Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3230352e3138382e302f32322d3234203d3e2034383437.roa
File:                     3130332e3230352e3138382e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier:          ckJJ2Zid+4GqzEx/Wkwvodqd5Ag8rN8UvqfhfpA8D5w=
Subject key identifier:   4D:3A:03:80:52:FB:6B:1F:67:43:3E:23:FF:A3:A1:0E:0A:AF:74:53
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       3F9E52E0AB52255E937AAC936D96F759EA103948
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3230352e3138382e302f32322d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 08:41:48 +0000
ROA not before:           Thu 04 Jun 2026 08:36:48 +0000
ROA not after:            Thu 03 Jun 2027 08:41:48 +0000
asID:                     4847
IP address blocks:        103.205.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:9e:52:e0:ab:52:25:5e:93:7a:ac:93:6d:96:f7:59:ea:10:39:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 08:36:48 2026 GMT
            Not After : Jun  3 08:41:48 2027 GMT
        Subject: CN=4D3A038052FB6B1F67433E23FFA3A10E0AAF7453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:24:84:7f:8d:2e:63:ad:3d:34:9c:95:66:f5:
                    01:d5:2a:10:4e:59:8f:1a:2e:b5:8b:f8:c4:3b:d9:
                    4c:ae:a1:91:76:c5:a1:2d:ec:9f:f1:fc:a1:7b:bd:
                    b2:97:68:54:60:10:d9:ce:91:ea:c4:f8:74:f1:8d:
                    f9:e7:56:f8:02:75:5e:f1:04:9e:b6:e2:fe:4e:25:
                    f8:ee:46:3c:5d:77:d9:94:17:ac:f1:e4:36:d4:9a:
                    81:69:da:de:41:a1:a2:a3:03:e1:1d:c4:b9:7d:da:
                    1f:41:e5:21:f8:ea:c0:48:39:03:29:a2:e1:71:55:
                    67:b1:7b:4e:05:fe:b8:43:4e:c7:68:52:fb:60:46:
                    26:1d:93:46:1d:97:c0:49:c1:5e:2d:ac:5e:7b:e2:
                    95:50:d2:4f:aa:75:dc:cb:3f:d9:b2:08:ff:e0:68:
                    8f:17:93:6e:60:27:1a:66:38:a2:5a:e9:93:40:da:
                    b4:27:ee:31:c4:fb:74:6e:a4:a0:19:75:ea:97:c4:
                    9e:ef:d1:64:56:f1:c8:49:83:91:ce:e3:30:ea:1d:
                    cc:9e:2a:f2:6b:b3:e7:9d:6d:c0:81:97:ac:64:f0:
                    48:d9:31:4a:b8:63:67:59:03:6d:4a:6d:d3:8b:0e:
                    45:94:fe:57:18:68:77:f7:e6:b5:4f:1a:40:8b:c7:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3A:03:80:52:FB:6B:1F:67:43:3E:23:FF:A3:A1:0E:0A:AF:74:53
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3230352e3138382e302f32322d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:07:da:98:bf:f7:2a:66:ef:16:7e:c6:6d:bd:91:c7:e1:
         9a:97:d5:27:80:6c:22:24:b1:60:ed:9e:0c:99:d2:7d:e3:b5:
         5b:ab:ee:58:dc:2b:15:41:ad:5e:a5:71:87:af:d0:c6:6b:23:
         ee:18:01:44:73:b0:af:2b:c6:52:24:ad:0b:55:e8:7c:7f:37:
         c5:c6:bc:56:f0:80:31:86:57:94:78:e7:00:80:83:f5:f7:c9:
         6d:d8:30:f4:88:f9:15:01:57:63:4d:26:1c:24:5f:16:64:bc:
         aa:83:d8:36:ef:ef:67:3f:bc:10:c8:b7:05:9a:11:78:28:db:
         d4:ae:07:fb:06:d1:f0:40:f8:c7:2c:20:9e:b5:89:7a:fc:95:
         40:c6:60:89:58:b9:43:93:b5:d0:a3:01:73:f5:57:c4:48:e5:
         b2:0d:ac:01:02:2a:35:11:a6:0c:cf:ad:e1:25:72:98:ab:d9:
         a5:70:18:fd:ed:35:6f:10:31:7a:50:07:7d:4a:ce:3c:cc:48:
         33:e5:bc:95:7d:0d:8e:6e:85:14:c8:7c:5b:e4:9b:6c:1b:8e:
         3e:1c:65:4a:80:ce:37:93:55:5f:1b:e8:0a:09:d3:51:d1:d4:
         ce:46:db:bc:4f:12:0d:dd:0c:36:ab:8b:35:94:d9:67:97:f9:
         91:2b:ff:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:23 2026 by rpki-client