Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232312e302f32342d3234203d3e20313430373137.roa
File:                     3130332e3231312e3232312e302f32342d3234203d3e20313430373137.roa (raw, json)
Hash identifier:          hqKaVNdB6OOTXLSeVqBBrshLhChbiJmgqwdgu45Wzms=
Subject key identifier:   17:D3:64:63:59:88:78:E7:0F:51:C2:2B:63:2D:7B:3A:EF:AB:73:D3
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       7CAA3B819E80122B28585D4D7E052B32A61AE968
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232312e302f32342d3234203d3e20313430373137.roa
Signing time:             Wed 03 Jun 2026 06:30:11 +0000
ROA not before:           Wed 03 Jun 2026 06:25:11 +0000
ROA not after:            Wed 02 Jun 2027 06:30:11 +0000
asID:                     140717
IP address blocks:        103.211.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:aa:3b:81:9e:80:12:2b:28:58:5d:4d:7e:05:2b:32:a6:1a:e9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:25:11 2026 GMT
            Not After : Jun  2 06:30:11 2027 GMT
        Subject: CN=17D36463598878E70F51C22B632D7B3AEFAB73D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:f1:59:47:0e:8c:90:e3:e8:98:d5:f1:0d:
                    2a:b6:d6:87:00:ea:fa:3e:aa:fa:b3:18:b1:6e:fd:
                    08:bd:6b:2b:e1:64:8b:0a:35:4d:b2:03:1e:11:e1:
                    d1:95:59:62:36:cf:8f:cb:1e:63:e9:74:b0:a8:7a:
                    20:bd:b5:74:57:4b:7b:2f:23:cd:13:e2:de:60:02:
                    0d:d5:4f:27:bb:eb:e4:f4:de:d1:05:74:22:ac:2e:
                    f3:a2:a4:12:2d:05:2f:9d:2d:a4:50:04:bb:86:07:
                    b9:35:4a:3e:53:65:38:93:92:96:78:d7:b9:e0:48:
                    2e:9b:8e:37:70:c7:5d:f6:32:a4:c6:86:35:fc:58:
                    71:dc:89:65:af:34:2e:4a:bd:d7:ca:f7:76:9a:34:
                    6a:0f:7d:b8:d8:6f:81:29:6e:3c:bf:26:99:70:1d:
                    06:4c:75:8f:41:6b:38:3d:f9:b2:84:6f:d8:be:40:
                    8f:70:01:7a:9b:61:80:cb:44:39:7c:8b:9a:d4:ad:
                    26:ff:7b:79:e0:25:d6:0e:36:f0:14:47:33:00:cf:
                    fb:dd:a9:47:59:c4:94:b1:51:09:b3:f0:fd:4b:38:
                    28:b8:82:c6:df:35:f8:27:72:e1:f4:4f:b5:b0:f3:
                    3d:ce:18:6c:ad:4a:e0:cb:19:63:8e:49:82:f4:25:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D3:64:63:59:88:78:E7:0F:51:C2:2B:63:2D:7B:3A:EF:AB:73:D3
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232312e302f32342d3234203d3e20313430373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a6:7b:a0:59:a6:53:8c:84:15:3b:b4:34:ff:d4:2a:7b:c5:
         9f:17:96:ea:0c:01:e7:67:b2:27:f2:54:06:4f:c9:a1:b0:1d:
         1c:6f:cd:19:39:f9:87:88:d2:e4:30:3d:59:8a:fd:cd:95:11:
         ba:0c:fe:1d:80:74:0a:6b:d3:c9:42:36:e6:99:c9:fb:03:b5:
         92:f9:d6:d6:0c:d6:02:d0:7e:98:63:77:b7:6c:18:40:13:44:
         cf:f4:f8:07:78:52:1f:80:d6:60:7f:09:23:3d:72:f8:e5:9f:
         9a:10:40:6d:1e:36:23:1d:c1:d7:e4:61:54:0b:e1:50:c7:bb:
         1d:52:4f:88:c1:d5:91:dd:50:4e:b0:3e:c3:04:11:f2:00:6a:
         2e:48:e8:6c:00:e0:68:cd:0e:d7:ff:fa:ff:cd:f0:36:2b:06:
         4a:c7:53:88:59:d4:a9:34:2e:7b:a2:45:a2:75:dc:7f:e8:08:
         ef:74:ce:7b:7c:43:99:3a:be:b1:bc:7c:af:44:71:84:ef:6e:
         80:0c:c5:8f:32:1f:e2:f7:c4:b6:16:52:b2:56:db:b3:89:20:
         e0:b7:2e:2a:d3:e7:ff:83:5b:cc:f2:9a:35:dc:3b:b0:6f:c7:
         17:f6:a9:27:d8:54:9d:2b:b5:07:cd:c4:85:70:9b:82:79:8e:
         4e:88:ee:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:57 2026 by rpki-client