Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137302e302f32342d3234203d3e2034383437.roa
File:                     3130332e38352e3137302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          /q7CXcrJF81nrM/giDMg/g5NBtVsWxZD0yj/j8JjO1Y=
Subject key identifier:   1A:9C:57:82:48:CC:1F:BF:F0:B3:C9:63:59:3E:7E:02:B8:6F:B2:06
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       63A3410A45A6EC3B18FEAC6D0DE4B786465DA935
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137302e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 09:16:47 +0000
ROA not before:           Thu 04 Jun 2026 09:11:47 +0000
ROA not after:            Thu 03 Jun 2027 09:16:47 +0000
asID:                     4847
IP address blocks:        103.85.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a3:41:0a:45:a6:ec:3b:18:fe:ac:6d:0d:e4:b7:86:46:5d:a9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:11:47 2026 GMT
            Not After : Jun  3 09:16:47 2027 GMT
        Subject: CN=1A9C578248CC1FBFF0B3C963593E7E02B86FB206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:0d:98:80:2d:dd:8f:5e:f8:bc:46:27:31:
                    70:d9:29:6c:81:ea:15:c0:3f:b0:95:ba:9d:f7:df:
                    7f:ab:f2:98:00:00:a0:03:d7:b9:4c:5f:c7:1c:84:
                    0d:01:1d:15:b1:c7:d9:82:5e:8d:d1:9a:a6:96:87:
                    15:9c:38:1c:04:e9:c1:98:38:bf:b1:ad:50:6f:f5:
                    48:b0:d8:ee:29:a8:ba:dd:c6:2a:bd:d1:06:54:00:
                    51:a7:49:26:c1:b4:76:be:92:90:9a:5c:f7:ea:52:
                    1b:d4:0a:df:76:54:36:b2:69:95:30:e8:9e:fa:98:
                    6a:2c:cb:a0:63:50:09:c5:28:5e:9b:6d:25:1e:fd:
                    64:51:ab:79:dd:d4:0b:b9:29:6b:db:7b:81:80:b1:
                    64:eb:4f:e3:12:8f:2e:13:16:68:84:95:29:6f:39:
                    3f:f0:7b:81:58:d0:32:cb:cf:7e:a9:a9:fb:6e:87:
                    ce:c6:9f:88:07:37:f6:fe:84:ac:c6:95:13:9d:04:
                    3b:74:d9:52:50:4b:24:ff:24:e1:e7:68:81:2e:8a:
                    e8:19:22:2c:db:52:43:ad:15:c9:68:72:46:d6:fe:
                    a9:ea:81:b4:4b:df:14:c7:25:7a:3b:27:20:3c:b3:
                    c2:b7:0a:ef:49:86:86:ef:66:ae:14:5b:57:2a:ea:
                    9f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9C:57:82:48:CC:1F:BF:F0:B3:C9:63:59:3E:7E:02:B8:6F:B2:06
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137302e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:82:fb:6c:24:76:f3:74:f8:59:67:07:98:50:1f:0c:8b:b5:
         0f:96:cc:78:4f:fd:8f:8d:27:d3:24:a1:8f:a7:10:dc:95:b4:
         5c:d7:c9:32:00:f4:be:f1:c2:8b:16:1c:91:ec:d7:d2:95:e4:
         af:29:fc:69:35:d5:d3:79:e8:0b:cd:00:00:d6:e7:83:d0:48:
         23:81:52:31:74:32:cc:4b:dc:75:e5:65:b4:7f:1b:35:b2:d1:
         9f:1f:d6:af:c7:b0:74:ca:26:0a:50:7a:46:9d:b7:fb:2d:22:
         6e:d4:02:d6:61:5d:4f:68:7e:27:e0:b8:f8:45:6d:cb:a4:d8:
         78:b2:76:9e:9b:fa:e2:44:e4:9c:d0:46:e2:17:05:11:b4:f8:
         2e:6b:6f:42:fc:32:ac:8f:89:74:45:37:38:e7:85:29:3a:a8:
         e3:7d:6d:e6:2a:f1:ca:e1:b0:58:d2:cc:5b:b9:dd:e6:cd:41:
         83:9a:ad:67:8a:f9:82:11:10:a8:52:dc:52:4f:44:75:57:b7:
         f7:1e:67:d6:9b:57:dc:af:50:88:92:e3:a3:d6:8a:05:2d:aa:
         06:6a:0d:61:2b:37:89:9b:a8:a1:90:01:86:46:44:2f:c3:7e:
         15:e5:bb:dd:b7:a4:02:92:3b:50:a2:d1:1b:0b:ed:39:c7:78:
         7f:8e:e4:1a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUY6NBCkWm7DsY/qxtDeS3hkZdqTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3
RDI3NzVDOTAeFw0yNjA2MDQwOTExNDdaFw0yNzA2MDMwOTE2NDdaMDMxMTAvBgNV
BAMTKDFBOUM1NzgyNDhDQzFGQkZGMEIzQzk2MzU5M0U3RTAyQjg2RkIyMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gA2YgC3dj174vEYnMXDZKWyB
6hXAP7CVup3333+r8pgAAKAD17lMX8cchA0BHRWxx9mCXo3RmqaWhxWcOBwE6cGY
OL+xrVBv9Uiw2O4pqLrdxiq90QZUAFGnSSbBtHa+kpCaXPfqUhvUCt92VDayaZUw
6J76mGosy6BjUAnFKF6bbSUe/WRRq3nd1Au5KWvbe4GAsWTrT+MSjy4TFmiElSlv
OT/we4FY0DLLz36pqftuh87Gn4gHN/b+hKzGlROdBDt02VJQSyT/JOHnaIEuiugZ
IizbUkOtFclockbW/qnqgbRL3xTHJXo7JyA8s8K3Cu9JhobvZq4UW1cq6p8BAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUGpxXgkjMH7/ws8ljWT5+ArhvsgYwHwYDVR0j
BBgwFoAUsoJ0pxih/pp0525HeweQYH0ndckwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjcyNDMzMTczNTAyMzYzMy8wL0IyODI3NEE3MThBMUZFOUE3NEU3NkU0NzdCMDc5
MDYwN0QyNzc1QzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3RDI3NzVDOS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNzI0MzMxNzM1MDIzNjMzLzAvMzEzMDMzMmUzODM1
MmUzMTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdVqjANBgkqhkiG9w0BAQsFAAOCAQEAIoL7bCR283T4WWcHmFAfDIu1D5bM
eE/9j40n0yShj6cQ3JW0XNfJMgD0vvHCixYckezX0pXkryn8aTXV03noC80AANbn
g9BII4FSMXQyzEvcdeVltH8bNbLRnx/Wr8ewdMomClB6Rp23+y0ibtQC1mFdT2h+
J+C4+EVty6TYeLJ2npv64kTknNBG4hcFEbT4LmtvQvwyrI+JdEU3OOeFKTqo431t
5irxyuGwWNLMW7nd5s1Bg5qtZ4r5ghEQqFLcUk9EdVe39x5n1ptX3K9QiJLjo9aK
BS2qBmoNYSs3iZuooZABhkZEL8N+FeW73bekApI7UKLRGwvtOcd4f47kGg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:12 2026 by rpki-client