Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138352e302f32342d3234203d3e2034383437.roa
File:                     3130332e3231392e3138352e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          yglWzlOOA+GXqHJZJkruRVuB1E6BGxEppqa6YZjG3vY=
Subject key identifier:   98:FE:61:30:01:D3:C4:C3:C3:FA:4E:D4:D0:3A:08:4C:BC:B8:E8:F2
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       4D3605AB8F9AAB146668514DAD13A6E9520982FF
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138352e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 09:06:43 +0000
ROA not before:           Thu 04 Jun 2026 09:01:43 +0000
ROA not after:            Thu 03 Jun 2027 09:06:43 +0000
asID:                     4847
IP address blocks:        103.219.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:36:05:ab:8f:9a:ab:14:66:68:51:4d:ad:13:a6:e9:52:09:82:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:01:43 2026 GMT
            Not After : Jun  3 09:06:43 2027 GMT
        Subject: CN=98FE613001D3C4C3C3FA4ED4D03A084CBCB8E8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:38:d8:b9:0d:4e:57:a2:ea:50:88:50:8c:
                    6e:51:af:c9:4a:a7:c0:ae:8c:ef:92:a3:20:53:c6:
                    17:fd:c0:2e:8f:24:59:c7:65:30:6a:d4:48:1b:a2:
                    65:0f:59:ec:84:de:1e:7b:e6:6b:6c:a3:f4:a9:bb:
                    08:2b:d8:5d:5d:47:fd:cf:b3:f9:16:e4:7b:87:13:
                    a9:b6:f6:f4:6a:0b:72:77:bc:7d:f6:b5:46:76:16:
                    ab:3a:84:86:4a:f5:85:e2:12:b3:f8:88:6c:9d:82:
                    99:41:23:95:76:81:64:a7:29:9c:90:c9:ff:bb:56:
                    87:a0:f5:c0:dc:1d:6c:5d:05:9a:ec:3b:ee:dd:ea:
                    1e:dc:d8:4f:dc:3d:89:42:80:df:05:53:98:4f:aa:
                    0e:0c:50:da:d3:ed:90:35:59:c0:8b:a0:26:5d:99:
                    4d:70:d4:f7:3c:9f:b1:99:51:0c:8e:83:f4:f4:0a:
                    5b:34:28:4b:93:7d:82:3f:44:71:b3:9a:02:94:27:
                    53:d9:84:75:b1:28:f8:21:91:72:0b:0d:56:eb:10:
                    e5:ea:e6:3e:18:0b:12:ef:72:cb:be:46:dc:ff:8b:
                    8a:6e:af:97:84:b7:15:df:a1:08:59:5d:60:9c:78:
                    f5:25:3f:2b:27:78:40:46:1a:63:ea:0c:0e:f6:77:
                    e9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FE:61:30:01:D3:C4:C3:C3:FA:4E:D4:D0:3A:08:4C:BC:B8:E8:F2
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138352e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:2a:06:46:7a:f3:95:05:5f:50:9e:45:dd:ed:3d:d9:4e:20:
         b9:07:03:de:f0:36:15:97:f0:52:49:50:e2:af:dd:3a:70:ad:
         d3:f5:ef:4b:b0:d2:6d:2a:67:4f:bc:39:5d:0d:34:eb:da:f7:
         26:f7:84:2f:c7:14:c6:54:25:8b:57:56:46:d2:fe:79:0d:b3:
         34:ac:f9:29:81:b3:47:9c:88:e1:6e:86:83:c8:3e:d3:c6:3e:
         91:4f:37:7e:a0:f9:0e:8f:bc:cb:19:19:4f:f2:08:3f:6d:00:
         6a:f7:e9:1b:64:51:14:2b:27:b8:0a:b4:f4:93:62:61:07:7a:
         3b:28:41:f3:3a:23:2e:56:9b:0b:51:e8:dd:b5:d6:3c:30:67:
         bf:f8:69:ef:6e:bc:1f:f5:dc:ef:fa:d3:65:68:a0:85:9c:3f:
         15:1f:33:4f:09:21:9b:b7:ef:1b:c7:40:f5:19:96:fe:ae:69:
         c5:55:c0:4a:ea:63:d7:75:40:e0:9d:28:64:b2:ac:90:4c:70:
         54:eb:84:99:48:0f:60:2e:d1:ee:94:cb:56:31:a3:18:78:17:
         d0:48:17:3d:28:35:d5:d5:e9:49:90:2a:c0:8b:9d:65:c3:1b:
         70:f3:4f:f3:87:25:9d:c7:1d:18:f2:50:6d:53:4e:8e:02:69:
         a6:a9:bb:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:23 2026 by rpki-client