Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137322e302f32332d3234203d3e2034383437.roa
File:                     3130332e38352e3137322e302f32332d3234203d3e2034383437.roa (raw, json)
Hash identifier:          dC7/vYpWIv2Q4Mvy8udMXS2oUSJguHRKxGB1BaMrj9k=
Subject key identifier:   04:48:9A:58:D8:2F:EE:A2:7A:E5:03:B4:C2:8D:51:86:B5:BE:7A:67
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       6F1E9C0DE0E04EB6C0C9E131BE4F30B21D6972DF
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137322e302f32332d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 09:20:01 +0000
ROA not before:           Thu 04 Jun 2026 09:15:01 +0000
ROA not after:            Thu 03 Jun 2027 09:20:01 +0000
asID:                     4847
IP address blocks:        103.85.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1e:9c:0d:e0:e0:4e:b6:c0:c9:e1:31:be:4f:30:b2:1d:69:72:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:15:01 2026 GMT
            Not After : Jun  3 09:20:01 2027 GMT
        Subject: CN=04489A58D82FEEA27AE503B4C28D5186B5BE7A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:25:6c:8e:c5:6e:c8:39:be:77:78:e7:20:
                    0f:99:e2:91:20:b2:52:b2:44:12:98:b9:d5:3e:60:
                    96:f0:1f:ad:a4:ef:57:db:a4:a6:d7:46:79:e7:2b:
                    75:67:3e:84:ae:20:e8:7c:39:c1:93:6a:8b:d0:07:
                    88:e9:c2:56:c4:7e:26:6b:72:4d:18:fd:9f:e9:25:
                    b8:20:5b:12:34:03:2e:04:b0:91:7c:ff:51:db:97:
                    77:29:ea:d6:6b:64:e9:51:df:14:73:6d:5d:9f:81:
                    5c:13:64:5d:90:bc:d8:df:0b:69:7e:e0:8b:4c:8f:
                    2c:ff:09:6b:b6:27:15:be:19:e4:26:6c:1d:fb:77:
                    8e:da:ca:a0:b4:c2:34:15:24:85:62:04:c1:07:e1:
                    eb:dd:59:de:1c:a4:ea:04:0e:e4:c3:6f:a8:be:83:
                    34:55:64:e8:06:3c:71:22:68:4b:70:2c:20:16:4e:
                    15:54:4e:bd:7d:8f:4d:04:a4:de:de:a7:97:7f:47:
                    84:3f:2d:61:0a:b7:b4:f3:2e:68:1c:31:0a:9c:0b:
                    ec:2e:05:c1:fe:30:e0:28:65:24:5b:c0:98:a7:f2:
                    3f:e6:a9:13:1e:2c:a8:3a:62:21:2e:b9:83:e4:17:
                    04:23:9c:c8:cb:c4:67:12:b7:8d:e9:b5:11:52:24:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:48:9A:58:D8:2F:EE:A2:7A:E5:03:B4:C2:8D:51:86:B5:BE:7A:67
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137322e302f32332d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:d5:cd:37:71:77:45:00:1a:f2:71:17:bb:20:b9:ba:6c:9f:
         1d:2c:bd:7b:3c:bb:cf:e5:d9:79:d0:c3:09:4d:aa:2a:36:6b:
         e6:2b:fa:84:fd:d0:ed:ae:73:5f:1a:d9:bf:c3:49:f9:ec:2a:
         3b:2e:7a:23:3b:95:4f:6a:b6:18:56:be:50:3c:98:09:41:9a:
         f7:e2:31:62:35:cd:fa:a5:e6:75:db:f1:9b:83:d6:dc:2e:d9:
         e0:b6:d1:22:6f:97:9e:a6:f1:27:83:d0:37:ce:28:be:2d:23:
         80:70:d9:45:d4:3d:66:4c:03:6f:7d:0d:c1:5f:3d:64:17:74:
         ce:dd:9d:65:09:cf:9c:fa:c1:06:ee:f7:0f:56:fd:82:e9:54:
         37:b9:b4:19:2f:ba:66:f4:3b:ec:b1:28:0d:6d:de:29:6d:a2:
         38:63:ae:ac:13:f3:0f:21:79:f2:62:f8:e8:4b:11:03:c5:66:
         f9:fc:a1:f8:64:b0:ae:84:74:23:98:39:40:48:c7:4d:b9:fa:
         03:8f:4b:f1:c9:08:c2:4c:9f:59:a1:71:ad:de:af:ad:73:49:
         ce:e5:59:23:82:b0:9c:3e:32:85:7a:70:fb:f2:c0:7e:69:ad:
         13:20:6a:95:a7:bd:c2:5c:3c:91:6c:62:7f:fe:34:9c:a4:20:
         86:97:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:52 2026 by rpki-client