Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136342e302f32342d3234203d3e2034383437.roa
File:                     3130332e38352e3136342e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          nPXnQRV6IFZAKjC4ZJeWxAN8CD95TDprXJ4H9oMUteI=
Subject key identifier:   01:CA:F9:AC:C4:62:0D:47:B0:D9:EA:6F:FB:67:5E:6F:3D:18:AB:EC
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       6FE2DD65A8C74CD048BFE6131B50B0823D510100
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136342e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 09:13:59 +0000
ROA not before:           Thu 04 Jun 2026 09:08:59 +0000
ROA not after:            Thu 03 Jun 2027 09:13:59 +0000
asID:                     4847
IP address blocks:        103.85.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e2:dd:65:a8:c7:4c:d0:48:bf:e6:13:1b:50:b0:82:3d:51:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:08:59 2026 GMT
            Not After : Jun  3 09:13:59 2027 GMT
        Subject: CN=01CAF9ACC4620D47B0D9EA6FFB675E6F3D18ABEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:a7:55:ee:b1:10:94:2c:d2:40:0f:ac:ad:
                    2b:e9:7f:e7:c2:b7:8c:53:a7:92:33:bf:b4:f2:ef:
                    e9:d0:b5:ef:ce:bf:95:f3:7d:6d:45:7b:1e:c6:8d:
                    58:e6:d2:e4:99:a4:ae:7d:e0:85:43:9b:19:6c:0c:
                    45:21:e1:21:63:90:42:98:23:55:bd:13:dc:69:87:
                    ed:47:7f:90:d3:d0:3d:0d:68:cc:0b:fa:7d:54:45:
                    4f:27:a8:f4:bd:31:2e:5b:16:74:6f:85:ae:ef:0a:
                    cb:35:18:8d:88:04:51:49:98:6d:08:cb:b5:b0:37:
                    46:5a:17:f1:62:62:55:ef:65:97:c1:2f:65:7f:8e:
                    e1:1e:81:9c:56:29:fc:46:3b:a7:44:94:e4:c2:cf:
                    82:4d:ca:34:13:52:37:fa:34:e1:13:98:f8:cd:fd:
                    2c:a9:87:fd:c3:7f:c8:f5:e3:e0:09:ed:1d:3f:70:
                    c2:14:49:22:a6:93:44:30:9e:76:5a:1e:8f:dd:50:
                    fe:a5:c3:cb:92:54:0e:da:9d:d6:30:e1:89:3e:50:
                    2f:5b:21:aa:b8:ea:95:a3:77:90:13:5c:d0:47:62:
                    dc:44:de:70:d2:a6:84:ff:b9:58:34:83:2e:79:e5:
                    e2:a4:b8:6d:9b:df:f1:b0:3c:7a:bf:24:ee:67:59:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CA:F9:AC:C4:62:0D:47:B0:D9:EA:6F:FB:67:5E:6F:3D:18:AB:EC
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136342e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:48:a5:1d:0e:e6:d2:10:ad:1b:6d:6e:cd:52:51:c3:18:b8:
         65:09:c9:05:42:dc:05:b2:d8:42:43:89:6b:ba:9e:bc:3c:4a:
         eb:81:0b:c0:5f:c7:6a:3d:af:b0:f2:5e:56:14:1b:6e:63:05:
         d2:a0:96:be:58:22:bf:2d:a7:57:16:e9:5f:55:86:16:38:9b:
         b5:1c:5e:9d:02:14:8a:93:bd:02:5a:4f:7d:f7:75:e9:b5:b4:
         18:95:ae:d1:28:5f:0a:9e:e3:27:e6:98:2c:db:59:62:4e:b4:
         52:5a:53:43:08:d4:bc:26:e3:8f:66:1a:3c:8a:dd:c9:32:e7:
         41:63:12:59:bf:0a:d7:ec:c6:a6:a6:7d:90:e5:bf:47:47:92:
         c2:c7:25:98:0e:df:fe:7e:38:13:30:b3:f9:9a:54:a6:dd:4a:
         cb:81:db:43:40:62:76:64:6b:22:af:61:59:6c:bb:39:e7:83:
         e8:1e:46:f2:16:3c:df:0d:f7:ff:c3:3b:20:dc:b3:72:49:20:
         17:e3:c2:01:76:a5:8f:f3:e9:3a:1e:db:cd:8d:6f:81:99:36:
         95:0f:d5:10:11:23:d2:dd:61:20:34:38:0a:d2:44:9d:e4:7b:
         e4:12:cb:21:aa:58:fd:49:16:d6:d4:f3:0e:5e:8e:86:57:32:
         4d:ce:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:15 2026 by rpki-client