Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e34362e3136382e302f32322d3234203d3e2034383038.roa
File:                     3130332e34362e3136382e302f32322d3234203d3e2034383038.roa (raw, json)
Hash identifier:          P9BVhiNfHW7fhfowLChpnrWSW2b0Uns13/T7vCy0qSw=
Subject key identifier:   AA:DA:71:6C:58:ED:60:EE:8C:97:31:CC:07:CD:2E:01:81:4D:68:77
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       33D7A4C0103F7BD30970E6EE57E5F303510BE006
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e34362e3136382e302f32322d3234203d3e2034383038.roa
Signing time:             Fri 29 May 2026 13:14:27 +0000
ROA not before:           Fri 29 May 2026 13:09:27 +0000
ROA not after:            Fri 28 May 2027 13:14:27 +0000
asID:                     4808
IP address blocks:        103.46.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d7:a4:c0:10:3f:7b:d3:09:70:e6:ee:57:e5:f3:03:51:0b:e0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: May 29 13:09:27 2026 GMT
            Not After : May 28 13:14:27 2027 GMT
        Subject: CN=AADA716C58ED60EE8C9731CC07CD2E01814D6877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:79:e3:d3:ab:f7:aa:71:05:22:c3:d6:d2:
                    0a:3b:0b:e4:9b:40:10:6a:62:1a:e9:bd:4d:a4:13:
                    5a:3b:a0:49:78:48:8d:2f:f3:a9:8d:a4:d7:d5:c5:
                    28:f4:c3:03:76:9c:1b:26:49:75:df:aa:8a:01:f0:
                    44:53:6d:d7:34:d6:c7:d8:04:e5:ee:09:92:68:2a:
                    3a:18:8c:0a:f9:b8:4f:35:c7:42:82:2f:bd:20:a8:
                    d3:c6:03:6a:8f:dc:5e:ed:02:13:87:9c:82:c8:2b:
                    f1:b1:65:2b:19:c5:5d:2f:da:1c:3a:d3:59:b5:d9:
                    f9:1a:0c:07:2b:11:8b:2a:83:ce:2d:b5:41:28:c6:
                    ae:8d:50:f0:ca:0f:00:08:59:bf:7c:41:48:95:b1:
                    de:b6:9f:f5:92:8e:3c:56:e6:48:67:c3:d7:cf:c4:
                    c8:a3:cb:5c:83:40:b3:b0:17:3b:e6:f9:c0:db:7c:
                    d5:72:aa:88:97:16:5c:e7:c9:16:bb:a3:1f:b6:96:
                    55:33:72:36:92:19:4d:42:3b:9a:55:9c:a4:6e:17:
                    62:d8:2e:1d:30:1d:ee:b0:ae:54:97:27:ea:24:62:
                    18:cf:81:6b:a7:04:d1:fc:2e:50:28:c1:ca:a7:ad:
                    cd:57:23:9a:6a:f8:5a:c2:a9:a4:1b:d9:6f:2a:4d:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DA:71:6C:58:ED:60:EE:8C:97:31:CC:07:CD:2E:01:81:4D:68:77
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e34362e3136382e302f32322d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:cd:f0:07:dd:54:58:98:fe:42:83:38:eb:72:e1:62:70:3c:
         ec:2e:33:24:4b:c6:cd:4e:2f:8b:bd:9b:7b:55:31:8b:0a:df:
         2c:2b:7b:36:6a:fc:2d:27:30:99:1d:e9:28:70:bd:43:25:75:
         fb:d1:22:1e:6b:01:ee:0e:5f:54:04:68:97:aa:b1:ce:4f:cb:
         b8:d1:64:9c:af:46:ca:74:ed:4e:fa:55:f3:5f:60:c8:91:ee:
         d5:18:76:28:b8:3f:b6:f7:4b:bd:01:5a:03:04:ed:7a:c1:b0:
         58:8e:95:06:08:61:38:9c:d4:39:64:27:d2:fb:0c:04:13:f3:
         db:bf:44:a6:fc:e3:78:e6:31:1a:f3:ae:a6:b3:ca:ee:89:77:
         b4:2d:ef:b3:92:5e:3d:f3:66:2d:59:7d:41:ce:e7:08:06:aa:
         dd:b1:7a:cc:5a:45:4a:85:72:17:4d:15:d3:9a:fd:cb:fd:dd:
         cf:dd:b5:77:75:ef:c3:4d:8d:a9:f8:af:e2:6e:f0:08:82:12:
         65:8d:16:9e:a0:84:88:f8:7b:88:68:45:a9:e3:66:ce:d3:30:
         22:03:47:41:e6:c7:8d:35:15:9d:4f:71:57:c8:40:ee:55:06:
         f1:97:30:b9:be:e3:ec:3b:c3:e2:88:cc:8a:36:fd:9e:2f:af:
         0b:b8:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:20 2026 by rpki-client