Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3139322e302f32322d3332203d3e203633353930.roa
File:                     3130332e38392e3139322e302f32322d3332203d3e203633353930.roa (raw, json)
Hash identifier:          29GO6aImAZT/5f0LvZV/6XTx4MsilG58kgTYpyiogvw=
Subject key identifier:   6B:F6:79:6A:39:0F:8C:0D:42:9B:6B:46:A0:B8:D1:66:83:97:D1:C5
Certificate issuer:       /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial:       7874E1451E39AF3CC86B0EC1FB004866F99533D1
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3139322e302f32322d3332203d3e203633353930.roa
Signing time:             Thu 23 Apr 2026 07:28:05 +0000
ROA not before:           Thu 23 Apr 2026 07:23:05 +0000
ROA not after:            Thu 22 Apr 2027 07:28:05 +0000
asID:                     63590
IP address blocks:        103.89.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:74:e1:45:1e:39:af:3c:c8:6b:0e:c1:fb:00:48:66:f9:95:33:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
        Validity
            Not Before: Apr 23 07:23:05 2026 GMT
            Not After : Apr 22 07:28:05 2027 GMT
        Subject: CN=6BF6796A390F8C0D429B6B46A0B8D1668397D1C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:97:1a:9f:96:b8:9f:6c:d9:90:32:ec:cc:
                    51:02:6c:2f:f6:eb:04:f8:a2:9d:f9:09:ec:dd:81:
                    76:18:93:0c:3f:3e:b2:72:48:9b:71:51:d9:34:bd:
                    b3:7a:81:c4:7e:bc:35:f6:bc:5a:9d:85:0a:d1:be:
                    32:d3:4c:45:4a:44:e7:fb:42:22:fc:2c:0a:7f:5a:
                    6b:7b:8f:53:f3:16:96:01:35:d7:d1:f8:e1:9e:c5:
                    03:6e:c3:d6:f0:54:de:e5:ca:ee:24:1b:2d:80:cb:
                    af:e1:fd:7d:9a:17:f0:e9:32:7c:c8:a3:b6:8b:9b:
                    67:c1:c6:68:c9:22:86:53:34:22:f0:37:74:37:04:
                    23:b5:51:6f:62:4f:9d:90:3a:2f:f4:84:b1:0e:a1:
                    ea:1b:5f:ed:02:51:9e:19:53:03:87:76:5e:00:fe:
                    09:28:90:76:ec:25:20:6c:85:54:e9:7f:a8:49:e1:
                    51:a1:b8:39:c1:e8:7e:2a:af:ec:5d:22:11:c7:48:
                    50:6e:6f:ac:9e:da:59:80:3c:b5:ed:95:c1:a8:d6:
                    7e:cd:cf:60:0f:19:93:75:a3:55:33:03:df:83:31:
                    4c:90:a2:c7:2d:a8:74:13:c4:46:0b:cd:fe:60:41:
                    5b:e7:b9:c5:02:4d:49:fa:c1:cc:8b:d1:a4:8f:6f:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F6:79:6A:39:0F:8C:0D:42:9B:6B:46:A0:B8:D1:66:83:97:D1:C5
            X509v3 Authority Key Identifier:
                keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3139322e302f32322d3332203d3e203633353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:9e:83:da:47:67:3e:5e:d0:b1:1b:20:0d:29:a1:32:77:bd:
         5e:a2:c7:2a:bc:04:96:02:f6:94:5a:69:7c:29:5f:00:3f:11:
         32:16:6a:c2:ef:c4:9b:8f:05:90:e3:36:07:59:0c:8f:59:97:
         e8:bd:88:42:51:01:a9:c7:bf:5a:8f:1d:bc:1a:27:86:4d:00:
         8d:47:9d:18:d5:8c:d9:fb:e1:f8:09:ce:11:3a:4e:ff:3a:8b:
         48:f9:13:cb:5b:1f:a0:d8:bf:69:3e:dd:43:78:b4:ac:bd:a5:
         77:8c:64:f8:b7:e3:ab:0c:55:9d:c4:be:7f:f0:7b:9e:7a:2c:
         5e:93:95:5a:64:2b:a7:61:99:ce:d2:b6:9f:13:84:37:4c:00:
         c3:3c:17:3a:c5:ee:e7:40:39:aa:68:ce:cd:a5:61:b2:5f:82:
         35:d6:25:3e:ae:5a:4b:a3:b2:56:7d:8d:9b:68:20:d4:6b:6c:
         8c:31:9d:a3:fd:e6:18:79:42:a1:23:b8:a6:73:eb:fb:58:1c:
         bf:c3:d3:94:a5:a0:f2:84:c5:bd:0c:22:6c:45:c5:c1:0d:14:
         e6:18:59:7a:26:a0:5b:10:58:15:96:b3:09:42:68:21:68:31:
         92:1c:6f:60:77:31:94:a8:b5:e6:f2:38:c2:1c:c1:06:be:9c:
         ef:4f:13:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:28 2026 by rpki-client