9Q=
Subject key identifier:   A2:11:C7:AC:0A:28:7A:23:F4:4F:73:95:52:E6:40:F6:E0:AF:1F:E1
Certificate issuer:       /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
Certificate serial:       3AAE71C769633E5C6E257AD652B11943B35AB695
Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33352e302f32342d3234203d3e2034383337.roa
Signing time:             Fri 29 May 2026 06:36:47 +0000
ROA not before:           Fri 29 May 2026 06:31:47 +0000
ROA not after:            Fri 28 May 2027 06:36:47 +0000
asID:                     4837
IP address blocks:        103.8.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 09:06:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ae:71:c7:69:63:3e:5c:6e:25:7a:d6:52:b1:19:43:b3:5a:b6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9
        Validity
            Not Before: May 29 06:31:47 2026 GMT
            Not After : May 28 06:36:47 2027 GMT
        Subject: CN=A211C7AC0A287A23F44F739552E640F6E0AF1FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c2:6f:2a:b3:3f:9a:26:df:4c:d9:c3:f7:7e:
                    30:23:9a:09:a2:7c:36:c7:b0:d6:cf:16:4f:6e:90:
                    de:73:42:76:dd:bf:75:c0:43:39:44:65:08:6e:74:
                    b8:ae:8c:75:6c:dc:51:5e:cc:84:7c:06:a3:b9:4f:
                    dc:09:a4:5d:c1:d8:13:7e:ff:ab:45:2c:94:ff:f5:
                    f6:f1:6a:e2:61:a1:8a:35:e4:9e:4a:71:7d:be:3f:
                    46:07:0f:5c:ba:4e:62:f0:ad:58:a4:99:6a:e8:c0:
                    17:0a:a9:94:7b:17:93:a4:52:ec:47:ca:d3:e5:1b:
                    c1:61:36:57:1e:f4:ce:ff:fd:3f:36:01:8c:d1:67:
                    3d:61:07:8f:ed:00:cb:c4:16:b9:48:ab:98:e5:73:
                    3d:2a:8a:b5:6c:d9:7f:08:81:49:88:ab:90:e5:36:
                    9a:cc:1a:9e:2e:cc:15:a7:a2:5d:a8:11:bf:31:9e:
                    60:8f:44:f6:4e:33:a5:a5:c3:b7:92:de:2a:c9:00:
                    11:a7:29:b4:3b:3e:06:b1:31:9c:e5:80:49:1f:ac:
                    0d:78:34:5e:87:00:27:69:fb:b6:98:5b:2c:df:da:
                    60:10:85:bf:d0:7b:a1:e9:d9:af:6f:99:4a:85:de:
                    44:f8:7e:cf:9c:3a:ac:84:e1:bd:55:0d:4b:7a:cc:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:11:C7:AC:0A:28:7A:23:F4:4F:73:95:52:E6:40:F6:E0:AF:1F:E1
            X509v3 Authority Key Identifier:
                keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/3130332e382e33352e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:46:a2:c0:7f:59:83:f8:e6:ca:a0:45:9e:5e:a9:0f:b7:0f:
         4c:60:61:14:d2:72:a4:f5:a6:fb:99:73:d9:58:7f:dd:cc:1c:
         c6:e7:e4:a1:a9:43:c3:0b:45:52:6a:8d:11:c7:88:0c:9f:ec:
         e5:51:c3:dd:53:cf:dc:29:36:ba:03:04:a3:39:1d:73:3c:92:
         cd:b5:ca:2e:94:87:23:9c:ee:1f:66:43:ff:6c:51:1e:58:e5:
         77:16:66:bd:9f:de:8b:ff:cb:6b:42:a8:48:2f:98:1c:e7:b0:
         c2:a3:e3:12:72:ba:29:59:5b:b2:1f:9c:97:b2:2f:f3:3c:69:
         a7:aa:58:5a:a9:ab:fd:f6:0c:c5:dc:35:3e:12:a8:00:bf:f7:
         4f:35:44:53:9c:08:97:a3:bd:7d:78:af:27:e4:de:24:37:96:
         92:e6:60:05:bb:ab:46:a3:62:8f:92:f6:3a:3f:55:3a:6f:4a:
         9a:fb:8e:31:3a:39:cb:81:e5:8b:40:2e:bb:79:c5:9a:53:ce:
         a4:40:66:15:a9:30:7f:09:b7:3c:9b:61:8f:39:5e:cd:c6:1a:
         f4:ff:81:1c:fe:ab:cb:fa:ac:7c:76:6a:e8:db:99:cf:6b:3e:
         5a:0b:17:36:67:e7:89:ec:f2:97:c1:95:94:09:70:28:46:b6:
         bf:88:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:34 2026 by rpki-client