Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39312e3137382e302f32342d3234203d3e2034383437.roa
File:                     3130332e39312e3137382e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          zySeq34C3q5oacW6M2AaEG1/EoLgPODQ1Z6WQu7WtFo=
Subject key identifier:   E7:8D:0A:79:27:94:DE:C4:CB:D1:BF:21:7A:9A:EA:ED:3E:FF:E0:34
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       103BF59E531D7B0FA761A9441D27C977CCA1A98A
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39312e3137382e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 09:01:33 +0000
ROA not before:           Thu 04 Jun 2026 08:56:33 +0000
ROA not after:            Thu 03 Jun 2027 09:01:33 +0000
asID:                     4847
IP address blocks:        103.91.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3b:f5:9e:53:1d:7b:0f:a7:61:a9:44:1d:27:c9:77:cc:a1:a9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 08:56:33 2026 GMT
            Not After : Jun  3 09:01:33 2027 GMT
        Subject: CN=E78D0A792794DEC4CBD1BF217A9AEAED3EFFE034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:44:53:23:85:3b:22:39:e5:8c:55:ca:45:
                    3e:3c:b7:b0:be:fc:c4:71:31:c8:b2:2b:88:7f:95:
                    94:d5:72:4a:ca:ed:23:7e:90:11:48:ed:97:e1:4a:
                    0f:35:34:56:90:39:f5:78:db:e5:d3:a7:a0:e1:04:
                    8e:51:36:46:d0:30:93:20:67:4e:1e:9a:10:c3:11:
                    dd:64:c3:85:b5:32:8b:23:e1:6b:7e:38:fa:8a:40:
                    90:cb:03:3b:cc:54:19:dd:4e:e6:af:13:6e:6b:51:
                    53:df:6f:c6:47:e5:d5:df:82:0f:75:14:b6:00:26:
                    9d:e1:be:c2:ef:77:81:f7:2e:8f:c0:5e:19:ae:b3:
                    fd:ff:b5:a8:eb:23:2a:24:f7:ad:4c:0c:69:4e:0d:
                    b5:28:30:1b:88:eb:43:0d:c5:c5:6d:04:a9:fd:a0:
                    9a:4c:af:cf:40:13:5d:91:8d:7f:7c:f2:d2:42:14:
                    7d:02:18:60:d4:05:55:97:d2:1f:27:f7:32:0a:e5:
                    f9:5d:8f:c6:2d:7a:f6:f5:fd:02:e4:c8:9c:9e:55:
                    e4:0c:a9:9c:52:68:65:50:60:52:57:fe:63:92:39:
                    eb:de:dc:76:89:cf:84:fb:1f:8b:72:dd:95:4b:a6:
                    42:3a:4b:2d:92:cc:96:db:22:a3:81:58:33:a6:af:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:0A:79:27:94:DE:C4:CB:D1:BF:21:7A:9A:EA:ED:3E:FF:E0:34
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39312e3137382e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:37:c2:a4:03:a2:ae:0b:e0:53:6d:1f:96:01:fb:d2:3e:4e:
         5b:16:eb:f2:bf:ca:ec:ee:e8:31:a0:47:cd:d2:15:4d:2c:16:
         51:63:9e:40:11:b4:36:8e:ed:72:39:c4:47:5a:5c:18:f1:03:
         c8:39:7f:8a:3d:47:94:f3:69:67:98:8a:b8:04:da:73:a2:be:
         63:68:67:9d:d0:ba:70:89:d2:f1:c0:23:bd:6a:68:9e:0c:a4:
         f2:52:89:e6:02:66:5a:31:d2:b4:0b:c6:34:3e:1b:fc:2c:e6:
         f6:c8:7d:53:c8:eb:12:5d:3b:68:b8:0e:ee:a6:58:23:ee:73:
         75:92:d3:c0:31:62:4c:d1:b6:03:ba:62:3b:fb:64:ef:85:6a:
         7c:ce:be:81:35:10:cd:68:a8:f6:0b:ef:f1:dd:c0:1c:51:1b:
         74:a3:99:18:f4:c5:6b:22:2b:25:05:29:cb:b0:0a:c2:2f:ad:
         04:85:07:01:d0:1d:f8:50:9f:7f:db:c1:60:34:ed:74:92:e2:
         73:75:e6:f0:d2:6a:94:49:cd:fc:12:a3:40:5f:a0:29:42:ae:
         81:ab:fc:aa:6d:98:02:9b:46:c5:75:0e:93:22:f4:2e:04:c1:
         80:53:b6:37:44:4d:72:49:2b:a4:82:d2:3d:bf:8d:77:dd:6d:
         0b:ed:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:24 2026 by rpki-client