Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133322e302f32332d3233203d3e2034383337.roa
File:                     3130332e31342e3133322e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier:          yPZ2e1NPGAMvQsQSyK2kLR5rDUrX/7UynvFoCiT9BQ8=
Subject key identifier:   AF:F0:F2:EF:46:42:6A:9C:8C:2B:E0:C8:10:27:54:D4:0F:16:3F:CB
Certificate issuer:       /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
Certificate serial:       6D1EE9834FC665A01F7B3E5E9089A3BD55A28AA7
Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133322e302f32332d3233203d3e2034383337.roa
Signing time:             Thu 18 Jun 2026 16:18:51 +0000
ROA not before:           Thu 18 Jun 2026 16:13:51 +0000
ROA not after:            Thu 17 Jun 2027 16:18:51 +0000
asID:                     4837
IP address blocks:        103.14.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 07:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:1e:e9:83:4f:c6:65:a0:1f:7b:3e:5e:90:89:a3:bd:55:a2:8a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
        Validity
            Not Before: Jun 18 16:13:51 2026 GMT
            Not After : Jun 17 16:18:51 2027 GMT
        Subject: CN=AFF0F2EF46426A9C8C2BE0C8102754D40F163FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:61:a1:ae:10:bd:b0:d2:da:e9:d1:85:66:
                    fb:b6:14:df:c0:11:1b:1b:25:ca:bf:ff:1f:51:e2:
                    d9:25:1a:10:79:71:66:92:c0:2b:82:c5:f2:7e:6d:
                    af:a1:97:84:64:ce:67:10:fd:e9:10:3d:65:f7:b2:
                    c8:28:f2:28:8e:a5:d7:2c:92:f4:89:58:02:48:61:
                    5c:4d:8b:2e:55:52:38:fe:bb:f0:22:1e:2a:97:8c:
                    2c:4e:fa:69:2c:b7:60:89:00:6f:f2:f7:93:2c:64:
                    e5:94:2a:d4:c0:0d:30:b5:0a:a4:28:7b:c8:a3:d7:
                    bc:ca:b1:5e:99:9d:4f:b5:62:59:44:4a:bc:91:e1:
                    da:94:de:f5:ed:5c:c3:45:d3:6c:cc:36:72:7d:9d:
                    9d:3e:b9:84:49:cb:0e:99:63:71:8e:f0:03:8c:aa:
                    c0:19:1e:e5:40:ab:a6:eb:97:62:9b:0f:da:dc:18:
                    53:3a:2b:d1:a7:82:15:37:9c:d6:3c:5d:24:ad:65:
                    04:2a:70:f2:0c:76:16:25:15:c4:6f:f3:bc:43:d8:
                    bd:21:f5:36:61:29:ec:80:4d:86:21:d1:43:84:c9:
                    e6:f5:a2:e8:2e:9b:e6:1e:61:11:2f:61:d8:05:e3:
                    19:4d:b5:50:7c:d7:42:e7:d4:13:89:ab:5f:1c:68:
                    8c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F0:F2:EF:46:42:6A:9C:8C:2B:E0:C8:10:27:54:D4:0F:16:3F:CB
            X509v3 Authority Key Identifier:
                keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133322e302f32332d3233203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:c8:ac:d8:f0:23:13:af:69:56:0e:9c:9b:21:b5:1e:8c:a7:
         47:12:12:7a:fc:bc:e5:86:d7:d6:b4:e3:1c:79:99:9f:cd:6b:
         6c:62:98:01:16:c8:ce:46:1c:f3:41:b5:10:d0:53:47:e1:e0:
         3e:5c:de:7f:97:fb:54:8d:73:f7:21:96:26:22:78:cb:45:4d:
         f8:1d:78:68:b5:af:7c:f1:1f:83:d1:30:6d:fe:53:73:57:53:
         4d:c8:d1:db:27:bd:34:28:a3:b4:0f:3b:eb:a6:c4:1f:61:b7:
         fe:fd:30:51:1e:e9:61:48:a2:e2:6d:89:b2:db:80:ec:a9:2f:
         94:d0:44:3f:36:97:12:95:1c:b6:b2:4e:1f:b7:41:66:fa:62:
         55:80:81:1e:06:59:6b:e8:22:27:f2:45:8b:9f:27:3d:30:5a:
         3c:07:51:5e:be:ec:14:8d:58:ed:fd:48:35:4e:ed:22:46:32:
         13:be:23:15:b5:b0:74:f7:4b:6c:13:32:d5:89:37:ab:5f:8b:
         bd:b4:cd:1c:f6:a3:04:cb:75:21:33:49:22:90:2d:77:65:11:
         fb:a8:4f:e6:4a:93:43:cd:f7:11:ce:2a:b8:bc:41:de:69:db:
         e3:09:da:bf:9e:f0:19:11:88:22:74:84:9f:7c:05:b8:09:d5:
         6c:2f:9e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:32:32 2026 by rpki-client