Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa
File:                     3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa (raw, json)
Hash identifier:          UjzzAVTAPjmbxCOqtX5OnTgoTMEPz4NjCFbWABjcjYU=
Subject key identifier:   0B:42:2D:58:69:4D:09:9C:0D:AD:16:4D:3D:F4:85:10:EA:2E:32:40
Certificate issuer:       /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
Certificate serial:       79D70156E5061B9FAFD8C1FB2953686D59BECF19
Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa
Signing time:             Wed 10 Jun 2026 02:45:29 +0000
ROA not before:           Wed 10 Jun 2026 02:40:29 +0000
ROA not after:            Wed 09 Jun 2027 02:45:29 +0000
asID:                     45115
IP address blocks:        103.107.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d7:01:56:e5:06:1b:9f:af:d8:c1:fb:29:53:68:6d:59:be:cf:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5
        Validity
            Not Before: Jun 10 02:40:29 2026 GMT
            Not After : Jun  9 02:45:29 2027 GMT
        Subject: CN=0B422D58694D099C0DAD164D3DF48510EA2E3240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8b:db:8e:96:28:0c:d8:0e:d9:b4:3a:f7:2a:
                    50:d0:18:f0:f8:0c:e3:6b:57:35:88:db:26:ed:78:
                    4b:f3:16:0f:99:ce:2a:07:4b:61:3c:e7:8f:05:cd:
                    1b:57:5f:a0:ce:24:78:43:d6:dd:13:cc:25:62:6a:
                    94:9e:bd:68:df:f0:3f:99:61:b7:b4:0c:6c:b6:2a:
                    14:09:46:7a:52:8f:91:9c:fa:b3:a2:2a:6e:d5:e3:
                    ab:00:cd:bf:87:31:36:66:80:20:ce:62:00:80:bc:
                    9d:ba:aa:08:98:c7:be:2f:20:00:2a:bd:8c:9f:96:
                    09:bf:4b:97:6e:da:89:06:39:63:56:9a:43:1b:1c:
                    85:21:15:0e:7e:53:f5:1c:7f:b6:d0:3e:84:af:92:
                    96:7b:1e:c0:0c:47:1f:82:d8:f4:d2:93:55:17:9b:
                    fc:d5:db:be:43:39:1f:5d:b4:8c:d5:14:c1:76:a6:
                    fd:6b:e0:8f:46:e6:06:10:4c:b4:b3:50:88:41:45:
                    f9:35:8e:6a:c0:68:e5:5c:bc:ad:69:a1:73:68:ec:
                    64:82:de:d5:1a:8d:dd:ad:fa:2e:a5:5f:ee:0f:29:
                    74:d0:b1:97:2d:35:49:35:d8:23:de:54:ff:01:96:
                    8f:56:9c:16:8a:4f:dd:a1:46:f7:e6:4b:a3:fa:7e:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:42:2D:58:69:4D:09:9C:0D:AD:16:4D:3D:F4:85:10:EA:2E:32:40
            X509v3 Authority Key Identifier:
                keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e203435313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:8e:1d:1d:c7:5d:02:23:0f:bc:fc:f3:ce:9e:ee:84:84:
         49:22:fe:ba:32:ae:49:4e:5a:a4:8d:42:50:f3:76:e8:e0:9b:
         7d:d1:8e:d4:1f:66:91:4e:fa:0f:15:72:a2:c0:1c:eb:11:02:
         d2:a6:eb:37:62:f3:44:78:c2:19:19:1c:b7:b7:4a:49:b2:5e:
         58:23:2f:70:50:51:4c:89:b5:e4:db:3d:2f:1f:e4:07:9b:f4:
         b1:1e:02:0f:f7:16:96:36:ff:19:2e:a7:85:6c:51:11:03:5a:
         e2:c2:44:82:84:0c:e6:21:ce:aa:38:b6:37:2c:7e:1b:c7:87:
         86:cf:fd:e4:bf:b3:5c:08:44:5e:5f:a9:a7:fb:b8:91:56:bc:
         ed:36:e8:05:3c:9d:c8:25:9c:7a:e2:32:86:d9:04:42:56:39:
         ce:28:91:83:ec:1a:87:39:47:eb:eb:d2:7e:8f:61:a1:bb:50:
         0b:17:a0:4f:b6:35:1c:52:3a:37:5f:f4:6a:05:04:a2:fc:90:
         99:ba:8e:25:aa:e6:69:6b:22:0b:aa:46:71:a0:1e:8a:56:f0:
         72:24:07:43:5c:6a:46:15:d7:e2:cb:f2:7b:11:9e:b5:5d:fc:
         2f:4c:5d:ac:69:fb:d2:9a:a8:42:a1:74:72:63:10:93:3e:a9:
         a0:f1:30:a0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUedcBVuUGG5+v2MH7KVNobVm+zxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVD
REMxMTdCNTAeFw0yNjA2MTAwMjQwMjlaFw0yNzA2MDkwMjQ1MjlaMDMxMTAvBgNV
BAMTKDBCNDIyRDU4Njk0RDA5OUMwREFEMTY0RDNERjQ4NTEwRUEyRTMyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvi9uOligM2A7ZtDr3KlDQGPD4
DONrVzWI2ybteEvzFg+ZzioHS2E8548FzRtXX6DOJHhD1t0TzCViapSevWjf8D+Z
Ybe0DGy2KhQJRnpSj5Gc+rOiKm7V46sAzb+HMTZmgCDOYgCAvJ26qgiYx74vIAAq
vYyflgm/S5du2okGOWNWmkMbHIUhFQ5+U/Ucf7bQPoSvkpZ7HsAMRx+C2PTSk1UX
m/zV275DOR9dtIzVFMF2pv1r4I9G5gYQTLSzUIhBRfk1jmrAaOVcvK1poXNo7GSC
3tUajd2t+i6lX+4PKXTQsZctNUk12CPeVP8Blo9WnBaKT92hRvfmS6P6fqXvAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUC0ItWGlNCZwNrRZNPfSFEOouMkAwHwYDVR0j
BBgwFoAUq3DTbc6HF9I4n/+5utzGDs3BF7UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDEwODU4MDY2MDc3Mjg4My8wL0FCNzBEMzZEQ0U4NzE3RDIzODlGRkZCOUJBREND
NjBFQ0RDMTE3QjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTQxMDg1ODA2NjA3NzI4ODMvMC8zMTMwMzMyZTMx
MzAzNzJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzNTMxMzEzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdr3DANBgkqhkiG9w0BAQsFAAOCAQEAUf6OHR3HXQIjD7z8886e
7oSESSL+ujKuSU5apI1CUPN26OCbfdGO1B9mkU76DxVyosAc6xEC0qbrN2LzRHjC
GRkct7dKSbJeWCMvcFBRTIm15Ns9Lx/kB5v0sR4CD/cWljb/GS6nhWxREQNa4sJE
goQM5iHOqji2Nyx+G8eHhs/95L+zXAhEXl+pp/u4kVa87TboBTydyCWceuIyhtkE
QlY5ziiRg+wahzlH6+vSfo9hobtQCxegT7Y1HFI6N1/0agUEovyQmbqOJarmaWsi
C6pGcaAeilbwciQHQ1xqRhXX4svyexGetV38L0xdrGn70pqoQqF0cmMQkz6poPEw
oA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:51 2026 by rpki-client