Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136372e302f32342d3234203d3e2034383437.roa
File:                     3130332e38352e3136372e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          znfDzW/PKRoCmvdMO5rlr7l3S/UM2QK1OEme67WQsyA=
Subject key identifier:   AF:56:5F:2C:71:C8:E2:82:39:98:F2:98:6A:0B:18:74:A8:19:E8:5B
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       4BC77F4316C33C01F68BF763364CBE8F64494813
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136372e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 09:15:20 +0000
ROA not before:           Thu 04 Jun 2026 09:10:20 +0000
ROA not after:            Thu 03 Jun 2027 09:15:20 +0000
asID:                     4847
IP address blocks:        103.85.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c7:7f:43:16:c3:3c:01:f6:8b:f7:63:36:4c:be:8f:64:49:48:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:10:20 2026 GMT
            Not After : Jun  3 09:15:20 2027 GMT
        Subject: CN=AF565F2C71C8E2823998F2986A0B1874A819E85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:30:20:5d:1e:97:d9:cb:ca:b6:88:ad:88:
                    32:0f:a1:75:c3:8b:47:96:01:fc:19:8c:a5:41:db:
                    3d:b3:07:e3:fc:a4:a0:d8:b6:c7:97:a1:6d:5f:d5:
                    6b:cb:de:b9:d3:4c:ee:6c:2c:a8:34:b6:2c:e6:df:
                    c8:4f:26:66:67:4c:0a:73:80:13:a0:45:04:1c:7f:
                    c0:0e:a5:b0:00:ef:24:95:e7:22:94:48:69:eb:bc:
                    05:f9:84:db:7d:0d:f7:4c:c0:0d:b7:9a:97:fa:f6:
                    c0:f2:4e:f6:35:ff:4d:78:d2:4a:05:a2:5e:0c:0f:
                    12:ef:61:99:5b:8e:1e:51:e1:c9:a2:c8:02:fe:94:
                    f2:bc:17:49:74:8c:ba:f5:34:80:0a:08:db:d0:10:
                    f5:69:41:d0:30:4c:34:2d:d5:63:ed:d1:ad:63:83:
                    f4:54:49:d6:a0:a5:3b:7c:e7:8e:80:c5:22:c4:fd:
                    aa:1c:e0:d0:58:21:32:63:73:96:33:05:ea:3a:c7:
                    01:ad:78:df:0d:3b:91:6a:27:2a:ff:e0:ad:43:cc:
                    87:f8:88:0c:e7:96:b3:92:61:bb:dc:0b:8b:9b:74:
                    ca:98:dd:20:34:a9:ac:a0:98:0a:39:6a:35:24:c4:
                    e8:87:44:7b:7f:94:85:ee:9b:8b:67:31:df:21:dd:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:56:5F:2C:71:C8:E2:82:39:98:F2:98:6A:0B:18:74:A8:19:E8:5B
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3136372e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:b8:8c:58:f7:38:3e:2e:db:18:ca:84:9b:35:ca:32:f5:
         49:a0:d7:ca:86:8b:84:08:10:b4:f0:35:46:41:2a:16:e8:6a:
         46:f3:dd:89:71:8a:b7:23:bf:9e:98:d4:a2:2e:ec:59:11:68:
         d5:61:ef:4c:77:23:27:9f:dd:01:99:39:63:2c:0c:80:e5:10:
         d6:33:f7:d6:42:f2:6f:95:b8:23:9e:3b:f8:3f:8f:8a:7c:bd:
         59:56:d2:d6:cf:dd:9d:73:e5:6b:aa:fe:63:f0:e2:22:cd:ec:
         14:d1:f4:82:b7:14:42:7c:7c:53:d9:08:d0:96:a3:c8:43:64:
         24:be:1d:e6:66:61:2c:6a:55:be:21:42:30:34:62:24:48:3d:
         be:64:76:73:25:a3:92:30:10:4b:2c:25:ac:79:f8:e2:94:e2:
         b7:1a:ed:5b:ca:f0:0b:87:23:dc:f0:a2:fe:a1:a0:e3:88:c2:
         7c:a0:dc:2e:62:be:ba:ad:4f:bc:2c:11:72:61:7a:24:e8:6c:
         be:c9:cb:00:b0:8a:91:9b:5e:12:e5:aa:69:6a:3a:e0:aa:f0:
         48:6d:1c:00:d5:23:4d:59:97:9e:ba:97:a4:4a:2f:d0:c0:27:
         21:04:5d:79:77:e8:3a:52:d4:d8:4f:ea:11:35:3a:5c:7c:79:
         15:26:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:47 2026 by rpki-client