Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa
File:                     3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          aICy3mIoaEDJQmrqEG0IE867054dMdqJ/o4bvRyAVBQ=
Subject key identifier:   5D:84:09:00:EB:C5:65:B2:11:80:A1:CC:46:0D:6D:B2:9C:46:68:A1
Certificate issuer:       /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial:       330B05FDC5F0CF368F9B5992F195642D9A4739F0
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa
Signing time:             Tue 23 Jun 2026 06:53:45 +0000
ROA not before:           Tue 23 Jun 2026 06:48:45 +0000
ROA not after:            Tue 22 Jun 2027 06:53:45 +0000
asID:                     4808
IP address blocks:        103.102.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 10:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0b:05:fd:c5:f0:cf:36:8f:9b:59:92:f1:95:64:2d:9a:47:39:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
        Validity
            Not Before: Jun 23 06:48:45 2026 GMT
            Not After : Jun 22 06:53:45 2027 GMT
        Subject: CN=5D840900EBC565B21180A1CC460D6DB29C4668A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:6b:4e:7c:92:62:26:1b:50:28:c1:d5:87:
                    69:36:97:90:be:2e:da:69:1e:b0:b8:7b:33:7c:b0:
                    ef:4d:86:74:b7:6d:0d:cd:e9:b9:69:e2:14:43:e8:
                    be:0c:9d:5a:50:52:fe:9f:70:78:d3:ff:60:f8:5e:
                    19:77:a6:9f:9d:84:f1:fc:4e:72:b0:4f:18:73:5a:
                    1f:1a:b2:2f:09:fe:8b:8a:b5:b1:ea:f5:2f:4f:53:
                    e2:88:5b:9b:9f:93:5a:0a:f0:23:61:97:45:2e:f3:
                    f1:12:89:9d:79:14:ee:f9:b5:c1:35:9a:b7:00:88:
                    78:0f:fd:20:ab:11:82:41:c6:54:4c:05:3e:b8:a8:
                    ee:89:13:af:8d:68:1c:b5:5a:9b:d9:44:b2:70:be:
                    eb:53:d7:62:31:2e:e3:82:d1:fc:48:b7:e9:96:ba:
                    30:a5:9e:57:be:14:30:aa:7d:cf:48:94:dc:31:10:
                    64:f7:11:2e:dc:73:31:aa:78:77:4f:5e:59:55:1d:
                    68:68:ad:67:96:f3:d1:40:12:25:76:8c:ff:5e:96:
                    6f:d5:1d:2b:31:6e:79:72:d1:a2:57:cb:17:f1:0a:
                    44:33:9f:d2:87:dd:04:e6:6c:fe:d6:98:02:a7:95:
                    38:32:f4:5b:b0:2f:eb:00:fb:87:6e:f3:c5:cd:d6:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:84:09:00:EB:C5:65:B2:11:80:A1:CC:46:0D:6D:B2:9C:46:68:A1
            X509v3 Authority Key Identifier:
                keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/3130332e3130322e3230302e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:26:25:b7:f5:c1:c0:28:6f:5e:fa:ff:1f:05:7d:06:b2:29:
         58:dd:94:12:3c:e3:04:a0:d2:0b:a3:9e:33:a1:98:0d:d8:43:
         b4:55:9d:93:0c:ab:64:88:48:25:fd:bf:cf:d8:d7:53:0c:16:
         2b:4f:0d:de:d0:9d:5f:7f:3f:ee:bb:1d:11:3d:ab:52:c6:ff:
         ff:72:9e:c7:9d:1e:8c:5c:71:ac:ca:1c:09:f9:d3:35:26:a3:
         5a:75:61:9f:b0:95:1c:ea:6a:b0:88:e9:b9:68:06:97:0e:83:
         4b:e6:aa:ff:3d:80:06:5f:3e:05:aa:cd:6d:56:03:a6:fe:de:
         16:26:d2:ad:06:b6:7e:85:e3:97:57:00:06:d1:71:89:42:ed:
         a6:08:8a:fa:52:ec:e7:57:ee:7d:33:f1:a2:84:10:32:fe:d0:
         3a:e2:3a:f6:16:a2:c3:3e:6b:cc:99:10:14:fe:e9:f2:a9:ae:
         59:db:26:a9:96:11:55:e5:d6:af:c1:b8:73:99:04:62:29:79:
         de:47:ae:b3:0f:bd:23:9c:81:aa:d6:10:d4:29:1c:d5:93:33:
         0c:9e:98:2f:e7:6e:5b:2f:92:8a:bc:53:e8:79:cc:5a:31:96:
         8c:72:5c:db:5e:f5:90:8e:25:0a:30:81:70:4f:de:37:fd:35:
         7a:4c:db:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:10 2026 by rpki-client