Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133392e302f32342d3234203d3e2034383437.roa
File:                     3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=
Subject key identifier:   4B:DB:F3:09:91:C6:D4:C5:8C:31:53:F9:CD:68:74:DE:61:CE:10:A0
Certificate issuer:       /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Certificate serial:       2A45D3E753DC248C1A29BC3F462F7162AE1AA9A0
Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133392e302f32342d3234203d3e2034383437.roa
Signing time:             Tue 02 Jun 2026 07:36:57 +0000
ROA not before:           Tue 02 Jun 2026 07:31:57 +0000
ROA not after:            Tue 01 Jun 2027 07:36:57 +0000
asID:                     4847
IP address blocks:        103.57.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:45:d3:e7:53:dc:24:8c:1a:29:bc:3f:46:2f:71:62:ae:1a:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
        Validity
            Not Before: Jun  2 07:31:57 2026 GMT
            Not After : Jun  1 07:36:57 2027 GMT
        Subject: CN=4BDBF30991C6D4C58C3153F9CD6874DE61CE10A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:d8:3a:8b:85:dc:a8:f2:0e:97:b8:98:9a:
                    dd:0d:b0:65:33:18:94:13:b2:2e:76:ef:cd:f4:e9:
                    b8:65:45:3c:2d:d3:28:0c:ed:17:db:2c:5c:8f:ab:
                    e4:87:b8:bc:fb:b1:75:10:eb:a5:a8:53:1c:ef:0c:
                    2c:94:d8:05:5f:58:1f:fa:ca:e9:0d:e7:75:74:32:
                    64:b1:73:64:81:a4:5a:20:74:a2:5e:cf:59:6e:18:
                    e2:d8:8a:b9:a6:cd:60:63:75:d5:e7:1c:1b:5c:a7:
                    6c:84:1e:cc:5a:fd:7a:d8:96:8a:9c:c4:81:fd:ef:
                    2c:b8:1e:ed:9e:82:1b:be:b8:54:30:d2:98:d3:de:
                    d7:c4:ae:b8:40:89:61:8c:4e:5b:e7:5b:50:ef:2c:
                    29:83:b7:79:2b:e2:a8:1e:2f:64:8e:53:4c:64:d1:
                    0e:51:0c:5d:1f:59:3b:a9:10:c8:5d:ea:72:04:fc:
                    15:8e:18:04:3b:8f:57:3f:1b:cf:45:50:b0:9f:e4:
                    fd:63:49:15:f9:82:af:4c:ac:e8:9d:56:4c:45:e7:
                    69:e8:76:f8:8d:a0:de:d9:ec:c3:cf:ee:30:57:ed:
                    f4:7e:72:0f:49:e0:f4:e6:a3:44:79:4d:ed:d9:02:
                    61:a5:38:2b:0c:08:82:c1:ce:32:13:c3:40:a3:50:
                    3d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:F3:09:91:C6:D4:C5:8C:31:53:F9:CD:68:74:DE:61:CE:10:A0
            X509v3 Authority Key Identifier:
                keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133392e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:4b:68:1a:f6:3b:eb:cf:c1:28:6c:26:a1:62:b7:45:80:7f:
         aa:4b:d1:ad:92:5a:d1:03:a4:ef:0c:bb:b1:02:19:60:67:63:
         24:43:ca:c0:50:17:f3:59:94:2e:37:03:a2:a0:30:c6:88:fe:
         ac:24:5c:cd:f0:1b:a5:04:7d:b2:fb:b1:c1:d1:bc:de:de:97:
         81:5f:f5:e5:ec:e4:73:44:7e:85:ca:c5:f9:67:58:36:2d:58:
         5e:57:85:f5:5f:bb:d0:88:d5:a5:19:40:49:05:cb:c1:8c:7e:
         63:30:83:46:23:f3:3c:dc:a1:bf:d0:bd:d9:78:a0:46:90:4e:
         15:6e:ce:68:d1:a6:ce:e5:a8:42:b0:6c:84:75:97:fc:ad:3c:
         12:e9:95:04:db:ba:13:87:7c:c2:49:55:c4:e5:f3:4f:e4:46:
         eb:a7:64:88:81:e0:13:e3:e5:85:80:f1:c6:b4:36:ab:22:14:
         3b:d8:a2:fc:8b:b1:07:d2:15:5e:b5:2f:80:3a:0a:4f:39:bd:
         e3:59:24:eb:10:8f:c3:39:e8:93:45:ed:c8:5b:92:64:88:d0:
         95:d4:74:62:87:77:30:7b:cb:6f:5f:b6:f6:22:dd:05:99:7a:
         f7:9a:f7:da:bf:70:78:b3:f4:81:fa:7f:0b:17:d3:f1:ca:ec:
         a5:e4:26:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:46 2026 by rpki-client