Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e34352e37322e302f32322d3232203d3e20313430373137.roa
File:                     3130332e34352e37322e302f32322d3232203d3e20313430373137.roa (raw, json)
Hash identifier:          clpc5J+J6RQbgjbtgkh2nO8DwmYb57j2jGCKcNOiFRI=
Subject key identifier:   54:68:27:4B:73:6E:96:AF:3D:0A:75:75:EB:DD:5F:DF:C0:A6:2A:4E
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       1095C5BCE29D6D9310ACEEBA4ACE16EA8642F6D8
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e34352e37322e302f32322d3232203d3e20313430373137.roa
Signing time:             Wed 03 Jun 2026 06:30:11 +0000
ROA not before:           Wed 03 Jun 2026 06:25:11 +0000
ROA not after:            Wed 02 Jun 2027 06:30:11 +0000
asID:                     140717
IP address blocks:        103.45.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:95:c5:bc:e2:9d:6d:93:10:ac:ee:ba:4a:ce:16:ea:86:42:f6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:25:11 2026 GMT
            Not After : Jun  2 06:30:11 2027 GMT
        Subject: CN=5468274B736E96AF3D0A7575EBDD5FDFC0A62A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:c3:cd:f1:e1:56:bc:b0:47:b9:6e:28:a4:
                    40:80:77:72:1d:8b:55:d2:f3:0c:4f:60:09:53:4a:
                    13:80:12:54:cc:32:e1:cd:54:fd:ef:ce:fa:90:e4:
                    8f:83:5e:4e:3f:30:2c:cf:e1:c0:62:0e:a1:24:b9:
                    1b:93:59:b5:62:56:cc:99:f7:8f:45:32:b6:2b:0c:
                    3c:4c:75:40:f6:30:a3:24:65:b3:2c:ff:3e:78:27:
                    0b:6e:4e:42:5f:50:6a:05:60:ea:ae:9f:68:0a:b8:
                    09:0f:48:e4:c4:ff:50:c7:c6:06:ae:3f:4e:1e:f3:
                    b3:52:c4:13:c1:72:e8:d7:34:6f:18:f8:c2:38:ee:
                    2d:d2:5d:1f:fb:4b:94:89:b4:97:f7:dc:4b:6e:e6:
                    95:7a:8e:aa:82:31:03:4a:67:75:39:da:a9:76:e7:
                    42:ca:b8:e4:75:e4:13:c9:eb:8c:44:48:44:11:c6:
                    72:2c:b3:e1:35:92:a2:cc:03:95:ce:06:a0:08:34:
                    bf:be:4b:44:9d:ec:ad:c8:f1:4d:57:53:be:24:6a:
                    dd:da:f3:b1:2f:48:52:c0:08:de:de:e1:87:4c:1b:
                    d7:f1:d2:df:1f:f8:7d:1a:ac:1e:5e:98:ca:32:a4:
                    2e:b0:40:e5:10:87:11:dd:62:ce:23:f6:4b:20:24:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:68:27:4B:73:6E:96:AF:3D:0A:75:75:EB:DD:5F:DF:C0:A6:2A:4E
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e34352e37322e302f32322d3232203d3e20313430373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:74:52:da:34:c6:95:ca:a1:e9:6d:6e:cb:87:0e:4e:d7:8e:
         7e:75:f2:30:fa:d2:e9:11:b3:79:b4:78:a8:11:78:1e:14:ed:
         91:45:87:d3:0a:f4:c4:79:9c:30:2d:d6:f6:e3:e3:13:76:b2:
         7f:07:7d:21:91:3e:b4:6c:2c:87:e0:8f:f2:88:bf:5e:e5:ad:
         45:8e:43:e6:83:fc:48:0e:86:c5:38:14:ed:34:b9:dc:77:02:
         73:9f:6c:f9:73:ef:ea:f2:c0:d5:c6:97:df:9f:f0:76:43:d4:
         2e:81:58:02:1f:8a:87:ab:8c:02:b0:3a:2c:7c:ce:70:43:f8:
         04:18:2e:89:6e:96:50:f0:f3:fb:01:d2:f3:44:aa:d6:ef:53:
         00:42:1b:03:67:54:d6:83:37:f6:c7:ee:45:8b:eb:d3:b9:a8:
         1e:36:bc:45:c1:02:86:62:61:cd:99:9c:e1:6b:a7:db:a4:4f:
         93:8f:7a:e9:4c:df:e8:8b:08:b0:64:e3:78:2f:1c:34:1f:49:
         3b:12:7b:10:70:22:de:59:5c:90:e9:b7:ed:60:6b:9f:f6:0b:
         b3:25:74:97:53:bb:4e:3b:93:95:ee:b9:0e:db:45:df:52:53:
         0b:d1:74:ba:b7:9b:3a:f2:fd:83:2e:a6:80:13:e7:ba:88:36:
         c8:dd:46:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:59 2026 by rpki-client