Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3139322e3134302e302f32322d3234203d3e2030.roa
File:                     3130332e3139322e3134302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          bKlNqvWEEejHdNYm0UxaFOETVXfhlyPcgzo/naZw2Jo=
Subject key identifier:   EA:51:B4:3F:1B:0C:58:C6:18:03:3D:B8:25:D7:0D:A7:6C:B0:0E:1E
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       6A6D002D7960FA6ED0F80601B67CB2A74404EF22
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3139322e3134302e302f32322d3234203d3e2030.roa
Signing time:             Fri 29 May 2026 13:47:29 +0000
ROA not before:           Fri 29 May 2026 13:42:29 +0000
ROA not after:            Fri 28 May 2027 13:47:29 +0000
asID:                     0
IP address blocks:        103.192.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6d:00:2d:79:60:fa:6e:d0:f8:06:01:b6:7c:b2:a7:44:04:ef:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: May 29 13:42:29 2026 GMT
            Not After : May 28 13:47:29 2027 GMT
        Subject: CN=EA51B43F1B0C58C618033DB825D70DA76CB00E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:d3:7f:f4:60:63:19:51:f8:ae:01:71:01:
                    7f:69:6b:eb:b2:ef:e0:e9:52:a6:8f:46:cb:29:e3:
                    24:8b:88:a5:56:f3:99:80:fe:0f:ad:a3:06:98:7a:
                    0e:b3:9a:26:70:3d:89:70:37:6f:cc:16:b0:c9:03:
                    1e:cf:9b:f0:06:e8:14:9b:63:97:20:78:92:e7:31:
                    04:95:75:52:a8:54:34:d2:74:19:f4:50:3f:2c:8b:
                    b7:f0:24:0a:17:23:84:ea:07:93:71:a2:9c:aa:7f:
                    35:e5:a2:76:d3:b5:fa:6b:db:35:94:70:99:ae:2d:
                    c7:a2:39:54:d8:02:24:0c:d7:05:8d:52:60:a8:c6:
                    49:da:1f:fa:28:da:e4:dd:ae:ec:6a:64:a9:94:71:
                    71:f8:9d:da:4f:ff:3d:2d:c9:69:c3:d8:9d:53:17:
                    be:9a:52:be:cc:27:a5:30:3d:33:03:21:39:2f:e8:
                    8b:ab:c3:48:cb:e0:79:a1:5d:b1:81:a4:0d:12:65:
                    5b:d4:9d:96:2f:65:a0:89:01:a0:15:11:0b:6b:c5:
                    a7:a8:e0:0f:fb:01:74:b7:6e:94:e9:03:87:77:01:
                    e7:14:f9:69:a1:1b:bf:84:44:b5:35:74:4b:82:da:
                    5b:01:7b:c4:5a:5d:a0:db:8a:18:a4:3f:98:b5:8b:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:51:B4:3F:1B:0C:58:C6:18:03:3D:B8:25:D7:0D:A7:6C:B0:0E:1E
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3139322e3134302e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:bb:c6:12:86:a1:6e:a8:1c:54:e8:bb:b3:c9:ec:2a:b8:79:
         8b:bd:54:cf:7e:1b:3b:0c:6c:fe:a7:46:3f:d2:b5:01:09:f5:
         e9:be:bb:79:b5:33:4b:5b:df:30:14:6f:8d:6a:f5:71:9b:8f:
         26:43:8a:39:dd:c3:85:45:e5:d7:ad:7a:19:13:4a:fd:73:a9:
         9f:3e:e5:65:57:33:ab:c1:d3:9a:33:4b:00:0e:0a:16:8f:46:
         4d:40:57:79:f7:ef:52:38:21:62:de:03:42:e2:9b:02:43:9a:
         ae:e8:37:ed:27:a0:aa:60:3a:19:5b:ff:66:b0:32:78:0d:71:
         67:f4:8a:99:02:e4:08:35:e0:95:00:12:eb:f2:02:47:7a:0b:
         7f:f1:50:d1:3e:14:ea:1f:23:b5:df:76:44:a0:b7:e0:ba:7e:
         92:89:73:df:40:75:8c:91:ca:4d:75:bb:b6:8e:ba:72:0c:81:
         f0:35:76:5f:5e:a3:6f:da:3a:6b:9b:ba:55:81:27:3f:65:7b:
         66:c4:b3:68:3c:7a:69:f7:53:ed:8a:57:b1:df:1a:d6:03:6a:
         d4:d3:f5:1e:7d:d7:6d:69:16:7c:9c:ca:83:5a:14:3b:e8:13:
         26:cd:ec:b6:7d:ac:55:db:73:a0:db:53:37:94:05:44:40:eb:
         bf:f1:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:13 2026 by rpki-client