Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa
File:                     3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (raw, json)
Hash identifier:          UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=
Subject key identifier:   C9:62:88:AF:15:D8:2F:4A:B1:72:93:D4:F7:EE:C0:DB:D4:09:50:9D
Certificate issuer:       /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
Certificate serial:       26ACC6AF6B02CD603E6557FCB91138EA7D6663F8
Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa
Signing time:             Thu 04 Jun 2026 10:26:11 +0000
ROA not before:           Thu 04 Jun 2026 10:21:11 +0000
ROA not after:            Thu 03 Jun 2027 10:26:11 +0000
asID:                     58851
IP address blocks:        103.254.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ac:c6:af:6b:02:cd:60:3e:65:57:fc:b9:11:38:ea:7d:66:63:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2
        Validity
            Not Before: Jun  4 10:21:11 2026 GMT
            Not After : Jun  3 10:26:11 2027 GMT
        Subject: CN=C96288AF15D82F4AB17293D4F7EEC0DBD409509D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:62:03:4e:bd:67:e8:01:4e:5c:2d:95:8d:b1:
                    2a:62:be:54:f2:6b:2a:cf:15:04:aa:2c:23:74:6c:
                    4f:e3:1b:4d:f0:fd:83:4f:ac:61:f7:2b:27:78:d9:
                    0f:e2:ef:59:7e:56:d7:3a:ae:fe:41:82:b2:3f:85:
                    d3:cd:9c:ae:3f:63:46:70:ca:45:6d:c9:90:2c:92:
                    e3:57:fd:88:2c:9a:90:04:5f:09:61:9e:f5:09:6c:
                    80:1e:6e:f0:10:47:30:0e:b5:93:29:ec:0f:b6:0e:
                    d0:ed:cb:69:24:32:8c:a8:40:d1:48:ab:25:bf:58:
                    39:02:f6:2f:e7:0f:4d:9a:32:e6:7c:82:57:ff:a0:
                    6e:1a:77:d0:4f:34:be:c9:05:44:a8:3c:44:4d:56:
                    ce:e1:4f:00:a5:0e:21:f7:f5:53:f4:b1:fe:f6:94:
                    1a:c7:0c:d3:d7:4b:17:58:5c:bd:ea:7e:34:cc:ef:
                    af:a9:3c:29:83:d9:f3:4c:de:d3:65:73:2b:2a:c6:
                    49:9d:50:30:16:6b:ee:2c:4e:45:82:06:ec:31:53:
                    5a:2b:63:5f:b6:0a:01:ff:56:34:f3:bf:81:f0:05:
                    2f:d3:ec:4b:6d:31:da:c8:27:b3:10:07:9e:77:08:
                    17:f6:0a:c0:58:03:75:28:60:e8:4e:db:e0:34:38:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:62:88:AF:15:D8:2F:4A:B1:72:93:D4:F7:EE:C0:DB:D4:09:50:9D
            X509v3 Authority Key Identifier:
                keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:f4:cb:fb:fe:58:08:4d:e7:0c:cf:55:f3:dc:37:77:4a:01:
         75:98:dd:e1:a6:b3:92:a8:8f:c1:88:90:1c:c8:54:53:38:4d:
         ce:1e:e5:89:5b:82:9d:60:3a:93:7a:3e:ba:b8:cb:4f:5d:24:
         ee:37:8b:62:f0:5e:6e:39:82:4d:09:e4:e5:58:da:27:f8:d6:
         7b:43:8d:84:90:3b:ae:53:8e:3b:82:9f:38:8e:1a:79:e4:e3:
         21:6d:71:70:24:54:7d:6a:e7:3b:2f:21:df:aa:cb:78:a3:79:
         a3:9a:37:a2:7a:e1:ac:03:dc:d7:c4:22:e9:4f:ae:03:ef:d7:
         7f:db:fa:1b:59:61:71:48:02:ae:0f:fe:56:ab:62:cd:57:81:
         f3:ba:c4:d1:de:cb:77:c0:29:80:ad:7b:e7:da:18:71:d1:43:
         4d:62:8a:cd:f6:62:ad:64:34:d9:4c:5f:02:c1:f9:bd:c9:02:
         66:56:52:db:9e:bb:dc:b2:03:c2:e1:0e:96:c4:dd:6d:4e:97:
         98:28:02:01:a9:d3:69:51:57:26:5a:d4:ea:b8:b4:e3:2a:6e:
         0e:07:32:55:8b:46:72:d9:28:13:60:8c:26:a8:f9:19:96:7e:
         46:6f:79:61:ad:00:46:b7:2f:db:61:48:15:ee:53:07:f9:60:
         ce:af:d1:11
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUJqzGr2sCzWA+ZVf8uRE46n1mY/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5
MDRDNUVDMjAeFw0yNjA2MDQxMDIxMTFaFw0yNzA2MDMxMDI2MTFaMDMxMTAvBgNV
BAMTKEM5NjI4OEFGMTVEODJGNEFCMTcyOTNENEY3RUVDMERCRDQwOTUwOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnYgNOvWfoAU5cLZWNsSpivlTy
ayrPFQSqLCN0bE/jG03w/YNPrGH3Kyd42Q/i71l+Vtc6rv5BgrI/hdPNnK4/Y0Zw
ykVtyZAskuNX/YgsmpAEXwlhnvUJbIAebvAQRzAOtZMp7A+2DtDty2kkMoyoQNFI
qyW/WDkC9i/nD02aMuZ8glf/oG4ad9BPNL7JBUSoPERNVs7hTwClDiH39VP0sf72
lBrHDNPXSxdYXL3qfjTM76+pPCmD2fNM3tNlcysqxkmdUDAWa+4sTkWCBuwxU1or
Y1+2CgH/VjTzv4HwBS/T7EttMdrIJ7MQB553CBf2CsBYA3UoYOhO2+A0OI1XAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUyWKIrxXYL0qxcpPU9+7A29QJUJ0wHwYDVR0j
BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB
REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8zMTMwMzMyZTMy
MzUzNDJlMzEzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM4MzUzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmf+cDANBgkqhkiG9w0BAQsFAAOCAQEAG/TL+/5YCE3nDM9V89w3
d0oBdZjd4aazkqiPwYiQHMhUUzhNzh7liVuCnWA6k3o+urjLT10k7jeLYvBebjmC
TQnk5VjaJ/jWe0ONhJA7rlOOO4KfOI4aeeTjIW1xcCRUfWrnOy8h36rLeKN5o5o3
onrhrAPc18Qi6U+uA+/Xf9v6G1lhcUgCrg/+VqtizVeB87rE0d7Ld8ApgK1759oY
cdFDTWKKzfZirWQ02UxfAsH5vckCZlZS25673LIDwuEOlsTdbU6XmCgCAanTaVFX
JlrU6ri04ypuDgcyVYtGctkoE2CMJqj5GZZ+Rm95Ya0ARrcv22FIFe5TB/lgzq/R
EQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:45:01 2026 by rpki-client