Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122502309020958757/0/3130332e3138312e3233342e302f32342d3234203d3e20313436383232.roa
File:                     3130332e3138312e3233342e302f32342d3234203d3e20313436383232.roa (raw, json)
Hash identifier:          QK9k+iBnpWkrV2/3ZU9si10LOiRiqqoBfz0NDNoWe6I=
Subject key identifier:   FC:4B:30:BC:2D:2D:9E:E2:99:36:49:36:03:85:37:A7:B4:3C:A7:A6
Certificate issuer:       /CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6
Certificate serial:       0E86334882D41FE08D82E8117886FDDD1DC3D09B
Authority key identifier: D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/3130332e3138312e3233342e302f32342d3234203d3e20313436383232.roa
Signing time:             Thu 25 Jun 2026 12:27:14 +0000
ROA not before:           Thu 25 Jun 2026 12:22:14 +0000
ROA not after:            Thu 24 Jun 2027 12:27:14 +0000
asID:                     146822
IP address blocks:        103.181.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 03:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:86:33:48:82:d4:1f:e0:8d:82:e8:11:78:86:fd:dd:1d:c3:d0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6
        Validity
            Not Before: Jun 25 12:22:14 2026 GMT
            Not After : Jun 24 12:27:14 2027 GMT
        Subject: CN=FC4B30BC2D2D9EE299364936038537A7B43CA7A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6d:99:04:33:f2:71:6d:50:59:a5:47:b0:99:
                    92:4f:7b:0c:b1:73:9b:b9:fc:e6:1c:88:8a:d4:37:
                    87:f9:0d:af:ff:47:fa:68:e0:e0:2f:a3:a9:12:f3:
                    c0:49:b7:52:f1:42:cf:4a:25:c4:23:d8:4a:55:f3:
                    53:3d:ee:9a:c7:ef:82:2c:12:9d:2b:df:d0:2d:aa:
                    61:bb:8b:b6:c7:44:38:37:3d:1b:4c:98:bd:f9:f8:
                    15:36:0e:1d:c3:f6:f7:65:03:12:27:0a:11:16:05:
                    71:8a:85:20:74:2b:cf:61:41:09:c4:bc:7d:1e:15:
                    6c:f6:4a:51:d8:64:13:fe:be:3c:72:e5:6d:00:92:
                    02:85:34:de:a3:35:63:ba:14:38:e5:a6:59:3f:aa:
                    e9:cb:12:f6:ee:b8:60:e8:9c:df:02:28:67:8c:8e:
                    4c:c0:de:be:0f:f2:ab:a3:4a:14:85:59:6b:66:7a:
                    c8:38:a0:eb:24:9c:17:be:75:66:e1:d9:45:90:5f:
                    e3:7b:6e:2f:af:84:4a:24:58:aa:d3:dc:35:6e:88:
                    b0:28:c1:b2:22:f3:07:1f:7f:a4:30:61:b3:97:fd:
                    9a:46:03:d7:83:4a:4b:51:d7:0c:23:34:66:ef:74:
                    aa:db:3f:a6:45:19:33:54:59:40:49:7c:dc:68:75:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4B:30:BC:2D:2D:9E:E2:99:36:49:36:03:85:37:A7:B4:3C:A7:A6
            X509v3 Authority Key Identifier:
                keyid:D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/3130332e3138312e3233342e302f32342d3234203d3e20313436383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:f2:13:8c:dd:4d:b2:ff:36:2c:f8:3a:66:22:e2:51:25:
         74:98:14:b8:e2:11:61:5b:31:6a:21:31:41:c1:49:89:00:c7:
         d7:d7:b3:18:fb:ed:b4:69:70:6b:72:7b:b1:0b:2f:ca:35:e7:
         8a:73:7b:74:bf:75:f8:ee:6a:c3:d6:7d:46:3d:2c:1b:f8:97:
         6c:d1:f6:ba:bd:7e:4a:ee:c0:6c:66:7f:48:07:ab:aa:5b:97:
         02:98:6b:b9:55:f8:b9:1e:ff:42:7e:98:6f:00:ea:11:a7:de:
         25:1b:56:d3:56:fb:5f:0b:92:47:58:0a:8b:e6:11:b4:2f:b3:
         f1:b5:ec:a2:81:e0:12:3e:73:ea:0d:d5:a7:3a:2f:fb:9d:1f:
         44:c1:39:52:17:5c:84:a5:01:ce:aa:b1:d6:b5:b2:d2:dd:6a:
         31:a7:a6:cf:dc:1b:53:55:c1:26:59:2d:13:4f:7c:b8:dc:a6:
         b0:fe:9e:27:96:38:72:93:09:34:c9:62:39:02:2e:78:aa:34:
         b0:d0:be:a0:48:02:56:fa:ed:2d:8a:b5:20:65:6b:3f:2e:61:
         d7:b5:a1:da:32:83:ac:31:0f:40:da:c7:59:a3:ce:34:6d:7a:
         9a:8c:62:d3:ff:45:73:12:c0:15:fa:bd:d8:91:13:f7:3a:f1:
         af:e7:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:26 2026 by rpki-client