Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138362e302f32342d3234203d3e2034383437.roa
File:                     3130332e3231392e3138362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          xpqOhMnC+yZFY8Dqga1ahMPMw6HFSCOyIMs92Rdc+Qw=
Subject key identifier:   FA:0A:09:02:82:DE:1C:36:B0:33:D7:95:37:EF:EE:70:AD:74:57:E6
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       100CF5630BE2B059C823423DC0C11B2ED5CAB378
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138362e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 09:06:51 +0000
ROA not before:           Thu 04 Jun 2026 09:01:51 +0000
ROA not after:            Thu 03 Jun 2027 09:06:51 +0000
asID:                     4847
IP address blocks:        103.219.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0c:f5:63:0b:e2:b0:59:c8:23:42:3d:c0:c1:1b:2e:d5:ca:b3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:01:51 2026 GMT
            Not After : Jun  3 09:06:51 2027 GMT
        Subject: CN=FA0A090282DE1C36B033D79537EFEE70AD7457E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:5e:2a:41:7e:28:58:4e:ae:12:8f:42:40:
                    a8:1b:6d:75:73:75:11:ff:77:b7:bd:7d:51:dc:68:
                    38:9e:69:4b:8e:c9:7e:41:e5:2b:a3:58:66:5d:a2:
                    5d:66:e0:f6:6b:71:11:66:a1:a4:2a:1e:8b:2d:5e:
                    68:e7:3d:eb:b9:af:02:f7:c4:9a:9f:69:b0:6e:34:
                    52:ee:4e:7e:20:be:c5:e6:09:bc:0e:98:0e:54:53:
                    fe:d0:ba:4d:32:4d:88:bd:57:69:5d:84:25:2b:dc:
                    a8:54:94:9e:91:1c:fe:c3:96:b3:82:76:d5:ce:41:
                    ea:a2:ca:10:a0:41:c1:11:7e:53:04:20:35:8e:08:
                    12:b5:81:62:06:be:d5:79:af:3d:a3:0e:c5:09:e9:
                    b7:d9:ed:3e:58:8b:88:95:bc:01:e0:20:5e:f0:b6:
                    6e:ca:a2:43:18:da:1a:65:37:3d:91:47:06:b7:f8:
                    1c:de:6f:72:f0:5b:d1:67:4c:74:73:87:2f:9f:c8:
                    e9:8c:83:ee:53:7c:69:6d:21:a9:8e:bc:90:25:f9:
                    e1:d2:2e:88:b4:cd:01:ca:9a:fc:81:dc:e3:fa:86:
                    26:67:87:5f:d1:a0:20:46:9c:1e:91:61:b9:36:27:
                    27:a4:97:7e:30:57:17:d1:a9:83:48:96:11:a7:31:
                    c7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0A:09:02:82:DE:1C:36:B0:33:D7:95:37:EF:EE:70:AD:74:57:E6
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e3231392e3138362e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:96:39:95:32:a2:d2:0d:56:15:6a:57:79:64:af:f3:1e:9d:
         04:0d:5c:ee:bc:db:87:ad:1b:27:10:2a:c0:f1:ee:bc:fc:f8:
         a3:c6:4a:9e:e9:7d:82:04:b5:e5:8f:f6:60:48:4e:99:c9:1e:
         8a:71:b2:85:dd:81:72:f6:10:b1:3f:b6:28:ab:fd:94:c6:4a:
         6e:74:e3:a7:fc:d9:82:c4:e4:23:e5:82:17:b4:b3:75:f8:df:
         f8:40:47:1a:bb:59:f6:41:56:f4:02:7e:27:c4:e4:db:fa:5f:
         53:9c:bf:7d:9a:d7:cf:71:64:e9:da:2a:dd:2e:89:e6:99:dc:
         f0:e7:ff:2d:14:f7:9b:c9:6a:a5:bd:3c:fc:34:eb:9a:47:d0:
         ad:6e:04:93:88:a7:5c:f5:59:cd:7b:37:32:94:8c:d3:7e:f0:
         9d:22:0d:84:53:df:08:2a:a1:55:94:5c:7a:9c:b1:27:db:48:
         cc:19:25:6a:1c:69:13:7b:60:6b:c8:6b:0b:c2:fe:34:b2:f4:
         fe:ec:1e:36:a0:a7:f5:34:22:79:49:2a:89:8e:c9:3c:d3:cb:
         7a:9a:04:c1:ac:19:53:6b:6a:01:42:4b:4d:f8:bf:d5:d4:15:
         56:dd:5c:f1:04:3b:05:af:10:92:10:c4:8d:ab:5e:6f:ac:6f:
         54:ac:f4:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:21 2026 by rpki-client