Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e36302e302f32332d3234203d3e2034383437.roa
File:                     3130332e3231332e36302e302f32332d3234203d3e2034383437.roa (raw, json)
Hash identifier:          zisoZcmDn33sgXuF5KfmUa0TyLSUREroL2ZQ5cGIFS0=
Subject key identifier:   B2:72:DD:C1:5D:B7:F4:B4:FB:59:58:15:26:DE:B1:C2:0D:32:98:55
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       3B881BE305D1E00464A127EB61C5E0F0967001BB
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e36302e302f32332d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 08:56:37 +0000
ROA not before:           Thu 04 Jun 2026 08:51:37 +0000
ROA not after:            Thu 03 Jun 2027 08:56:37 +0000
asID:                     4847
IP address blocks:        103.213.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:88:1b:e3:05:d1:e0:04:64:a1:27:eb:61:c5:e0:f0:96:70:01:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 08:51:37 2026 GMT
            Not After : Jun  3 08:56:37 2027 GMT
        Subject: CN=B272DDC15DB7F4B4FB59581526DEB1C20D329855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:e5:a1:8a:20:a4:ea:0e:49:c7:a1:73:8e:
                    38:88:e4:88:39:c2:ff:4c:1e:a7:09:29:79:4e:6c:
                    36:37:02:f5:01:24:66:95:5b:ef:4c:fb:b6:69:31:
                    13:2e:00:42:b5:a8:e6:a2:c5:de:5f:ae:20:70:d7:
                    d6:2b:62:a1:7a:ff:b8:35:a7:e6:ed:21:31:0d:22:
                    d3:c8:73:bd:6e:af:f4:b9:5a:07:bd:e0:67:47:51:
                    06:6f:76:22:98:19:e5:13:0b:17:ec:3a:03:56:23:
                    05:7f:40:77:84:31:a8:98:b0:aa:6b:c7:e1:91:19:
                    b4:31:20:9f:21:1a:c7:fc:6c:44:61:6c:5b:93:d7:
                    4f:9a:20:c2:41:35:7d:8d:28:38:2e:4e:41:70:7f:
                    3b:80:c0:a9:85:bb:ff:02:02:50:e5:04:8f:3a:60:
                    9d:f0:23:95:df:9c:b8:79:c0:e7:98:f7:cc:eb:71:
                    0e:3c:a4:60:e1:aa:96:9f:db:0f:6c:e1:98:96:cb:
                    e1:b7:59:2c:d0:9f:d8:44:e0:4d:5a:e4:75:2e:a0:
                    1b:a5:50:9b:ab:06:af:60:ea:c5:ee:82:b0:f4:cb:
                    33:71:3b:ae:71:63:a5:f8:2f:a3:29:46:0b:5c:fe:
                    63:b5:ec:ac:b3:9f:55:0a:c7:2e:95:65:8d:46:35:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:72:DD:C1:5D:B7:F4:B4:FB:59:58:15:26:DE:B1:C2:0D:32:98:55
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e36302e302f32332d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:6a:ec:7b:dc:d1:d9:10:df:bc:8b:19:54:52:7c:aa:c4:a9:
         c9:2f:fd:55:1a:e1:ab:b0:dd:96:4e:69:98:3b:d1:20:ac:c8:
         42:1d:63:c0:19:14:8b:58:f5:a2:57:05:f2:8e:d7:b2:9f:b0:
         e2:2e:3c:e1:a7:a0:b5:56:09:dc:04:d5:1b:99:09:64:64:61:
         18:24:a6:57:c2:31:17:d5:98:b8:67:ff:55:31:d0:22:21:61:
         a2:fc:64:ac:e2:03:24:77:25:20:3c:c8:aa:cc:f3:73:3e:c0:
         da:88:d1:0e:30:c0:6f:ec:af:0a:27:5b:35:47:96:8e:e8:e6:
         ab:57:60:cc:1e:54:c6:10:e0:42:a2:16:a3:cb:de:2c:7e:51:
         17:ca:d9:ce:98:68:7c:4f:ea:7a:5f:0c:4c:c6:88:de:40:97:
         76:8f:16:30:f2:c6:9a:f2:58:f3:de:80:94:c3:c8:7a:32:65:
         63:d7:84:43:19:e1:d2:e2:7c:4c:3e:d2:f5:3c:25:ee:dd:e4:
         09:f0:15:58:e4:ce:16:cc:4f:1b:b2:41:54:c8:34:78:9f:7d:
         4d:64:36:45:0d:34:cd:77:d4:81:47:76:aa:1f:57:02:bf:bb:
         84:e8:25:bb:fc:85:b9:d8:f5:72:a0:b5:7c:57:bd:80:6c:fd:
         f2:bc:4a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:06 2026 by rpki-client