Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa
File:                     3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa (raw, json)
Hash identifier:          c8jjxIi8CH63wJ12K3sB0prVBnsSnwpi2eFfNLqLjFw=
Subject key identifier:   70:06:37:33:C8:1D:02:FC:D5:2F:D6:0A:F6:59:26:BA:D6:DE:F6:95
Certificate issuer:       /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
Certificate serial:       0FB97A33E0F71A46F2D806B6C9CB571ABCE092F6
Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa
Signing time:             Tue 23 Jun 2026 06:53:46 +0000
ROA not before:           Tue 23 Jun 2026 06:48:46 +0000
ROA not after:            Tue 22 Jun 2027 06:53:46 +0000
asID:                     55962
IP address blocks:        103.102.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 10:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b9:7a:33:e0:f7:1a:46:f2:d8:06:b6:c9:cb:57:1a:bc:e0:92:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04
        Validity
            Not Before: Jun 23 06:48:46 2026 GMT
            Not After : Jun 22 06:53:46 2027 GMT
        Subject: CN=70063733C81D02FCD52FD60AF65926BAD6DEF695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:d2:63:64:84:5b:de:71:5c:0a:16:c7:9f:
                    36:49:52:7b:dc:a9:cd:77:a2:64:e3:ce:18:5c:ab:
                    9e:e4:e0:d0:df:19:cc:a9:71:67:f8:9b:d1:65:35:
                    4f:47:b2:dc:69:97:be:87:8b:7b:32:d2:9e:74:9b:
                    05:b3:77:8e:52:c2:95:e3:85:86:be:ba:99:a3:26:
                    0f:92:4c:3f:2f:fe:d4:a8:33:34:06:1f:40:bf:36:
                    1b:88:d1:88:18:a9:0b:cb:bf:29:ea:a9:bc:eb:cf:
                    40:58:5f:af:54:fa:f1:31:cb:d8:59:8a:53:da:a1:
                    ae:ad:f9:4b:e1:bc:ec:39:7f:d9:18:ae:48:a6:8f:
                    b7:5a:14:f8:b0:a2:8f:95:47:a8:9c:16:eb:7c:c3:
                    e9:42:26:8a:2a:d7:6e:1e:f8:51:f1:51:43:5f:6a:
                    30:cb:06:a3:d8:29:c1:ab:71:bf:3c:0a:38:50:98:
                    34:1a:db:98:52:b6:bc:49:a3:23:01:e8:6b:b7:b0:
                    ce:8d:f9:36:67:b1:4a:ef:40:c5:ba:65:ae:60:ed:
                    85:1f:f5:ae:85:46:e8:cd:75:ee:d6:34:01:33:99:
                    0d:eb:fe:b5:10:30:66:f7:f7:67:44:b8:ac:85:2d:
                    90:31:f9:b8:07:cd:79:0c:b0:02:30:e5:38:8e:b5:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:06:37:33:C8:1D:02:FC:D5:2F:D6:0A:F6:59:26:BA:D6:DE:F6:95
            X509v3 Authority Key Identifier:
                keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/3130332e3130322e3230302e302f32322d3232203d3e203535393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:89:29:ce:ba:91:29:5d:f2:82:8c:84:da:30:99:a1:81:9f:
         6f:f6:b1:90:7c:10:22:9e:10:1b:fb:d7:f6:ba:cb:b9:9c:fb:
         43:60:03:60:63:ae:55:47:8c:a6:21:03:b0:01:e2:1f:dc:bc:
         5a:cf:4f:2e:be:5a:10:13:ad:ae:89:b4:3e:85:be:db:8c:d1:
         21:75:1f:3a:3e:73:99:a1:37:f4:b8:b8:10:7e:8e:f4:c2:90:
         1f:1f:9f:72:e6:69:1e:54:df:53:d0:3a:1a:d9:73:27:1a:b7:
         0c:34:32:13:d7:39:9c:4e:7d:fa:df:33:d2:d6:8d:41:d2:46:
         36:c9:c2:10:ec:f7:b0:5a:b2:8e:35:7a:6e:9b:1d:d8:a2:47:
         1a:29:05:f6:72:0f:52:96:2e:21:97:43:08:24:f7:7b:f7:e9:
         75:7d:48:09:b2:35:77:24:e4:11:de:f2:82:43:7a:05:ae:db:
         5c:5c:71:a8:3f:2c:aa:cf:15:0b:2d:88:a4:37:83:67:ef:11:
         e6:f7:06:ec:1a:c8:bd:57:df:37:ee:6f:0d:9b:04:7f:34:e1:
         b5:c5:2d:40:87:f0:bf:9f:d1:e5:78:f9:b6:85:e9:25:e3:7b:
         1b:13:94:db:67:e6:15:35:5f:e8:3d:56:11:c3:ba:56:ef:72:
         4a:ac:d8:e9
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUD7l6M+D3Gkby2Aa2yctXGrzgkvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1
NTJCNkEwNDAeFw0yNjA2MjMwNjQ4NDZaFw0yNzA2MjIwNjUzNDZaMDMxMTAvBgNV
BAMTKDcwMDYzNzMzQzgxRDAyRkNENTJGRDYwQUY2NTkyNkJBRDZERUY2OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtNJjZIRb3nFcChbHnzZJUnvc
qc13omTjzhhcq57k4NDfGcypcWf4m9FlNU9Hstxpl76Hi3sy0p50mwWzd45SwpXj
hYa+upmjJg+STD8v/tSoMzQGH0C/NhuI0YgYqQvLvynqqbzrz0BYX69U+vExy9hZ
ilPaoa6t+UvhvOw5f9kYrkimj7daFPiwoo+VR6icFut8w+lCJooq124e+FHxUUNf
ajDLBqPYKcGrcb88CjhQmDQa25hStrxJoyMB6Gu3sM6N+TZnsUrvQMW6Za5g7YUf
9a6FRujNde7WNAEzmQ3r/rUQMGb392dEuKyFLZAx+bgHzXkMsAIw5TiOtUSZAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUcAY3M8gdAvzVL9YK9lkmutbe9pUwHwYDVR0j
BBgwFoAU81T5Ff1qDCDJ5iXCjTbEvFUragQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
MTY5MzI1NzYwOTI0ODgwMy8wL0YzNTRGOTE1RkQ2QTBDMjBDOUU2MjVDMjhEMzZD
NEJDNTUyQjZBMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1NTJCNkEwNC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMjE2OTMyNTc2MDkyNDg4MDMvMC8zMTMwMzMyZTMx
MzAzMjJlMzIzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNTM5MzYzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdmyDANBgkqhkiG9w0BAQsFAAOCAQEAjYkpzrqRKV3ygoyE2jCZ
oYGfb/axkHwQIp4QG/vX9rrLuZz7Q2ADYGOuVUeMpiEDsAHiH9y8Ws9PLr5aEBOt
rom0PoW+24zRIXUfOj5zmaE39Li4EH6O9MKQHx+fcuZpHlTfU9A6GtlzJxq3DDQy
E9c5nE59+t8z0taNQdJGNsnCEOz3sFqyjjV6bpsd2KJHGikF9nIPUpYuIZdDCCT3
e/fpdX1ICbI1dyTkEd7ygkN6Ba7bXFxxqD8sqs8VCy2IpDeDZ+8R5vcG7BrIvVff
N+5vDZsEfzThtcUtQIfwv5/R5Xj5toXpJeN7GxOU22fmFTVf6D1WEcO6Vu9ySqzY
6Q==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:20 2026 by rpki-client