Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137362e302f32322d3234203d3e2034383038.roa
File:                     3130332e38352e3137362e302f32322d3234203d3e2034383038.roa (raw, json)
Hash identifier:          Az/2I5lBZ/8pCWOufPh5clQNJa6QTQGZMR6SSGFSYqw=
Subject key identifier:   D6:60:3A:2B:4C:4F:E4:26:C6:76:9E:08:EE:EF:6C:2D:BF:6B:75:93
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       43ABA857DCFB577365A146438BCF6FA60011E49A
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137362e302f32322d3234203d3e2034383038.roa
Signing time:             Fri 29 May 2026 13:32:27 +0000
ROA not before:           Fri 29 May 2026 13:27:27 +0000
ROA not after:            Fri 28 May 2027 13:32:27 +0000
asID:                     4808
IP address blocks:        103.85.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ab:a8:57:dc:fb:57:73:65:a1:46:43:8b:cf:6f:a6:00:11:e4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: May 29 13:27:27 2026 GMT
            Not After : May 28 13:32:27 2027 GMT
        Subject: CN=D6603A2B4C4FE426C6769E08EEEF6C2DBF6B7593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:4d:5a:8f:d2:86:6f:39:1b:e6:5a:f9:a2:
                    14:b0:57:d0:b5:55:f5:e9:0c:6c:09:e0:a7:bc:ae:
                    76:3b:85:f1:9e:b7:e8:ba:ac:69:07:5b:96:98:82:
                    8f:de:5d:0c:f6:1a:a4:01:91:e6:2a:06:9c:2a:97:
                    58:40:49:6c:e2:b7:02:10:4e:8e:ee:1a:ad:0d:02:
                    f5:04:8d:50:55:a4:57:87:6f:0f:a5:22:af:0a:89:
                    a1:75:32:d9:8e:5d:46:79:2c:a7:b0:c7:1f:9e:7f:
                    74:af:25:ce:a1:c1:65:3b:a7:b9:60:e0:6e:98:99:
                    75:f1:ee:7e:af:48:01:1d:d9:7b:6e:ee:76:9a:b7:
                    3d:0a:03:8f:5f:7d:1e:78:31:1c:c0:74:8b:c3:e5:
                    a9:b0:42:30:3c:47:9d:05:36:65:f0:23:64:50:07:
                    c4:0b:b8:64:bf:48:76:6a:c1:fe:5c:e7:f5:71:6d:
                    bb:89:f8:32:37:ac:5c:7c:27:89:c0:ed:e7:88:b0:
                    09:44:ea:b9:7e:49:ba:f3:8c:47:d3:21:2a:b9:72:
                    a7:38:a0:1c:bb:d3:3b:9c:35:ab:cc:a0:d3:99:77:
                    7a:76:28:4d:0e:eb:9b:c2:53:a0:b4:9c:c8:7f:a1:
                    d8:20:1c:f8:1d:55:fe:09:48:63:9e:50:55:4c:04:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:60:3A:2B:4C:4F:E4:26:C6:76:9E:08:EE:EF:6C:2D:BF:6B:75:93
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137362e302f32322d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:44:9c:7b:84:c0:73:66:eb:4f:d1:73:87:c8:8e:58:bd:0a:
         90:98:84:68:86:f8:56:ff:00:9d:ee:98:27:ea:0a:66:ab:9e:
         93:a5:d3:f2:8e:90:13:36:54:5f:14:fb:17:69:12:a2:9f:43:
         85:e0:30:e4:d5:a6:22:34:3d:12:d1:e4:0e:f3:cd:84:7c:43:
         59:d8:60:53:1d:e1:70:6b:4b:93:b8:dc:9f:ef:9b:2b:78:44:
         53:d2:47:74:1e:dc:e9:8e:44:d9:66:e3:8e:81:14:13:97:1c:
         25:fb:d8:b3:1b:79:19:d6:2e:f6:f3:3b:65:1f:a2:04:0f:7e:
         00:5c:2b:de:76:4d:10:44:6d:91:5f:91:7b:5f:97:83:34:43:
         5d:92:2a:6d:1e:dc:e1:3e:18:07:70:48:7e:7e:52:34:9d:2e:
         2a:46:c9:ad:f2:94:37:89:8e:11:40:8e:0e:f6:72:28:07:bb:
         7c:e2:e2:47:8b:0f:d0:8f:80:dd:b8:d4:80:2a:a0:1e:54:aa:
         79:c1:68:10:bc:b0:1e:31:67:7e:43:aa:bc:3d:bd:cb:e2:63:
         a1:78:9e:2f:38:4e:f6:1a:12:03:e1:29:e7:97:9a:01:0a:4d:
         b3:b4:b8:93:1d:19:04:f0:3a:23:6b:67:2e:38:c7:28:78:88:
         3d:9e:a9:d2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUQ6uoV9z7V3NloUZDi89vpgAR5JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3
RDI3NzVDOTAeFw0yNjA1MjkxMzI3MjdaFw0yNzA1MjgxMzMyMjdaMDMxMTAvBgNV
BAMTKEQ2NjAzQTJCNEM0RkU0MjZDNjc2OUUwOEVFRUY2QzJEQkY2Qjc1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3U1aj9KGbzkb5lr5ohSwV9C1
VfXpDGwJ4Ke8rnY7hfGet+i6rGkHW5aYgo/eXQz2GqQBkeYqBpwql1hASWzitwIQ
To7uGq0NAvUEjVBVpFeHbw+lIq8KiaF1MtmOXUZ5LKewxx+ef3SvJc6hwWU7p7lg
4G6YmXXx7n6vSAEd2Xtu7naatz0KA49ffR54MRzAdIvD5amwQjA8R50FNmXwI2RQ
B8QLuGS/SHZqwf5c5/VxbbuJ+DI3rFx8J4nA7eeIsAlE6rl+SbrzjEfTISq5cqc4
oBy70zucNavMoNOZd3p2KE0O65vCU6C0nMh/odggHPgdVf4JSGOeUFVMBP3vAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU1mA6K0xP5CbGdp4I7u9sLb9rdZMwHwYDVR0j
BBgwFoAUsoJ0pxih/pp0525HeweQYH0ndckwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjcyNDMzMTczNTAyMzYzMy8wL0IyODI3NEE3MThBMUZFOUE3NEU3NkU0NzdCMDc5
MDYwN0QyNzc1QzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3RDI3NzVDOS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNzI0MzMxNzM1MDIzNjMzLzAvMzEzMDMzMmUzODM1
MmUzMTM3MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdVsDANBgkqhkiG9w0BAQsFAAOCAQEAsUSce4TAc2brT9Fzh8iOWL0KkJiE
aIb4Vv8Ane6YJ+oKZquek6XT8o6QEzZUXxT7F2kSop9DheAw5NWmIjQ9EtHkDvPN
hHxDWdhgUx3hcGtLk7jcn++bK3hEU9JHdB7c6Y5E2WbjjoEUE5ccJfvYsxt5GdYu
9vM7ZR+iBA9+AFwr3nZNEERtkV+Re1+XgzRDXZIqbR7c4T4YB3BIfn5SNJ0uKkbJ
rfKUN4mOEUCODvZyKAe7fOLiR4sP0I+A3bjUgCqgHlSqecFoELywHjFnfkOqvD29
y+JjoXieLzhO9hoSA+Ep55eaAQpNs7S4kx0ZBPA6I2tnLjjHKHiIPZ6p0g==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:21 2026 by rpki-client