Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232302e302f32322d3332203d3e203633353930.roa
File:                     3130332e38392e3232302e302f32322d3332203d3e203633353930.roa (raw, json)
Hash identifier:          a5twgtrnWTuwEz+pvgWx+pYogSZ6vAVwyLaBizfXN/8=
Subject key identifier:   55:F8:CF:8A:F9:0F:6B:3D:C3:ED:D8:6E:2D:12:06:06:5C:F6:EA:43
Certificate issuer:       /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial:       692F656CC51EE417341B07572B5AB603FB8E5A00
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232302e302f32322d3332203d3e203633353930.roa
Signing time:             Thu 23 Apr 2026 07:28:05 +0000
ROA not before:           Thu 23 Apr 2026 07:23:05 +0000
ROA not after:            Thu 22 Apr 2027 07:28:05 +0000
asID:                     63590
IP address blocks:        103.89.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2f:65:6c:c5:1e:e4:17:34:1b:07:57:2b:5a:b6:03:fb:8e:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
        Validity
            Not Before: Apr 23 07:23:05 2026 GMT
            Not After : Apr 22 07:28:05 2027 GMT
        Subject: CN=55F8CF8AF90F6B3DC3EDD86E2D1206065CF6EA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:71:9e:3f:39:5c:02:f2:2a:72:93:4e:bf:
                    c9:42:b2:5b:69:68:70:e4:59:e7:13:01:4a:e4:de:
                    68:e2:0f:90:ec:1b:db:2e:8e:32:7f:77:ef:fd:3c:
                    0b:2b:31:86:11:c6:54:26:1d:65:ff:37:7c:0c:6f:
                    45:5a:99:10:44:0a:aa:ae:27:ce:ad:be:e9:03:1c:
                    5f:df:ba:41:31:84:95:4e:b3:a7:a8:3b:01:48:d0:
                    60:e6:4b:be:95:30:c1:82:3c:dd:f3:20:18:cc:21:
                    6b:29:d0:58:47:97:00:56:39:fd:9b:cb:d2:8b:19:
                    f8:0d:cb:5d:99:4c:ab:e4:28:2d:68:5a:2f:40:0f:
                    b4:8f:e0:d5:ad:e3:32:e1:13:00:11:ae:2b:f1:41:
                    8b:b3:36:bb:3f:57:f3:4d:94:55:14:26:22:04:14:
                    4e:a7:ca:b2:94:21:f1:84:6b:64:21:e7:5f:ed:87:
                    6b:ce:74:6c:78:f9:dd:a6:1c:19:21:94:0d:30:2d:
                    68:de:49:9c:58:ff:e0:52:b4:7d:b0:2d:65:fe:9a:
                    8e:30:ac:38:db:45:12:96:79:91:d9:e3:f7:79:70:
                    de:89:6a:c3:c8:9f:19:d6:70:38:1f:a0:22:1b:e2:
                    cf:51:2b:9d:1d:91:03:96:c9:88:e8:03:81:5b:72:
                    4b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F8:CF:8A:F9:0F:6B:3D:C3:ED:D8:6E:2D:12:06:06:5C:F6:EA:43
            X509v3 Authority Key Identifier:
                keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232302e302f32322d3332203d3e203633353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:64:44:ae:0e:4f:fd:0e:24:09:67:91:c3:05:d4:aa:75:c1:
         f8:d6:ca:84:c4:c7:41:4d:16:03:1e:04:d7:06:2a:83:6e:74:
         e1:4b:94:1e:f6:d8:69:6e:3f:6b:6b:50:fd:78:fe:1b:bd:b4:
         04:16:95:54:d0:c0:d3:8d:9a:f9:18:b5:93:92:17:88:eb:77:
         2d:1f:8f:d8:50:05:33:da:eb:8a:ba:e5:32:66:91:91:8b:bc:
         a2:50:2a:81:66:34:e9:7f:9d:a1:c6:be:28:25:3e:e9:4e:8f:
         32:9d:5a:02:c9:bc:2a:03:0b:c3:35:5e:be:c1:9d:ed:99:2e:
         f1:cf:5f:ba:fd:4b:47:03:f9:9a:b2:65:7e:06:c6:0d:db:ba:
         e1:78:41:e0:9d:34:35:81:2b:53:55:75:a3:95:b6:39:e5:ec:
         83:02:b6:3e:13:aa:c8:4f:29:00:09:7d:19:3b:a3:99:bc:67:
         1f:0a:50:4a:2d:4c:5e:d8:c0:34:0d:41:8e:ee:1c:d0:ef:cf:
         38:26:f1:a2:f4:a8:cc:67:ec:7b:7d:b7:7c:3a:75:03:fd:04:
         89:f5:58:37:ea:19:e5:b9:e2:ea:94:3a:a4:bd:3d:08:3a:f8:
         57:a6:32:33:63:22:26:88:5d:fa:be:11:4a:b0:25:33:64:fe:
         da:10:ff:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:29 2026 by rpki-client