Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e36302e302f32342d3234203d3e2034383437.roa
File:                     3130332e3231332e36302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          ktyFtCoqxqUwYz0T5//OKoh0R9FzdjlII/s+SDsJTXo=
Subject key identifier:   B6:8A:8A:BC:44:5E:5F:7F:2E:3F:49:44:CB:0E:B6:8D:83:CD:75:49
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       47E1FA5419D8A207ED64DF2ED4D510F0004E63B1
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e36302e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 08:56:18 +0000
ROA not before:           Thu 04 Jun 2026 08:51:18 +0000
ROA not after:            Thu 03 Jun 2027 08:56:18 +0000
asID:                     4847
IP address blocks:        103.213.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e1:fa:54:19:d8:a2:07:ed:64:df:2e:d4:d5:10:f0:00:4e:63:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 08:51:18 2026 GMT
            Not After : Jun  3 08:56:18 2027 GMT
        Subject: CN=B68A8ABC445E5F7F2E3F4944CB0EB68D83CD7549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:d3:62:43:fa:28:7f:49:36:5d:01:2b:c1:
                    35:2a:26:3b:ea:03:b2:9d:65:1f:b0:82:69:9d:22:
                    9b:b9:4b:2f:3f:50:5d:15:64:40:b6:85:b9:4b:a1:
                    be:41:45:32:9e:72:44:fa:c4:1a:1d:fc:19:30:11:
                    65:81:f3:51:8e:b3:ad:f4:42:fe:69:d4:be:83:3e:
                    56:64:c8:72:e4:01:59:dc:dd:50:a8:10:bc:d0:0d:
                    59:4d:76:20:02:a9:57:44:15:e8:73:f0:72:29:73:
                    82:1a:e1:aa:e4:e5:bc:9f:96:c0:ca:97:dd:86:60:
                    06:c9:e8:61:20:84:bc:d7:b8:38:40:a5:c7:64:c1:
                    ca:96:30:21:56:00:df:b4:0a:c0:24:12:00:10:96:
                    60:7c:60:17:e8:1c:ba:4d:d0:50:2d:77:18:89:10:
                    56:8f:18:58:8b:05:b3:e8:a7:78:d4:7b:fa:90:9d:
                    ad:71:14:22:9c:c4:32:05:95:88:cb:8b:b4:68:d8:
                    ab:e7:84:13:83:3a:68:11:cf:60:41:59:82:d1:66:
                    a4:86:c2:1d:66:ed:f8:9c:9f:e3:11:e6:c5:56:85:
                    ba:e4:1c:16:ba:df:9a:e1:af:b0:ab:0b:29:07:0d:
                    8b:61:ed:f3:40:97:a7:b6:6b:70:6d:4c:a0:22:e7:
                    a5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8A:8A:BC:44:5E:5F:7F:2E:3F:49:44:CB:0E:B6:8D:83:CD:75:49
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231332e36302e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:50:96:79:ce:02:a3:7c:38:d0:16:ac:15:27:ce:b2:5d:fe:
         b7:c6:08:23:47:1e:27:b7:ae:85:c6:f3:2c:c5:95:60:d3:3b:
         e6:dd:3b:ba:38:12:77:d9:87:16:b8:ac:19:5a:69:a0:48:22:
         45:30:6e:27:5a:7a:99:6b:a5:04:1c:42:c4:43:d2:77:b5:62:
         d1:b7:3d:b3:50:17:31:96:b9:b7:99:8c:b1:ec:8a:1f:dd:d8:
         e6:31:19:21:86:5c:70:ca:fd:3c:72:21:43:d6:04:dc:1e:63:
         17:d5:ee:00:cd:c9:cc:61:34:57:3e:94:42:24:52:68:7a:19:
         78:20:07:ed:be:d6:d0:51:58:cc:a6:68:b1:bf:21:3f:7b:1e:
         d5:ff:5f:32:87:25:f0:a7:b6:36:42:e0:f1:6e:df:c9:30:17:
         a6:c4:c0:c5:78:28:90:16:7e:aa:e6:7e:57:9d:11:f8:d1:72:
         a1:09:9e:c2:67:e5:2a:3c:12:4f:33:ae:3c:b8:10:a0:90:a7:
         56:76:65:23:51:ba:35:de:a1:24:d0:37:4f:c1:06:d5:f6:fa:
         45:fd:48:08:9e:99:70:a9:5b:28:11:14:f2:1b:4a:a1:69:54:
         80:a6:c0:33:72:03:d5:84:d1:0b:4a:55:cc:c7:fe:f3:55:f5:
         0a:c8:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:51 2026 by rpki-client