Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa
File:                     3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa (raw, json)
Hash identifier:          A+X12ByBnMNbYJRrUln06JHqkJEv5VrpyvFetym2zKg=
Subject key identifier:   BB:B9:92:89:5D:90:3A:8F:F1:08:1F:C8:7B:CE:53:97:95:68:29:22
Certificate issuer:       /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial:       7E9AB0C7F5F4DF53C73FFD76D9F79C23E4648E7E
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa
Signing time:             Fri 29 May 2026 10:05:07 +0000
ROA not before:           Fri 29 May 2026 10:00:07 +0000
ROA not after:            Fri 28 May 2027 10:05:07 +0000
asID:                     63621
IP address blocks:        103.222.186.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:9a:b0:c7:f5:f4:df:53:c7:3f:fd:76:d9:f7:9c:23:e4:64:8e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
        Validity
            Not Before: May 29 10:00:07 2026 GMT
            Not After : May 28 10:05:07 2027 GMT
        Subject: CN=BBB992895D903A8FF1081FC87BCE539795682922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:80:96:8c:67:02:16:e6:dc:6f:00:0e:29:
                    5a:8c:9e:82:39:64:a9:27:c0:ad:12:c9:56:b8:f6:
                    2f:92:4f:9e:d9:6d:9a:a6:17:4f:2c:9c:01:98:d9:
                    06:ce:36:7c:c9:5d:ed:24:ed:74:4f:fc:cd:ef:f4:
                    bd:c0:ec:1d:0b:3b:94:6d:42:af:bd:08:cf:04:5f:
                    25:30:d3:f6:98:06:15:b4:5b:47:8a:6f:47:f0:ac:
                    6a:22:0e:d5:94:3d:f7:8f:42:d3:7e:d7:69:3c:f1:
                    0b:b5:e1:fe:fc:db:0f:f7:9e:89:0c:b9:18:48:d6:
                    1b:c4:06:21:b4:0f:2a:23:18:ec:b2:b2:a2:4a:14:
                    5c:95:56:24:d2:54:ef:72:6e:b2:4d:fa:0f:1b:9c:
                    00:c0:1b:68:f9:2a:1d:b5:4a:d3:ee:f7:68:57:ca:
                    aa:d3:5c:d8:ea:a4:2c:63:6e:95:15:d9:7c:f3:ea:
                    ff:18:b4:c1:69:a6:40:71:fc:a9:b8:22:80:92:8c:
                    55:c6:fb:93:26:e8:3d:ce:5c:7a:47:24:54:9c:e4:
                    28:fd:64:d4:be:c1:ca:ae:f9:d2:44:69:cd:4b:9d:
                    80:2d:97:b4:9d:94:0d:2a:11:66:df:79:bd:20:8f:
                    2c:66:f1:82:0c:1b:c8:ae:65:33:f5:98:75:a4:6a:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B9:92:89:5D:90:3A:8F:F1:08:1F:C8:7B:CE:53:97:95:68:29:22
            X509v3 Authority Key Identifier:
                keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/3130332e3232322e3138362e302f32332d3332203d3e203633363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.222.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:af:a9:7a:cd:7b:c2:f1:a8:dd:d3:38:af:8b:1a:29:95:3e:
         8b:c3:49:41:b7:eb:c7:85:21:07:e3:a9:79:53:3a:3a:e4:dc:
         59:c9:c9:62:05:bd:20:43:ca:2e:c8:21:84:9f:6d:b0:5e:ad:
         2f:b9:f1:4b:4e:fc:db:92:71:ca:63:a4:8b:a5:7e:03:b2:9e:
         31:c3:b3:fd:4f:4b:51:d5:e0:b6:a7:9a:9a:d6:c5:bf:6e:7b:
         f2:39:a0:e0:f0:ee:ef:ac:0d:8a:8f:72:7d:75:81:16:ea:c4:
         d2:9b:c4:f4:5f:4e:bd:c1:19:71:46:d4:f9:49:c4:e6:39:91:
         1c:a6:5f:a2:b8:1b:27:da:d2:17:b4:8b:97:c9:1f:09:4a:49:
         78:e7:b3:32:43:aa:99:c1:f8:f2:44:bf:51:7c:6a:5c:f4:29:
         cb:25:ed:b6:a4:ab:3a:45:7f:d7:f1:69:6d:10:0b:13:a1:3b:
         db:59:43:a0:65:47:ab:66:11:c4:41:19:cb:16:0c:1d:b9:9c:
         c2:ba:70:0b:d7:98:9e:03:58:c3:0f:4c:4d:50:f9:1d:ff:8b:
         55:04:37:f5:db:6e:dd:9a:a2:71:fb:1e:0f:8d:7c:2a:ee:84:
         e2:0a:83:ca:d0:8e:e4:f0:9a:a6:37:d7:5d:ae:c1:3e:0a:cd:
         57:04:e8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:54:02 2026 by rpki-client