Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112627356737994771/0/3130332e32392e3133362e302f32322d3232203d3e2039383131.roa
File:                     3130332e32392e3133362e302f32322d3232203d3e2039383131.roa (raw, json)
Hash identifier:          iRA0s/XmzU+VmBoZkSZ6KmBEKWjx51i6Q0naBLDny9U=
Subject key identifier:   E8:2E:91:DB:E9:D1:B8:89:4C:AC:E3:3F:FC:09:A6:5D:5F:18:C2:69
Certificate issuer:       /CN=8C1BF16D482831971E03C6723A58EC7298BAC527
Certificate serial:       11EFECC5CEE4920E5646DE3F6A5DBFF4669822A2
Authority key identifier: 8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/3130332e32392e3133362e302f32322d3232203d3e2039383131.roa
Signing time:             Fri 29 May 2026 06:27:20 +0000
ROA not before:           Fri 29 May 2026 06:22:20 +0000
ROA not after:            Fri 28 May 2027 06:27:20 +0000
asID:                     9811
IP address blocks:        103.29.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ef:ec:c5:ce:e4:92:0e:56:46:de:3f:6a:5d:bf:f4:66:98:22:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C1BF16D482831971E03C6723A58EC7298BAC527
        Validity
            Not Before: May 29 06:22:20 2026 GMT
            Not After : May 28 06:27:20 2027 GMT
        Subject: CN=E82E91DBE9D1B8894CACE33FFC09A65D5F18C269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:dc:94:8f:6c:63:a3:3e:06:92:a4:ec:5e:
                    b0:92:8e:d7:ed:fe:41:01:c3:34:f7:e3:96:a0:e6:
                    51:31:d6:b9:bf:e1:bb:5f:f1:65:95:e3:59:17:0d:
                    27:b4:56:6f:df:43:d3:c3:af:d6:50:b9:55:cc:ff:
                    92:22:4b:88:fb:43:72:eb:07:b8:c3:b7:84:96:df:
                    ee:30:9f:41:f1:14:37:6b:13:be:56:93:71:1f:14:
                    34:c3:a1:d6:95:e3:4e:77:3f:88:ad:40:25:31:95:
                    29:6a:97:71:49:56:0b:5a:38:94:f4:59:e2:5a:dc:
                    a2:c1:3f:ce:be:58:d5:c2:b0:4c:7d:e4:e2:8d:22:
                    7a:ba:c1:43:c1:16:46:a9:74:09:21:01:a0:fe:4f:
                    e9:d9:cb:be:88:50:20:09:4b:ba:55:79:01:5e:7f:
                    ae:d6:77:ef:ba:de:08:ba:3a:48:8b:d6:37:a2:60:
                    e6:46:eb:e7:eb:e6:83:4b:b6:09:36:12:6c:ed:af:
                    c8:8f:6f:ad:c9:3f:69:cc:ce:d5:5f:d8:2d:4e:55:
                    77:f2:3f:56:47:d2:d1:a9:17:23:78:de:67:51:e8:
                    8a:4f:5e:81:34:d4:39:09:ca:dd:2a:80:76:92:3c:
                    5f:ab:52:e8:7b:86:c3:43:4b:2f:78:08:13:f2:0a:
                    ec:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2E:91:DB:E9:D1:B8:89:4C:AC:E3:3F:FC:09:A6:5D:5F:18:C2:69
            X509v3 Authority Key Identifier:
                keyid:8C:1B:F1:6D:48:28:31:97:1E:03:C6:72:3A:58:EC:72:98:BA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/8C1BF16D482831971E03C6723A58EC7298BAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C1BF16D482831971E03C6723A58EC7298BAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112627356737994771/0/3130332e32392e3133362e302f32322d3232203d3e2039383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:ec:9e:a6:3b:ca:76:5b:53:67:39:3e:17:c8:da:0f:22:47:
         eb:86:55:39:ab:00:c2:89:35:e0:2e:87:d2:d5:03:19:03:99:
         d6:00:43:fd:e4:fb:93:a7:44:79:e6:1f:fb:24:64:09:cc:ae:
         c3:48:ea:09:72:27:b9:89:f7:b5:79:42:92:08:8d:09:7b:32:
         4e:1a:3f:3c:03:32:8f:35:97:9b:43:52:60:75:7f:c5:cf:1a:
         4d:18:4b:88:68:e7:74:30:16:b3:86:e6:94:e0:8c:4a:e7:9f:
         08:a7:2d:f3:f9:7b:6c:55:7f:ca:5e:b1:d7:18:e0:2c:fb:48:
         a9:b1:b2:69:b4:fa:7c:77:97:f7:e3:4e:e9:94:7f:7e:b0:fc:
         3d:35:c1:6a:9e:5a:c7:5e:14:7d:15:f9:ec:a0:bb:1b:91:93:
         77:4f:80:07:10:86:dd:10:17:85:76:c1:e0:02:6d:5a:1b:09:
         37:d4:f2:7e:17:8a:ec:4b:72:20:2b:42:db:fd:c1:13:19:39:
         15:00:fe:05:0e:df:1d:ab:87:c3:c9:08:50:be:24:ef:e9:5b:
         6a:56:00:23:94:3d:7f:23:e7:ff:6a:ad:51:12:ca:ba:2f:51:
         b4:a7:e1:9e:56:c8:07:5c:30:db:70:33:9e:a8:d7:16:45:27:
         f5:77:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:19 2026 by rpki-client