Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137322e302f32322d3234203d3e2034383038.roa
File:                     3130332e38352e3137322e302f32322d3234203d3e2034383038.roa (raw, json)
Hash identifier:          kjrHs7+8fa5IaaI0TIJahnl0x2T3pCnSpi3rA07TdJ0=
Subject key identifier:   CD:3A:FC:81:B7:F6:40:02:CD:A3:7F:6C:AD:88:7F:A8:A3:83:1C:DA
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       101D13EFBBD8C505D72FE13F294564C29A0D5554
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137322e302f32322d3234203d3e2034383038.roa
Signing time:             Fri 29 May 2026 13:32:27 +0000
ROA not before:           Fri 29 May 2026 13:27:27 +0000
ROA not after:            Fri 28 May 2027 13:32:27 +0000
asID:                     4808
IP address blocks:        103.85.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1d:13:ef:bb:d8:c5:05:d7:2f:e1:3f:29:45:64:c2:9a:0d:55:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: May 29 13:27:27 2026 GMT
            Not After : May 28 13:32:27 2027 GMT
        Subject: CN=CD3AFC81B7F64002CDA37F6CAD887FA8A3831CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:95:99:e9:23:54:63:5c:96:35:a6:aa:6a:
                    c7:05:31:ef:0e:4f:2b:e1:0f:43:50:d0:0b:c2:36:
                    03:ff:25:ed:b4:a1:ee:3a:59:e8:5c:08:c8:7a:c6:
                    fd:22:b6:5f:b4:ad:38:e2:80:4a:fd:93:6a:73:05:
                    4c:c5:c6:70:5f:b2:1c:14:b1:b8:41:11:7f:9b:ee:
                    d8:97:d7:ac:da:32:28:2a:e9:52:84:ad:a3:8f:2a:
                    f3:e0:a0:64:3d:9f:18:03:f7:ce:3f:0b:9a:a4:a0:
                    4a:e2:0d:a7:e4:fb:f4:b7:cc:98:0c:f1:79:c3:4d:
                    7e:2d:c7:77:6a:a5:81:f1:39:c7:93:25:e1:0f:8d:
                    cd:d0:5b:7a:cb:bc:37:d7:c4:31:60:b8:9b:e2:3d:
                    c3:6c:80:ab:40:51:3c:6f:e9:88:b0:21:73:6d:02:
                    c5:a8:e6:17:9f:9d:25:d5:7c:39:3a:9c:a5:77:96:
                    52:fd:4b:07:ef:5c:4d:dd:73:f4:16:55:8e:6b:b4:
                    be:46:17:2a:2b:ca:10:88:8e:3e:e4:09:88:91:b1:
                    38:03:a1:37:b3:a0:05:50:f5:e9:a4:ae:e0:b5:26:
                    cc:b5:a2:3d:9a:29:81:8f:8d:7d:82:5f:0d:96:3b:
                    7b:bd:c5:ac:36:96:7c:49:46:97:8e:f8:d7:44:a8:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3A:FC:81:B7:F6:40:02:CD:A3:7F:6C:AD:88:7F:A8:A3:83:1C:DA
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137322e302f32322d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:58:7e:35:f3:09:7b:b2:58:ea:7f:2c:23:81:9b:76:e0:67:
         2a:dd:8d:ca:56:68:69:24:df:19:1e:f0:7d:c0:02:83:f1:3c:
         d0:2f:c2:15:60:c6:6d:e5:b6:89:77:27:63:9b:e5:3f:b4:f1:
         87:c3:29:f6:b7:ea:fa:f1:e3:49:98:b5:fc:8e:7d:95:bd:9a:
         48:ec:a8:83:6e:91:3b:3c:f1:2a:ea:a5:5f:f5:e1:a8:17:e0:
         8f:fc:39:6b:cb:42:4d:53:3b:94:af:24:f4:82:79:be:28:dd:
         a1:6a:5a:7c:77:9f:cc:74:af:69:83:a8:22:d4:88:48:24:e8:
         36:98:20:b9:92:75:c5:24:18:3d:6f:fd:08:3f:ae:a1:01:d3:
         f7:ed:fa:87:f7:1e:45:2e:b2:34:f8:bf:69:b1:f6:78:3b:4b:
         0f:6e:9b:19:d5:74:7c:24:a1:19:32:c1:ab:c8:6a:cf:1e:eb:
         f2:15:2a:30:0e:75:65:81:40:4e:86:2f:92:38:9d:76:94:e1:
         44:2e:d5:6a:d1:6c:d7:b2:1e:f0:2e:24:f9:11:eb:57:a3:af:
         02:24:7a:da:af:e6:f6:52:ec:1a:68:03:2b:7a:17:ad:80:b4:
         44:a9:70:72:b0:5e:6e:ba:33:84:a3:c0:a4:4f:c0:f7:6b:60:
         b7:86:84:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:50 2026 by rpki-client