Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e203233373234.roa
File:                     3130332e3130372e3231362e302f32322d3232203d3e203233373234.roa (raw, json)
Hash identifier:          buzdFzMPnyRnk+VQcRcIsiDAmo82y1xpx2UdMTvMJSQ=
Subject key identifier:   9A:FE:13:11:4C:75:E1:BB:87:F0:80:B9:77:F7:B6:81:CA:CD:ED:11
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       1AC845AC0ED9CF7CFD48E595EBEF3C6AD154BCCB
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e203233373234.roa
Signing time:             Mon 29 Jun 2026 07:53:29 +0000
ROA not before:           Mon 29 Jun 2026 07:48:29 +0000
ROA not after:            Mon 28 Jun 2027 07:53:29 +0000
asID:                     23724
IP address blocks:        103.107.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c8:45:ac:0e:d9:cf:7c:fd:48:e5:95:eb:ef:3c:6a:d1:54:bc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:48:29 2026 GMT
            Not After : Jun 28 07:53:29 2027 GMT
        Subject: CN=9AFE13114C75E1BB87F080B977F7B681CACDED11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:b3:c4:dd:86:c4:3c:3e:65:26:e1:18:4a:
                    d8:47:3f:f9:5a:14:d9:eb:7f:1a:e2:f8:ba:b1:51:
                    f0:d6:41:b9:f5:ac:ae:dc:e5:d2:30:38:fc:76:08:
                    9c:43:7c:78:16:23:34:b3:0e:f9:d2:2f:6e:87:f1:
                    5c:cb:69:df:31:c0:de:2b:31:53:28:f1:db:e2:36:
                    58:cc:46:25:69:d0:56:a7:17:25:86:93:8f:3f:9b:
                    11:11:26:d8:c0:d0:26:2a:0a:6f:13:ad:0c:b2:15:
                    f7:ab:77:55:44:7e:16:f9:fb:e2:9b:a7:46:85:53:
                    54:be:58:36:3c:ef:53:a4:98:cb:0f:1b:a1:f5:11:
                    21:5e:3c:50:b3:da:00:2f:62:c1:e2:61:bf:64:85:
                    03:a8:76:b7:39:0d:10:1f:66:83:84:a3:e8:44:96:
                    1e:ee:94:ae:72:0c:ba:51:de:51:0a:29:5c:bd:d2:
                    2a:0e:2a:1b:24:04:90:fe:11:3e:b3:33:e0:72:97:
                    ff:4d:65:d3:9e:01:70:d7:2b:49:44:cf:83:e9:b7:
                    e0:e7:51:e1:e1:1a:ce:96:66:0f:15:a3:ad:2b:db:
                    88:82:73:b4:f9:87:5b:a2:4e:eb:4a:fa:55:69:62:
                    9b:22:89:5d:e2:2a:2f:2e:5b:07:6e:f3:93:76:9c:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FE:13:11:4C:75:E1:BB:87:F0:80:B9:77:F7:B6:81:CA:CD:ED:11
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:d7:13:31:aa:a5:9f:05:8e:db:b0:19:01:4c:7f:21:1c:3d:
         cf:1c:8b:27:a1:d9:56:3f:cc:a4:cf:7d:d7:b6:20:81:63:9d:
         eb:65:14:ed:2b:e5:0c:e6:63:ea:bd:68:df:ae:bb:ce:12:4f:
         b2:3b:5f:e5:0e:f0:41:84:91:33:1f:fa:a0:80:3a:ca:af:51:
         4c:fe:1b:e6:7e:07:03:b5:77:c1:f1:8b:7a:03:75:fb:16:1e:
         20:9e:00:5b:50:69:59:c5:d4:c0:e6:50:02:d0:f3:7d:4f:dd:
         4a:cf:ef:b1:7b:96:c1:f1:5d:6e:f3:dd:8c:e3:5f:86:25:30:
         42:3f:9d:f4:80:b3:7e:9d:60:0d:bc:20:60:a6:71:94:9e:e4:
         f9:2d:a8:e2:56:1a:15:0a:f2:99:6e:83:30:e0:83:a9:62:a0:
         93:f9:cb:e8:f0:02:b3:18:f5:b6:4e:38:fb:bd:a2:fd:ed:65:
         b6:75:d7:73:7c:66:5e:56:e4:7f:7a:8e:4c:6f:0c:7b:f9:67:
         ce:bf:f0:05:b9:88:37:d5:df:85:01:48:e4:1b:a9:00:40:d2:
         e9:02:22:82:6b:4c:94:4d:50:0c:48:cb:c0:8b:22:2e:3a:c4:
         4f:2c:86:34:d1:bb:e3:77:17:2d:09:1b:7f:56:64:a1:7d:a3:
         1e:5f:e3:98
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUGshFrA7Zz3z9SOWV6+88atFUvMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw
N0U4MjQ4MTAeFw0yNjA2MjkwNzQ4MjlaFw0yNzA2MjgwNzUzMjlaMDMxMTAvBgNV
BAMTKDlBRkUxMzExNEM3NUUxQkI4N0YwODBCOTc3RjdCNjgxQ0FDREVEMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJ7PE3YbEPD5lJuEYSthHP/la
FNnrfxri+LqxUfDWQbn1rK7c5dIwOPx2CJxDfHgWIzSzDvnSL26H8VzLad8xwN4r
MVMo8dviNljMRiVp0FanFyWGk48/mxERJtjA0CYqCm8TrQyyFferd1VEfhb5++Kb
p0aFU1S+WDY871OkmMsPG6H1ESFePFCz2gAvYsHiYb9khQOodrc5DRAfZoOEo+hE
lh7ulK5yDLpR3lEKKVy90ioOKhskBJD+ET6zM+Byl/9NZdOeAXDXK0lEz4Ppt+Dn
UeHhGs6WZg8Vo60r24iCc7T5h1uiTutK+lVpYpsiiV3iKi8uWwdu85N2nJkxAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUmv4TEUx14buH8IC5d/e2gcrN7REwHwYDVR0j
BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB
MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMjM4ODE1MjI5MDcwNTQxMTcvMC8zMTMwMzMyZTMx
MzAzNzJlMzIzMTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM3MzIzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdr2DANBgkqhkiG9w0BAQsFAAOCAQEApdcTMaqlnwWO27AZAUx/
IRw9zxyLJ6HZVj/MpM9917YggWOd62UU7SvlDOZj6r1o3667zhJPsjtf5Q7wQYSR
Mx/6oIA6yq9RTP4b5n4HA7V3wfGLegN1+xYeIJ4AW1BpWcXUwOZQAtDzfU/dSs/v
sXuWwfFdbvPdjONfhiUwQj+d9ICzfp1gDbwgYKZxlJ7k+S2o4lYaFQrymW6DMOCD
qWKgk/nL6PACsxj1tk44+72i/e1ltnXXc3xmXlbkf3qOTG8Me/lnzr/wBbmIN9Xf
hQFI5BupAEDS6QIigmtMlE1QDEjLwIsiLjrETyyGNNG743cXLQkbf1ZkoX2jHl/j
mA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:45 2026 by rpki-client