Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39302e3139302e302f32332d3234203d3e2034383038.roa
File:                     3130332e39302e3139302e302f32332d3234203d3e2034383038.roa (raw, json)
Hash identifier:          9NLQGjkIwsj/HBdrJZ1xwQ1GOUzl+07Ohv7LZcz2O/s=
Subject key identifier:   78:08:0E:42:96:3E:EE:A4:33:1B:D1:04:21:76:FD:F5:D7:53:EB:61
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       76D8BE01B12C58BB66B01AE7D4D7B6B4C3480F3C
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39302e3139302e302f32332d3234203d3e2034383038.roa
Signing time:             Fri 29 May 2026 13:35:31 +0000
ROA not before:           Fri 29 May 2026 13:30:31 +0000
ROA not after:            Fri 28 May 2027 13:35:31 +0000
asID:                     4808
IP address blocks:        103.90.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 14:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d8:be:01:b1:2c:58:bb:66:b0:1a:e7:d4:d7:b6:b4:c3:48:0f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: May 29 13:30:31 2026 GMT
            Not After : May 28 13:35:31 2027 GMT
        Subject: CN=78080E42963EEEA4331BD1042176FDF5D753EB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:2d:2d:ca:63:8d:30:6d:2f:60:4e:c7:37:
                    6a:1b:e5:c1:a6:36:35:da:37:5e:96:28:7b:52:0e:
                    2c:f6:c0:91:36:6b:9f:53:08:b2:99:1a:a0:c7:92:
                    73:c4:fe:8c:27:12:70:5c:59:66:2d:32:c1:a5:a9:
                    76:32:e6:cf:fa:08:e9:77:e2:ad:63:f4:2c:9f:19:
                    76:2b:d8:fb:78:8f:de:a1:01:84:cd:62:9e:56:4f:
                    9d:b7:b8:87:37:60:0f:d8:a3:9d:b6:0e:bb:8e:bb:
                    b3:2e:d4:8a:f9:fc:1d:e3:83:30:6c:e7:6b:e3:b4:
                    9b:87:56:11:3e:5a:47:a3:e8:ee:29:98:61:54:a4:
                    48:a8:e9:b4:e0:f1:7a:e4:16:d7:d5:57:21:95:79:
                    21:f1:65:36:c4:f5:f6:45:4b:06:1a:4e:6f:46:9c:
                    7f:44:5c:66:a3:e7:12:03:69:36:e0:32:25:a4:93:
                    f7:dd:65:a3:4a:69:16:89:49:3e:ee:1a:6b:8a:6a:
                    1d:3e:25:4d:38:f3:6d:43:c3:fd:e6:31:7f:c7:57:
                    c1:ed:2a:30:4b:f4:cf:90:52:ba:c8:9c:5b:cc:c1:
                    f8:61:d1:d0:9c:fc:cf:02:eb:e3:c0:6a:72:91:2b:
                    ee:de:e7:9e:a7:bf:86:18:61:82:14:07:4b:17:97:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:08:0E:42:96:3E:EE:A4:33:1B:D1:04:21:76:FD:F5:D7:53:EB:61
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39302e3139302e302f32332d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:67:a3:0a:1a:94:d6:64:6f:af:4a:6f:4e:84:47:9b:84:d8:
         8c:31:f7:6c:59:bf:50:55:27:2e:97:b1:aa:da:d2:23:10:a9:
         b3:2a:b0:2b:72:ae:c9:c3:7d:37:32:4f:98:6f:d7:97:b0:1f:
         40:33:02:3a:51:b3:98:f2:61:9d:c6:e3:ae:d8:53:b2:21:67:
         a7:5d:63:e1:c2:47:3a:00:a4:53:ad:11:37:fd:68:b9:7f:43:
         88:d9:2e:84:3a:68:f3:ae:c8:67:31:ea:55:f4:17:e2:7b:a7:
         d5:0d:f7:2a:f8:fe:c5:b9:98:44:e6:1c:f9:57:42:a2:59:04:
         63:e7:b0:85:73:de:5e:2f:7c:db:1f:f6:6c:1e:0c:6d:87:1e:
         89:e8:6f:1f:6b:4f:7a:78:7e:96:22:90:51:0f:1c:cc:e1:5c:
         8f:f7:fb:a8:d8:83:45:7e:28:f3:d2:ef:02:26:67:ca:6c:83:
         e7:36:e6:05:f2:5d:b9:49:91:db:40:32:c7:a1:32:1b:84:10:
         10:2a:62:f0:a3:d5:f7:38:bb:28:b9:b4:cf:a4:66:fa:12:7e:
         2e:c9:0a:2e:9e:b7:b3:64:84:2e:7a:28:53:58:fd:68:e2:de:
         62:d1:2e:4f:5b:ba:2c:4c:cb:ed:20:dd:07:e6:7b:b6:fe:8c:
         91:35:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:51 2026 by rpki-client