Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e39302e39322e302f32322d3232203d3e2034383337.roa
File:                     3130332e39302e39322e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          HeELIibQjdB/YiCqqdaacT4PC7Dm5AjsEU5uW8nkqwg=
Subject key identifier:   84:8A:3B:D5:A1:B0:2F:CD:81:1C:21:D8:A1:14:F5:A4:96:AA:44:5C
Certificate issuer:       /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial:       0ABE615DC4767E271163F78D089BA16C82A7E49A
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e39302e39322e302f32322d3232203d3e2034383337.roa
Signing time:             Wed 03 Jun 2026 06:30:11 +0000
ROA not before:           Wed 03 Jun 2026 06:25:11 +0000
ROA not after:            Wed 02 Jun 2027 06:30:11 +0000
asID:                     4837
IP address blocks:        103.90.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:be:61:5d:c4:76:7e:27:11:63:f7:8d:08:9b:a1:6c:82:a7:e4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
        Validity
            Not Before: Jun  3 06:25:11 2026 GMT
            Not After : Jun  2 06:30:11 2027 GMT
        Subject: CN=848A3BD5A1B02FCD811C21D8A114F5A496AA445C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:d2:39:55:a0:92:de:40:a6:c1:b8:cc:65:
                    04:d7:c5:2f:6e:ca:02:0b:70:1a:93:86:2b:f3:7e:
                    5f:4e:93:81:0d:ef:9c:13:88:6d:23:33:41:11:be:
                    5c:a1:98:b5:7a:ed:a9:84:76:38:e7:d6:2c:e1:d2:
                    8f:42:13:02:f4:cc:04:f2:e1:62:71:db:52:82:00:
                    b3:07:81:37:25:c8:a9:8e:79:4f:98:81:81:46:0f:
                    7d:17:16:7f:a1:32:9e:da:92:a9:39:1a:58:0b:88:
                    43:50:82:76:6d:ac:d1:20:d6:9c:93:67:d1:7f:0c:
                    b0:d8:b2:f8:3c:9b:ea:97:6c:d5:ac:3e:6a:19:ce:
                    73:b8:50:f9:1e:79:73:48:78:8e:38:db:dd:13:45:
                    5a:e1:45:69:30:96:6b:ab:ec:08:ee:17:7e:59:87:
                    c7:b8:ae:d9:64:67:a5:e0:03:62:83:c9:23:cc:c3:
                    05:c7:0d:d3:1d:0f:a7:13:9a:47:a9:0e:9a:07:76:
                    11:19:09:ec:82:70:b1:47:03:af:dc:16:7f:71:78:
                    ed:2e:1d:8e:c1:5e:73:53:f7:cb:56:17:b7:c0:08:
                    68:de:59:87:13:b4:26:07:c7:f7:d7:0f:20:b0:a1:
                    e7:44:ea:c5:5e:e8:97:90:02:b7:3e:56:0d:46:a8:
                    ca:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:8A:3B:D5:A1:B0:2F:CD:81:1C:21:D8:A1:14:F5:A4:96:AA:44:5C
            X509v3 Authority Key Identifier:
                keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e39302e39322e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:b3:52:48:84:2b:3b:a9:ab:7c:a4:65:d7:96:35:2b:a4:d6:
         62:78:a3:74:f1:d1:60:eb:13:c0:35:46:a7:4a:77:8c:39:b3:
         af:ff:b2:3a:de:10:20:ed:2c:77:91:b9:73:c7:d0:4c:c3:a7:
         12:9f:83:b1:63:f4:77:9c:16:15:41:48:a8:0d:77:76:6c:f4:
         56:47:02:ff:63:2f:f3:4e:ea:8d:30:00:6c:58:a1:2b:f6:3f:
         db:c9:69:1c:5e:d6:a7:43:c9:aa:e6:07:2d:e7:91:0b:c0:5f:
         d7:4b:b0:e3:f3:ee:40:23:de:d9:97:10:85:4c:f0:fe:20:f7:
         75:85:cd:11:a3:d0:1c:8d:fa:bf:83:66:4b:2a:c2:fd:40:9a:
         ae:46:c8:f9:99:82:2b:a5:a6:2a:b9:7e:5e:98:e2:74:af:10:
         a8:d7:9e:16:78:31:ba:6a:32:93:ee:98:ee:72:46:f3:5e:a0:
         2d:dd:b4:83:96:60:63:ce:3e:b9:11:3f:56:b6:3a:51:53:7d:
         7b:2e:bd:c8:75:8e:94:71:e0:c7:33:21:f6:65:c0:31:3e:c2:
         dd:59:fd:d5:85:5d:7c:b8:32:be:42:ac:54:cc:de:54:ee:ec:
         52:a9:70:a0:ef:0e:c8:f2:ae:44:74:ac:03:2c:53:ff:3e:6b:
         39:24:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:24 2026 by rpki-client