Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136342e302f32322d3234203d3e2034383437.roa
File:                     3130332e38352e3136342e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier:          WNjaUjzkbuJ6jbF86d9YCivLrccheRIkAykRBcveW1Q=
Subject key identifier:   46:A0:AF:80:92:A3:00:F7:8C:0C:42:6A:7E:66:C6:D6:21:C5:63:A8
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       3377644070732155759550FD2D24BC7EF598176C
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136342e302f32322d3234203d3e2034383437.roa
Signing time:             Fri 29 May 2026 13:31:49 +0000
ROA not before:           Fri 29 May 2026 13:26:49 +0000
ROA not after:            Fri 28 May 2027 13:31:49 +0000
asID:                     4847
IP address blocks:        103.85.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:77:64:40:70:73:21:55:75:95:50:fd:2d:24:bc:7e:f5:98:17:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: May 29 13:26:49 2026 GMT
            Not After : May 28 13:31:49 2027 GMT
        Subject: CN=46A0AF8092A300F78C0C426A7E66C6D621C563A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:30:50:8c:8f:f8:3c:4f:c2:6c:58:73:46:
                    9b:45:43:cf:d9:d6:db:17:21:a0:50:28:2f:40:cf:
                    1a:6a:df:95:af:21:35:4f:50:8c:e8:f9:d1:45:d9:
                    e6:b7:64:29:b4:4a:a8:8f:6e:a9:e0:e4:50:ee:28:
                    e9:6d:ce:bf:99:4b:99:14:f0:f2:2e:9d:9d:6e:e7:
                    a7:e5:37:83:90:1c:65:09:02:8f:20:4e:5b:7d:83:
                    ca:41:43:f5:f5:14:a0:a0:b9:e9:3b:64:5c:84:ea:
                    8a:3c:57:0c:fa:5f:62:c6:c6:68:28:4b:3c:ac:5e:
                    d4:62:36:cf:7e:72:99:f8:52:3f:02:ff:88:7f:da:
                    33:bc:d6:20:e6:81:77:e7:fc:77:c7:96:2a:91:0a:
                    35:57:c2:a0:0a:e8:13:ea:36:f9:06:b6:a7:db:9e:
                    50:40:63:48:a0:af:d5:41:ce:24:80:02:5e:f1:8c:
                    31:ab:f2:b9:7c:0e:11:e2:66:30:8e:b8:2b:83:d9:
                    59:af:f0:b8:6d:89:85:3b:9f:54:dd:a5:37:e9:8a:
                    32:e9:0a:15:e3:00:44:93:31:f7:6e:6c:92:cb:34:
                    63:dd:19:11:50:99:60:35:47:42:fd:f2:a4:9b:93:
                    56:d9:77:85:47:58:66:58:33:78:b8:08:50:e4:7d:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A0:AF:80:92:A3:00:F7:8C:0C:42:6A:7E:66:C6:D6:21:C5:63:A8
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136342e302f32322d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:6b:9e:14:61:fa:e4:0f:12:dc:a7:0a:30:c6:8a:de:79:
         58:c9:c8:ea:00:4e:b6:47:06:96:9e:ad:63:e5:bf:f3:69:13:
         b8:35:6e:05:83:f1:14:bd:d7:20:bc:3c:af:17:e6:c0:99:e8:
         00:ff:8d:75:80:0a:9d:f5:f9:b8:7f:03:16:85:0b:5b:ce:c6:
         ae:1f:f0:99:d3:ad:5b:1b:ba:4b:f7:0b:be:ce:b7:3a:1a:7d:
         1f:0c:2d:18:08:e6:29:aa:57:9f:48:90:3e:b2:aa:18:22:0f:
         2e:e4:56:0d:bf:3b:de:46:d1:8a:d6:be:25:8c:a4:fe:13:f8:
         d1:5f:24:60:33:51:b1:b3:db:14:63:75:fb:59:9a:02:71:4f:
         f1:1f:6c:5a:38:22:3a:9b:6d:3f:8e:21:ca:27:31:27:9e:9b:
         2d:d3:d5:07:70:5c:24:6b:16:cd:87:9f:28:ad:bc:86:c7:4f:
         11:1a:ed:76:ef:bb:ad:15:f6:88:3b:44:f9:a6:ec:16:03:d8:
         5e:3a:ed:45:3b:15:25:68:8a:9d:d6:d0:ed:5e:cf:2f:f3:13:
         9a:6f:44:17:9b:4c:65:72:5b:4c:4c:75:8e:f6:fe:93:16:29:
         fa:cc:4f:7a:64:98:3e:1b:7a:54:26:2f:06:c8:d6:9c:56:c2:
         f1:b1:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:53:34 2026 by rpki-client