Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e36302e302f32322d3234203d3e2034383437.roa
File:                     3130332e3231332e36302e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier:          2aXs6t1cMjbMxFwNDed1bYkECuttvfHtTlucQK6RYPI=
Subject key identifier:   5A:06:0B:A5:F9:6E:DD:23:7A:3E:01:02:8A:69:D0:D2:E3:F8:0D:5B
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       5B5FD9F0A046B91837D5CF8DB59DB57534577B17
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e36302e302f32322d3234203d3e2034383437.roa
Signing time:             Fri 29 May 2026 13:30:59 +0000
ROA not before:           Fri 29 May 2026 13:25:59 +0000
ROA not after:            Fri 28 May 2027 13:30:59 +0000
asID:                     4847
IP address blocks:        103.213.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5f:d9:f0:a0:46:b9:18:37:d5:cf:8d:b5:9d:b5:75:34:57:7b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: May 29 13:25:59 2026 GMT
            Not After : May 28 13:30:59 2027 GMT
        Subject: CN=5A060BA5F96EDD237A3E01028A69D0D2E3F80D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:fb:68:16:13:8d:56:97:2e:17:dd:bd:60:
                    8e:9a:8b:6f:c2:b8:b7:e9:e7:5f:0d:ad:72:62:d1:
                    f5:eb:0f:ad:9f:ca:76:1f:63:a9:cc:1c:66:af:8b:
                    65:74:49:be:d3:5b:2a:bd:3c:6d:65:fc:5e:14:9c:
                    8a:da:c1:e4:52:62:4d:c9:58:da:99:54:15:43:89:
                    2e:c9:9e:ba:67:e0:83:1f:6d:ef:1a:86:d4:74:36:
                    cc:54:cf:81:82:d4:80:ea:fb:67:e0:30:58:37:f7:
                    49:93:23:ed:3a:9e:f3:f1:fc:93:39:2c:82:36:82:
                    ee:91:92:7c:e9:cf:bd:74:37:2d:80:02:f4:68:43:
                    5a:75:d6:8a:34:82:9d:80:51:75:68:e0:0d:17:03:
                    38:5a:b6:5a:52:d9:8b:97:0b:ac:b5:31:57:4b:a8:
                    a5:93:f7:85:47:83:52:72:bc:82:9a:69:d6:55:27:
                    fc:ec:a8:9a:a4:f6:80:70:e0:cb:b1:68:b9:27:d6:
                    11:f1:a0:43:d8:e4:06:50:c0:b9:3e:ad:78:5d:03:
                    2e:57:9a:45:f4:a9:d0:1d:0d:13:fc:44:cd:38:86:
                    6e:fd:f1:9d:92:e4:c1:3c:1b:f4:1d:89:78:46:42:
                    fd:1f:5a:f4:3a:a0:7c:22:33:53:77:c2:fa:90:d2:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:06:0B:A5:F9:6E:DD:23:7A:3E:01:02:8A:69:D0:D2:E3:F8:0D:5B
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e36302e302f32322d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:aa:11:6d:c5:07:7a:23:cb:a6:06:7b:f1:74:f5:93:2e:59:
         67:a7:59:69:9b:2a:23:9e:56:56:08:15:7c:d2:23:ef:3e:6c:
         ad:f7:57:c5:d7:dc:7f:1b:b7:65:43:af:f5:73:da:f0:6d:09:
         f7:81:26:42:70:a5:e6:fd:db:41:7c:66:f1:4a:74:e1:4e:85:
         db:02:1f:63:8d:5c:05:81:0e:0b:c4:85:05:40:c6:b6:0a:bf:
         3a:8c:e9:6c:65:3f:88:20:06:61:33:0a:82:cc:3b:ab:77:49:
         4d:a8:23:dd:c1:a1:0f:ea:dd:8c:ab:10:9c:0d:3a:c4:d1:e0:
         08:1e:31:c8:78:81:6b:9e:e1:35:16:13:ac:65:93:7c:b8:8c:
         72:6a:3a:79:75:16:8d:0d:dd:ab:31:ba:f0:31:0c:a2:29:88:
         ee:47:b8:65:70:6a:a0:fb:a2:67:ec:83:5b:87:e0:01:78:6c:
         85:6d:1e:03:18:20:c1:cb:09:03:ef:3f:43:e4:16:00:62:88:
         96:c2:49:fc:7a:ab:d0:81:bd:cf:95:f5:5f:88:c6:10:59:8a:
         4a:b5:b1:18:53:5a:9a:63:f5:b0:82:2b:85:01:e6:01:c8:06:
         c3:a6:88:6d:f7:bc:c4:14:dc:e8:06:88:a2:e0:99:a9:9f:58:
         8a:8d:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:58 2026 by rpki-client