Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232342e302f32322d3332203d3e203633353930.roa
File:                     3130332e38392e3232342e302f32322d3332203d3e203633353930.roa (raw, json)
Hash identifier:          xPqLH3vSxBWwkwgM44juU0NpuNPWTKiO7rqIBeWBn9w=
Subject key identifier:   FB:BA:03:B5:6D:DE:13:C9:0C:8B:68:17:3D:68:9A:02:F0:05:2A:08
Certificate issuer:       /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
Certificate serial:       450860FE302E6361CDB2C0F4F66E29745EE6FB34
Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232342e302f32322d3332203d3e203633353930.roa
Signing time:             Thu 23 Apr 2026 07:28:06 +0000
ROA not before:           Thu 23 Apr 2026 07:23:06 +0000
ROA not after:            Thu 22 Apr 2027 07:28:06 +0000
asID:                     63590
IP address blocks:        103.89.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:08:60:fe:30:2e:63:61:cd:b2:c0:f4:f6:6e:29:74:5e:e6:fb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202
        Validity
            Not Before: Apr 23 07:23:06 2026 GMT
            Not After : Apr 22 07:28:06 2027 GMT
        Subject: CN=FBBA03B56DDE13C90C8B68173D689A02F0052A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a7:d6:90:2f:8f:ef:34:cd:6f:38:2e:0e:1c:
                    ea:ad:fa:af:f5:30:49:03:f1:ad:d1:89:3f:cf:73:
                    c4:c0:dd:08:6e:51:92:4d:fe:5f:54:b2:6c:81:a6:
                    0d:21:12:93:9d:e0:20:fe:65:dc:bc:81:93:ff:31:
                    f6:5e:c2:e8:34:9d:ef:a6:c0:cb:45:8f:34:dc:ac:
                    cc:f3:f2:cf:47:06:b1:f4:76:60:ee:b4:a6:85:3d:
                    2a:5b:9d:25:e9:34:6e:5c:5e:ad:46:e6:0d:18:75:
                    f2:cd:f9:e6:3a:05:54:51:d2:4b:bf:3c:5d:dd:b0:
                    28:aa:04:6e:64:2a:d3:9a:0c:bd:34:08:0b:7c:64:
                    4f:5c:89:28:5a:30:98:32:ac:f2:c4:c3:ad:f1:f0:
                    2a:1b:89:79:c8:f7:4f:7b:1e:ba:9a:f0:c3:14:e8:
                    b7:d1:51:51:31:d8:82:31:28:20:40:2d:51:7c:5f:
                    06:6a:54:cf:03:f1:7a:0d:73:1c:18:1c:14:92:5c:
                    ae:18:c7:9e:f5:61:2e:9e:75:e1:91:e6:0c:d7:d5:
                    c5:81:fa:cb:34:4c:38:1c:ac:eb:3f:37:b9:ed:d8:
                    7e:96:ff:2c:ef:cf:dd:e6:1c:0d:d7:31:95:2b:f6:
                    9f:34:3e:20:eb:21:cd:44:7e:53:9d:06:d9:8a:64:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BA:03:B5:6D:DE:13:C9:0C:8B:68:17:3D:68:9A:02:F0:05:2A:08
            X509v3 Authority Key Identifier:
                keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3232342e302f32322d3332203d3e203633353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:aa:ce:df:42:42:47:35:43:19:a2:41:6f:c3:4d:ad:63:f2:
         de:96:30:11:69:9f:3b:d9:ee:32:0f:44:b0:f3:4c:55:4f:c6:
         81:1b:34:7d:76:8c:03:6f:b4:37:15:ba:63:4c:9a:b5:3b:74:
         10:2d:6a:05:89:64:b2:82:02:4a:d3:15:d9:65:85:9d:82:9c:
         1d:da:ed:60:49:2f:bc:2e:0c:06:8d:ad:50:e1:fb:2e:14:1a:
         05:81:df:fd:de:31:a1:03:6c:cc:23:c9:c8:26:8e:bc:4f:ed:
         18:ff:08:0b:6d:51:01:f1:33:eb:c6:7a:79:6b:64:69:9f:8f:
         81:6e:f4:7f:a2:bc:de:ba:67:69:a0:23:60:53:e0:a5:af:dc:
         c1:b7:1e:19:a6:6c:22:4a:95:94:69:5d:ff:4f:5d:6c:a7:ac:
         2c:c8:99:db:b3:d6:0b:aa:2e:96:54:5b:1a:aa:61:1e:35:2b:
         0d:5d:34:6d:9a:bc:3e:1c:fb:21:0d:f0:7b:c9:d5:ad:32:27:
         43:3c:c5:80:0c:01:6c:42:ed:18:c0:2a:21:1f:b8:88:fe:af:
         5e:69:82:27:09:2b:36:86:8b:67:15:3b:f9:9e:55:14:7c:bb:
         8f:7d:0b:61:44:ca:d7:d0:8c:c2:fd:96:dd:1f:5d:07:d3:08:
         a5:27:10:d8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 20:20:33 2026 by rpki-client