Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa
File:                     3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa (raw, json)
Hash identifier:          47a7IJaOeTG/MD5floMnBR+xcSqSZ4e0r4PHdOoALC4=
Subject key identifier:   69:92:05:1F:43:7A:EA:1F:3A:76:ED:71:5E:7A:7B:68:6E:6B:8D:05
Certificate issuer:       /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial:       77238297C2E71AE08E7B73CDFE3E9B171F889B82
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa
Signing time:             Fri 29 May 2026 10:04:06 +0000
ROA not before:           Fri 29 May 2026 09:59:06 +0000
ROA not after:            Fri 28 May 2027 10:04:06 +0000
asID:                     63621
IP address blocks:        103.222.186.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 10:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:23:82:97:c2:e7:1a:e0:8e:7b:73:cd:fe:3e:9b:17:1f:88:9b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
        Validity
            Not Before: May 29 09:59:06 2026 GMT
            Not After : May 28 10:04:06 2027 GMT
        Subject: CN=6992051F437AEA1F3A76ED715E7A7B686E6B8D05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:82:ba:f0:d3:ba:61:a4:3f:7e:fb:f4:63:
                    10:4b:b5:f8:6d:94:52:30:18:6b:b3:18:23:5e:8c:
                    1a:8b:79:00:10:f1:19:8d:f3:ac:e5:1a:54:7d:f5:
                    17:9c:dd:67:c5:51:02:81:ee:4f:95:26:a2:98:b0:
                    47:0c:ba:86:f2:90:a2:88:71:da:22:ed:60:05:2d:
                    5e:d3:df:71:02:d6:7c:ae:e8:00:e5:e0:7d:a9:66:
                    38:7b:da:48:55:4f:83:ef:c0:fb:a6:6f:63:5a:b3:
                    46:f5:13:37:f6:2f:df:05:79:8b:3f:c6:82:74:50:
                    91:3b:79:77:81:96:9c:02:a9:ed:ac:bd:aa:1f:ae:
                    2e:23:2f:9f:46:45:b0:ea:11:09:35:b3:65:f8:43:
                    1a:22:14:bc:9a:6e:80:d3:77:58:34:c7:ef:a8:e0:
                    aa:3b:35:87:03:47:e1:3d:80:2d:9a:2a:46:c1:29:
                    9b:1e:db:42:dc:ff:0b:ca:ce:b5:60:c4:77:ed:2f:
                    9a:75:06:39:e9:a6:bc:8a:db:34:e0:b4:a2:55:36:
                    ca:b5:0a:33:d7:66:12:ff:10:7a:25:2f:ed:5c:58:
                    7d:cc:b7:0d:f7:0d:58:66:97:35:23:78:01:27:a7:
                    68:f0:ee:22:b0:83:c8:93:92:ba:4c:05:57:2e:7d:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:92:05:1F:43:7A:EA:1F:3A:76:ED:71:5E:7A:7B:68:6E:6B:8D:05
            X509v3 Authority Key Identifier:
                keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/3130332e3232322e3138362e302f32342d3332203d3e203633363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.222.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a3:2d:9a:b3:5e:2e:01:c4:eb:3a:bb:8c:64:62:17:8d:7c:
         3d:7e:f5:c4:6e:a3:cc:de:10:3f:73:de:7e:3b:4c:a0:cd:3d:
         a9:8f:cd:6b:6b:3b:91:42:3e:58:a1:e9:15:ae:9e:0a:f0:22:
         f3:c6:c7:1f:2a:90:66:43:c9:3a:d9:4b:7c:26:e2:dc:d3:7d:
         ef:cf:e1:75:69:6f:c0:fa:ac:73:df:ef:dc:02:93:e3:78:58:
         87:46:e3:75:af:4c:6d:93:af:81:9a:c1:3a:d0:d2:86:b5:20:
         30:7d:e2:f8:d0:ef:1a:7e:79:a5:3e:d4:df:4b:f2:75:58:a0:
         62:fc:75:39:4e:66:74:9d:4d:94:a9:64:df:6e:d6:7d:f4:ec:
         9b:e2:1a:e8:0c:4a:c5:c0:53:dd:cd:3e:0c:3a:59:29:02:a5:
         88:d0:e5:8c:6e:56:57:5a:87:42:6a:37:6d:27:1f:6f:ef:d6:
         8d:f0:7b:75:69:a3:f5:b0:1b:a0:ee:39:80:b1:ba:ef:43:a2:
         4b:76:b0:b4:0d:5f:5d:33:cf:73:d3:c1:55:15:4b:f5:f3:57:
         e4:84:60:9e:a2:f9:17:1a:c2:5d:c8:18:6f:07:51:a2:f1:30:
         40:4a:0e:f7:4f:90:76:fa:5b:35:c4:4e:27:ec:a0:69:a1:bb:
         7b:79:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:39 2026 by rpki-client