Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138342e302f32332d3234203d3e2034383437.roa
File:                     3130332e3231392e3138342e302f32332d3234203d3e2034383437.roa (raw, json)
Hash identifier:          qAhDJTOWnMhO6lHR/ccvD6+MOX8XPmJHKJEiq9nouwc=
Subject key identifier:   25:E8:54:BA:22:28:B1:B1:A1:06:DB:8C:9E:84:AE:6B:01:48:41:3A
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       4399F487E3AA38CF0F7DB35A899C102352B7F396
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138342e302f32332d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 09:06:15 +0000
ROA not before:           Thu 04 Jun 2026 09:01:15 +0000
ROA not after:            Thu 03 Jun 2027 09:06:15 +0000
asID:                     4847
IP address blocks:        103.219.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:99:f4:87:e3:aa:38:cf:0f:7d:b3:5a:89:9c:10:23:52:b7:f3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:01:15 2026 GMT
            Not After : Jun  3 09:06:15 2027 GMT
        Subject: CN=25E854BA2228B1B1A106DB8C9E84AE6B0148413A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:85:9b:5a:70:82:84:ca:02:81:32:cf:85:
                    65:7f:99:c5:26:2a:a8:31:6d:3a:6d:d6:3e:cf:32:
                    c8:12:6a:1e:7f:93:47:8a:b8:35:07:6d:f4:6b:cd:
                    5e:5f:6d:2c:ec:5a:f9:4c:45:96:62:ed:ce:69:4c:
                    b9:b8:77:31:2b:54:0f:5f:7d:b3:99:dc:3e:a3:f1:
                    c0:b5:39:22:08:6b:b8:49:3a:08:ca:c4:84:cc:7e:
                    18:27:ef:33:de:da:4d:d6:dc:79:63:90:b2:10:4f:
                    91:ea:4d:c0:69:40:55:1d:6a:bb:77:d3:fe:66:08:
                    ae:10:34:57:83:5f:ae:27:51:06:a8:5b:a9:08:d8:
                    09:1b:10:4a:94:6f:98:37:ac:93:bb:a6:3a:d7:f3:
                    5e:8d:4b:ee:1d:af:f3:4e:2c:77:e4:c5:2f:c0:a8:
                    bc:a2:a7:3c:a5:35:af:28:6c:33:92:0c:72:ce:11:
                    eb:8f:4d:78:b8:dc:00:7f:a1:1c:08:f7:2e:d1:32:
                    87:8b:75:70:23:e9:36:cb:2f:05:bb:c2:cd:7a:e1:
                    a4:4a:d3:a3:c6:25:31:23:98:c4:ee:d1:de:04:55:
                    61:98:96:6a:f2:49:44:f1:c7:3f:ac:78:f0:06:21:
                    2f:ef:96:5b:7b:1b:21:0a:cf:fc:92:4e:14:c2:5f:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E8:54:BA:22:28:B1:B1:A1:06:DB:8C:9E:84:AE:6B:01:48:41:3A
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138342e302f32332d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:b2:7e:4c:f9:9f:65:26:c1:88:8a:fa:11:9b:61:41:d1:
         2c:e7:84:6e:2c:e1:09:b6:89:4e:4e:8a:50:3f:e4:53:eb:3e:
         38:ca:32:22:ae:e8:1a:e0:9b:ab:8c:42:36:1c:b8:f9:5a:a1:
         a6:a3:5d:7f:0f:cd:af:8f:cd:5c:60:dd:a6:ea:66:fd:97:94:
         a0:fc:78:b8:ca:88:1a:10:75:bf:83:a7:10:5e:be:fc:32:a2:
         b9:8b:69:3a:5e:4c:4b:f8:1c:18:97:fd:bc:10:61:e5:6e:c3:
         08:03:bb:69:46:59:eb:d5:14:c1:b3:79:24:93:fe:7b:98:52:
         d1:3c:e7:29:84:40:05:2d:c9:22:5a:66:bb:58:d8:55:65:3b:
         8c:74:09:8a:25:cd:9c:d8:20:76:09:93:98:97:8b:2a:bc:71:
         54:5e:3d:33:cc:e0:df:67:3f:2e:c3:58:43:59:5d:90:43:14:
         f4:6e:1c:7b:04:cc:d4:ac:30:88:de:b8:ca:4a:23:20:f9:df:
         40:26:04:68:01:76:bc:b6:03:ce:bf:c4:0a:8c:57:00:58:35:
         82:31:25:91:39:7d:49:4f:a4:8f:d6:75:01:b5:82:50:82:ce:
         33:4c:72:6f:bb:a0:26:33:c3:51:ac:05:e9:8f:f0:57:31:15:
         2b:79:5c:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:24 2026 by rpki-client