Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e34392e302f32342d3234203d3e2034383437.roa
File:                     3130332e3231332e34392e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          xBSvZDyfTgf6FPioqeqSyAvvL7XCyAHdGdZkit/mOsc=
Subject key identifier:   46:5A:D0:8F:20:50:F3:F1:9C:91:2D:D9:55:06:65:00:37:E6:06:76
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       5A220A2503E32D24EACC31B675D304874C528BA8
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e34392e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 08:54:25 +0000
ROA not before:           Thu 04 Jun 2026 08:49:25 +0000
ROA not after:            Thu 03 Jun 2027 08:54:25 +0000
asID:                     4847
IP address blocks:        103.213.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:22:0a:25:03:e3:2d:24:ea:cc:31:b6:75:d3:04:87:4c:52:8b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 08:49:25 2026 GMT
            Not After : Jun  3 08:54:25 2027 GMT
        Subject: CN=465AD08F2050F3F19C912DD95506650037E60676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:71:13:7a:57:07:dc:ef:ed:66:d5:11:83:
                    0c:9b:0a:de:8c:1f:04:54:be:c9:0b:75:5a:45:e5:
                    e8:9e:81:aa:9d:32:4a:f3:a3:17:57:e6:ff:c0:a9:
                    f2:a5:1b:6b:5f:d8:81:90:b2:4b:d1:58:aa:20:73:
                    77:8a:25:13:f1:4a:21:48:d0:86:3a:7b:55:79:e5:
                    9e:18:58:2c:b3:2a:a5:ba:6e:2d:a9:d3:8f:20:59:
                    b8:64:81:5a:db:31:61:e2:46:65:bd:5a:65:e2:e8:
                    24:27:16:12:42:e5:b1:95:85:dd:e3:da:e6:1c:b8:
                    9c:c8:6d:14:fc:1d:f9:75:b1:81:a1:4e:63:fd:59:
                    b6:5f:81:38:4c:f5:a1:ad:5a:f6:69:74:64:12:f2:
                    b4:02:06:a0:3f:b0:a9:7f:a8:a8:21:fc:3b:02:08:
                    a0:8c:c1:e8:f7:f8:b3:32:e8:2b:55:e3:b1:32:5b:
                    de:67:44:c5:34:4e:1a:04:66:d0:aa:97:eb:58:24:
                    50:4b:70:49:5e:df:3e:a2:e6:10:62:01:86:11:c5:
                    2e:8b:55:2e:8e:fb:4f:2a:cf:b3:61:c6:31:1f:fd:
                    ba:1d:ae:47:bb:ad:01:ea:d0:46:62:0e:7e:1f:31:
                    a0:76:c0:d9:be:33:d3:df:36:08:0a:13:82:39:4e:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5A:D0:8F:20:50:F3:F1:9C:91:2D:D9:55:06:65:00:37:E6:06:76
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e34392e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:23:95:de:94:44:cf:a9:7e:3e:d5:6c:7e:8f:31:21:1b:e6:
         0e:62:2b:26:c5:42:25:16:00:a9:60:29:08:53:c5:e2:48:60:
         4c:85:49:ad:1b:ab:8a:ea:48:d0:dc:10:d6:e5:01:7d:aa:e7:
         bb:f8:b5:7d:86:a8:e3:34:97:6f:42:f7:92:64:fb:8f:c3:ec:
         a0:30:60:3d:13:85:d7:3d:95:a1:c0:ce:da:70:bf:b6:6c:2c:
         ee:2c:c6:4a:a5:17:1e:bd:3b:75:08:6d:37:41:f7:17:a7:69:
         1d:36:4d:5e:64:53:e6:49:1e:73:a8:03:64:a7:d3:73:a1:46:
         dc:42:a0:18:b3:28:0f:f3:26:8e:46:13:2b:23:b8:79:da:8f:
         32:d1:e4:80:b5:04:e5:54:63:a5:39:0e:84:53:d8:22:4e:d8:
         5e:0a:70:ef:29:b6:03:ed:99:c8:b6:67:57:f1:5a:33:4c:ef:
         26:6d:19:68:83:e8:1e:c8:73:c7:1f:1f:c1:2a:9b:2f:75:f6:
         9a:9c:1a:ee:bd:f9:65:e4:cd:4d:aa:2c:61:5f:2b:03:93:b1:
         e3:c2:c6:2b:f0:b7:b5:ca:a9:bf:dd:3e:a7:91:dc:5b:9a:ae:
         8f:7c:89:82:22:7f:49:f8:80:9f:30:1b:38:5a:01:d4:84:82:
         81:a3:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:13 2026 by rpki-client