Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138342e302f32322d3234203d3e2034383437.roa
File:                     3130332e3231392e3138342e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier:          BVV5Sssx+QbkRXFqRB/xZ18scl9rEx5ZJGg8J5jcRxc=
Subject key identifier:   0B:91:1E:84:86:01:7F:CE:8B:81:79:41:BD:C7:A9:DF:74:21:7B:65
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       102BC31CA9A977A8701A8A2FF3782B5E32816BC5
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138342e302f32322d3234203d3e2034383437.roa
Signing time:             Fri 29 May 2026 13:31:50 +0000
ROA not before:           Fri 29 May 2026 13:26:50 +0000
ROA not after:            Fri 28 May 2027 13:31:50 +0000
asID:                     4847
IP address blocks:        103.219.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2b:c3:1c:a9:a9:77:a8:70:1a:8a:2f:f3:78:2b:5e:32:81:6b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: May 29 13:26:50 2026 GMT
            Not After : May 28 13:31:50 2027 GMT
        Subject: CN=0B911E8486017FCE8B817941BDC7A9DF74217B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b3:f2:de:d1:eb:e3:77:d9:b3:c6:8a:dc:54:
                    1d:b4:8c:44:dd:cf:91:86:c0:c1:81:c8:15:6f:b6:
                    03:e9:0b:1b:25:ff:25:e4:cb:9b:40:a2:dc:34:f3:
                    75:2e:ec:99:98:fa:21:3e:1f:75:75:87:22:63:47:
                    f3:29:df:35:97:58:6a:ee:63:81:cb:2b:40:93:dd:
                    d4:31:58:02:ff:1a:61:a0:13:c3:58:1b:5f:7f:61:
                    dc:46:7f:25:b8:f1:ec:d6:f7:8a:72:97:ed:2c:b2:
                    bd:c8:70:3e:f2:c9:38:0f:24:e7:a2:b4:28:4d:50:
                    4d:1f:76:64:99:46:ac:f0:80:01:5d:16:e6:32:32:
                    4c:bc:29:52:ba:0e:f8:99:2f:16:44:0e:91:b3:39:
                    55:9a:6a:24:08:6a:b9:f2:0f:63:4b:67:a3:96:4a:
                    d4:ac:d8:7c:9e:9a:5d:f8:6d:85:35:03:8a:57:09:
                    96:53:d2:ba:22:7a:ae:bb:eb:6f:e9:ea:bd:6c:66:
                    8f:60:0a:65:14:af:2a:79:a5:ea:45:6b:b6:e6:e1:
                    cc:48:37:98:37:4c:87:1a:be:9f:b2:b1:6a:54:9f:
                    66:66:c9:a5:17:6c:6c:09:14:06:b5:d2:14:7c:0d:
                    d8:a9:48:3b:12:28:9c:ef:6f:91:2d:6a:63:94:f4:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:91:1E:84:86:01:7F:CE:8B:81:79:41:BD:C7:A9:DF:74:21:7B:65
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138342e302f32322d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:24:d9:a1:2f:01:4b:06:e5:4f:71:0c:7d:41:c5:1e:43:64:
         61:0d:6b:02:9f:0f:62:6e:82:db:d2:cd:c1:c5:0d:48:ae:11:
         88:26:7d:48:b2:e9:b4:62:09:65:61:98:ec:01:0a:30:fa:2d:
         ee:ab:72:8b:e0:b0:4c:91:63:86:b9:b2:db:01:f7:66:68:14:
         5e:44:2d:38:9e:4a:42:c4:4d:17:06:2f:cf:39:98:84:3a:1b:
         1d:49:64:cb:5d:0c:1c:52:a4:52:56:fa:ba:8a:a0:c4:ad:8e:
         f5:70:71:e1:55:5e:50:98:15:d0:e0:5f:a6:a0:f9:66:dd:09:
         51:d9:34:a1:1f:3c:40:64:b8:d8:f2:03:0e:19:5c:1f:a0:4c:
         0c:85:8f:6c:88:d4:34:6d:22:cd:34:90:0f:7a:fa:a6:40:fc:
         57:7e:42:95:39:50:68:ca:00:5b:7d:19:d8:a0:7d:b1:12:0d:
         45:64:4c:84:37:0b:88:2e:c8:2d:98:04:8e:27:bc:76:65:ac:
         4a:32:bc:0e:05:7d:80:a1:fa:b2:90:fa:08:06:97:9b:d6:9e:
         d6:26:85:08:a1:ae:6b:f5:21:49:0d:9e:b9:ba:44:87:1a:25:
         4f:94:09:21:f9:43:c3:95:ce:eb:85:9a:7c:2f:52:18:de:e5:
         5f:89:5c:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:54:31 2026 by rpki-client