Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3234342e36342e302f32322d3232203d3e203538383531.roa
File:                     3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (raw, json)
Hash identifier:          bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=
Subject key identifier:   38:CB:EC:F5:B2:0C:2A:02:DC:A5:B6:85:82:E4:D5:BB:E3:14:60:95
Certificate issuer:       /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
Certificate serial:       4626DDAC9E98B62AEC9490DDA5F9EC2976DD403A
Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3234342e36342e302f32322d3232203d3e203538383531.roa
Signing time:             Thu 04 Jun 2026 10:26:11 +0000
ROA not before:           Thu 04 Jun 2026 10:21:11 +0000
ROA not after:            Thu 03 Jun 2027 10:26:11 +0000
asID:                     58851
IP address blocks:        103.244.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:26:dd:ac:9e:98:b6:2a:ec:94:90:dd:a5:f9:ec:29:76:dd:40:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
        Validity
            Not Before: Jun  4 10:21:11 2026 GMT
            Not After : Jun  3 10:26:11 2027 GMT
        Subject: CN=38CBECF5B20C2A02DCA5B68582E4D5BBE3146095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7c:5c:49:b6:db:2a:f2:37:37:03:5f:7f:8f:
                    1a:be:f3:da:70:6f:63:31:b8:71:11:a7:27:0a:34:
                    53:33:ce:a0:8d:4c:be:d7:bb:e8:a6:83:96:3c:ae:
                    2c:04:ed:e6:6d:aa:01:c0:55:d9:4f:20:14:98:29:
                    32:ad:9b:72:1c:e3:1d:9d:97:f9:21:00:6d:d1:31:
                    28:3f:10:98:0a:f3:4a:55:a3:83:28:35:1f:1a:3e:
                    8b:14:44:83:6c:d5:1f:f8:fa:45:80:66:45:10:3b:
                    4e:a2:69:c7:ee:a0:f9:79:a3:7f:e3:73:e2:45:ec:
                    f6:4b:40:a2:9e:2a:0f:75:3c:74:18:a1:52:db:d3:
                    f8:13:45:60:0c:58:b1:7c:9e:22:f7:2b:59:90:e1:
                    64:08:90:c1:17:5d:3e:3a:02:59:57:9b:ff:4c:c4:
                    79:53:d0:e3:92:45:d2:6b:c6:28:fe:6e:01:aa:af:
                    b8:b3:62:b7:88:41:4b:e3:5a:fd:cf:29:54:4a:2e:
                    af:a4:5b:46:dd:d3:f8:14:44:fc:e2:87:91:81:cf:
                    69:4d:08:4c:95:98:05:15:ff:9c:fe:79:e0:70:60:
                    9c:d2:46:b5:9e:a2:74:59:40:1f:d7:c7:a4:13:90:
                    50:bd:89:ca:4e:ed:9e:58:3e:d6:b6:49:af:ac:1e:
                    27:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:EC:F5:B2:0C:2A:02:DC:A5:B6:85:82:E4:D5:BB:E3:14:60:95
            X509v3 Authority Key Identifier:
                keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3234342e36342e302f32322d3232203d3e203538383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:19:8b:a2:c7:41:a6:29:68:05:a3:fa:06:89:af:d4:0b:01:
         85:06:c6:f3:cb:9e:8e:46:04:76:6c:ce:a5:39:57:4b:c4:d5:
         6a:87:64:aa:cd:b0:28:cc:f7:7f:b0:1b:cf:b1:6d:c7:81:68:
         35:b9:19:1a:1b:2e:eb:5b:7d:c6:93:33:05:f1:21:0c:06:79:
         f0:e6:56:0b:4a:c4:11:99:ed:f9:25:da:dd:60:65:1a:98:9d:
         5e:32:92:1a:c9:6b:c6:4c:09:94:87:16:88:39:d0:2b:bb:64:
         80:56:ec:bf:a1:6a:53:29:94:64:df:61:30:f2:9c:83:f1:d8:
         4e:a3:25:03:ec:71:58:77:53:99:eb:65:e6:2e:6a:2b:ac:00:
         db:aa:d2:ec:47:b6:50:91:f9:c4:6d:3c:eb:25:33:60:b2:dc:
         7b:ca:4b:da:b8:a5:85:c8:dc:65:b8:b3:d1:3c:e5:1b:1b:a5:
         22:5e:87:5e:ea:25:d7:5f:c0:f8:43:b2:bc:81:3b:70:56:2f:
         0a:52:5c:25:08:27:20:d1:ef:cc:3c:f1:82:1a:9a:c7:ac:75:
         a7:5e:c4:a5:fb:06:9b:23:1e:fa:67:df:21:82:96:d6:83:59:
         05:33:fe:a2:64:3e:20:2a:43:be:1a:b2:88:3b:58:60:1c:1a:
         fb:aa:a9:50
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:52 2026 by rpki-client