Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35362e302f32322d3234203d3e2034383437.roa
File:                     3130332e3231332e35362e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier:          Ph74MMiU4nJdU3odnx6EN3BeBaGGM5R+X0Nl2AtiaRw=
Subject key identifier:   C4:9E:C0:42:B1:48:52:AD:A8:CB:50:E3:BE:85:64:48:31:98:2D:AF
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       778255996C320934AC99CCE37D313ED80D1C881B
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35362e302f32322d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 07:23:09 +0000
ROA not before:           Thu 04 Jun 2026 07:18:09 +0000
ROA not after:            Thu 03 Jun 2027 07:23:09 +0000
asID:                     4847
IP address blocks:        103.213.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:55:99:6c:32:09:34:ac:99:cc:e3:7d:31:3e:d8:0d:1c:88:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 07:18:09 2026 GMT
            Not After : Jun  3 07:23:09 2027 GMT
        Subject: CN=C49EC042B14852ADA8CB50E3BE85644831982DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:cc:6a:5f:fa:2f:a8:94:54:bf:22:22:8f:
                    3e:c2:76:51:0f:69:cd:93:d8:f3:4d:b0:44:dc:8e:
                    0c:63:ec:3d:6d:e9:b5:d6:e1:ff:ea:91:55:d2:bb:
                    bd:66:a1:20:51:0b:01:c0:ba:c3:ba:50:97:82:7e:
                    66:9e:80:89:31:14:d7:17:b3:7d:a4:ea:66:1d:45:
                    86:21:f7:9c:6c:a1:08:0d:15:db:8c:32:c0:2e:59:
                    89:b7:15:69:52:21:7a:e2:a3:20:9a:d7:98:0d:33:
                    ec:63:b7:0c:ef:96:ef:45:1a:de:03:b9:63:39:a3:
                    a7:92:ba:2f:22:55:2a:c9:61:92:68:48:d5:ad:f7:
                    67:c7:df:21:3b:5a:b1:68:a0:74:14:a3:c2:10:ce:
                    6a:6c:3b:8b:24:5d:e1:0b:d9:24:8d:38:05:a6:ba:
                    fc:75:c8:88:aa:2c:cc:45:eb:c3:2e:dd:05:ec:b3:
                    82:58:d3:0b:a9:d2:86:36:b9:94:c2:29:ce:49:c0:
                    63:64:17:ba:cd:e4:2a:68:f4:20:0c:6f:28:d8:c9:
                    46:d7:e7:cf:97:7e:24:31:14:f7:6e:95:d3:87:34:
                    3a:33:a9:f0:8a:d9:f9:8a:b6:e2:0e:bb:5b:93:14:
                    33:e8:81:76:c4:6d:46:b5:3d:a4:63:25:51:60:6d:
                    3c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9E:C0:42:B1:48:52:AD:A8:CB:50:E3:BE:85:64:48:31:98:2D:AF
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e35362e302f32322d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:27:3f:2f:dd:6c:1a:e0:33:9c:3c:95:a2:a9:32:de:de:e5:
         74:8d:e7:e1:0f:25:9e:e9:28:b1:6e:2a:af:f9:f7:e1:34:b4:
         08:e0:65:51:2c:a2:ac:05:d5:be:73:23:e1:5b:b6:9d:8c:8c:
         75:ae:ad:4d:df:79:b1:37:fc:ee:70:7a:ae:0e:49:17:e4:56:
         db:2d:c7:25:de:0e:5d:48:56:05:79:4d:25:cc:e1:f8:22:2f:
         20:d9:a8:54:bf:76:cc:f1:b9:a8:01:6b:dd:7b:4d:15:14:43:
         42:6b:b0:7a:a6:87:10:bf:5c:8f:b7:08:83:4b:3e:01:e0:b6:
         f6:5e:a6:cb:bf:5d:3c:32:d1:b7:65:c8:7e:f8:2a:9a:20:53:
         9e:8a:82:e7:a6:ba:23:13:86:c7:50:6f:49:20:0a:3b:9d:3e:
         7c:91:c8:b5:37:83:5f:90:9a:d3:ad:2e:c8:13:d4:dd:0a:1c:
         82:bd:0f:0c:2e:e7:cb:12:14:91:b1:8d:df:ee:17:e1:83:b1:
         51:dd:a0:4a:64:de:0e:41:50:86:1a:bf:40:fa:44:bb:cd:3b:
         12:29:64:21:a6:45:19:b6:69:9f:05:16:7b:2e:14:7b:5c:ec:
         f2:4b:24:43:c1:b4:2f:29:e2:f1:b8:e0:35:82:09:6c:ac:11:
         be:b5:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:15 2026 by rpki-client