Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35312e302f32342d3234203d3e2034383437.roa
File:                     3130332e3231332e35312e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          tsGn92ae8epZKB8NLRu2P/enU7wxuFoH2Gh4sU/RedM=
Subject key identifier:   56:52:B0:78:90:5E:D4:11:C9:75:7F:D7:9D:D0:8C:5D:38:42:8F:C2
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       6E2D3F50CC41F4E7EBABDB85FA792E387E6C8BA8
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35312e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 08:54:41 +0000
ROA not before:           Thu 04 Jun 2026 08:49:41 +0000
ROA not after:            Thu 03 Jun 2027 08:54:41 +0000
asID:                     4847
IP address blocks:        103.213.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2d:3f:50:cc:41:f4:e7:eb:ab:db:85:fa:79:2e:38:7e:6c:8b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 08:49:41 2026 GMT
            Not After : Jun  3 08:54:41 2027 GMT
        Subject: CN=5652B078905ED411C9757FD79DD08C5D38428FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:fb:f9:1f:fe:95:dd:66:ed:fb:de:ac:be:
                    a3:92:de:10:52:85:55:a2:4c:45:af:68:e4:9a:4f:
                    12:2f:17:10:6e:da:fd:9e:17:67:6b:b9:55:49:5f:
                    81:07:86:fb:d6:9f:0a:28:ba:57:e4:94:1b:99:b7:
                    2e:4f:c4:95:a0:8c:55:8b:0b:d0:4e:d0:b7:a8:a0:
                    c8:49:97:7a:ab:8e:2e:76:45:be:92:78:dd:ad:20:
                    fd:46:21:3c:60:42:d9:6c:04:50:77:b2:bc:2a:a6:
                    85:3c:05:d7:91:38:a4:8d:ac:e2:ef:e9:a6:66:05:
                    78:61:5d:1d:00:bb:95:e7:95:73:27:4f:b3:1b:a9:
                    65:7c:1b:a4:f2:f3:33:65:0c:42:76:45:ef:eb:1c:
                    be:94:b6:72:b4:c4:07:45:b0:09:eb:ae:9d:bf:aa:
                    2a:36:a8:c6:c9:94:86:cc:07:bf:77:60:f0:9b:54:
                    2c:82:8e:82:61:2d:f8:c9:b6:e3:4f:b2:60:4a:4a:
                    e6:12:c6:8f:b5:79:1f:e7:61:d8:6e:a8:e4:eb:49:
                    f8:77:5b:bc:22:d0:04:23:32:46:bf:22:7b:45:b7:
                    f0:e8:6d:74:83:73:9c:fc:01:d2:70:15:88:bc:49:
                    73:95:9b:9d:73:70:fb:5e:5e:0a:4e:1c:ae:3b:a1:
                    9d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:52:B0:78:90:5E:D4:11:C9:75:7F:D7:9D:D0:8C:5D:38:42:8F:C2
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35312e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:bc:b8:d0:fc:1a:b8:26:2e:1d:8d:74:0c:6d:75:2e:d0:70:
         1e:9a:00:84:cb:a0:3b:1d:f9:80:95:81:62:99:9b:c6:19:f2:
         a9:20:13:c5:ca:28:af:67:f6:89:8d:e8:c4:ac:57:7a:32:06:
         46:d9:88:d0:57:d2:92:2e:91:16:86:54:21:35:06:b1:30:a2:
         6b:9d:67:e4:cf:7c:ce:e0:fa:e2:7e:fe:89:9a:38:7d:ae:36:
         57:5d:ea:e9:a1:68:e9:5b:09:90:dd:7a:3b:88:0e:64:30:a8:
         14:ef:6b:2e:c5:f1:cf:58:77:94:f5:ed:3f:e2:8f:44:b2:da:
         46:62:3f:5f:1e:94:e0:ca:f0:57:b1:6a:fb:d9:2c:36:96:fe:
         c8:d7:a6:89:69:65:d3:6c:18:2c:99:87:ff:34:95:18:0c:5e:
         b8:b4:9b:6e:0c:fb:d1:66:8b:b4:fb:56:e2:05:40:a5:fc:17:
         7b:b7:03:07:ce:42:ce:47:d2:35:bc:93:28:5f:67:01:63:f6:
         da:6b:4e:cf:3f:33:13:3c:7a:f4:db:16:dd:cd:0c:af:f2:5f:
         45:ec:f3:05:c3:1a:55:9a:1c:cf:90:5e:70:e8:4e:5f:c2:15:
         af:50:59:53:4b:2b:61:66:41:5d:6c:eb:50:ba:97:38:c3:21:
         22:0f:73:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:47 2026 by rpki-client