Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232342e3232382e302f32322d3234203d3e203539303438.roa
File:                     3130332e3232342e3232382e302f32322d3234203d3e203539303438.roa (raw, json)
Hash identifier:          Msqt/UG3HlWE7DcvwRmdUsPjToK9aTFvOtdghxfnUDY=
Subject key identifier:   32:F4:15:3A:61:2B:C4:B1:02:F9:35:D3:05:23:70:1F:FE:51:F7:AE
Certificate issuer:       /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial:       6BE3DA58DAE686E5D1D11A3D81A629F76031BDB1
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232342e3232382e302f32322d3234203d3e203539303438.roa
Signing time:             Mon 11 May 2026 07:00:49 +0000
ROA not before:           Mon 11 May 2026 06:55:49 +0000
ROA not after:            Mon 10 May 2027 07:00:49 +0000
asID:                     59048
IP address blocks:        103.224.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e3:da:58:da:e6:86:e5:d1:d1:1a:3d:81:a6:29:f7:60:31:bd:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
        Validity
            Not Before: May 11 06:55:49 2026 GMT
            Not After : May 10 07:00:49 2027 GMT
        Subject: CN=32F4153A612BC4B102F935D30523701FFE51F7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:65:3f:52:e7:92:67:45:64:aa:d9:38:4f:
                    1a:4d:9f:84:9c:9b:68:aa:00:a2:42:fd:c8:db:6e:
                    de:83:9f:11:e5:e2:c1:b6:b2:1b:8f:12:fc:a0:ea:
                    e0:e6:26:b2:e9:58:ac:77:eb:2c:ac:b8:be:df:38:
                    1b:5b:e3:45:e5:73:6b:52:de:12:36:18:ba:b0:6a:
                    59:16:87:66:da:5a:85:2c:d4:20:92:bb:ac:34:d3:
                    43:c6:97:8b:10:89:b0:f8:e2:30:91:c9:7f:5d:dd:
                    b1:37:46:33:11:73:74:5a:02:78:32:43:dd:56:02:
                    d7:a0:4b:6a:f1:da:70:11:b4:34:a0:9f:6e:f2:de:
                    63:a5:99:42:b2:27:e7:be:36:35:6a:af:80:a1:8c:
                    de:13:01:ff:b3:6d:fb:5f:a8:d3:3c:f8:c9:2e:62:
                    76:52:e3:ae:37:2b:83:85:aa:8b:51:95:74:57:0e:
                    04:ed:dd:02:cb:7a:57:4f:c6:05:3f:fa:39:58:27:
                    f9:27:30:6e:bf:1a:1a:14:28:9b:82:f6:29:1e:4d:
                    32:e1:b0:0f:59:9a:71:3d:4a:a0:a9:48:c3:be:0d:
                    1a:d1:be:59:8f:15:4c:13:3e:b2:57:6f:a9:2a:39:
                    81:17:e4:89:ac:ea:10:26:e7:e3:96:11:5d:93:89:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F4:15:3A:61:2B:C4:B1:02:F9:35:D3:05:23:70:1F:FE:51:F7:AE
            X509v3 Authority Key Identifier:
                keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232342e3232382e302f32322d3234203d3e203539303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:f1:0c:1f:bc:4a:7c:b6:6d:27:e8:00:1c:f1:cf:51:7b:83:
         25:b3:25:78:93:59:63:5d:e0:55:96:b2:25:4a:63:cc:03:26:
         78:09:d4:b5:ee:c3:0d:cd:0b:a5:b6:c9:2f:d4:f4:17:b6:c0:
         4f:05:9a:b7:88:1c:89:95:61:4e:52:66:c9:4d:43:27:0b:6f:
         5f:6d:48:79:2e:ca:b9:2a:3f:0e:bb:8c:35:13:84:36:e6:b0:
         13:56:5e:ea:17:44:0f:c8:6e:d2:6c:0f:65:df:bd:6c:56:52:
         5c:cc:43:ae:f2:54:5e:4b:c0:4e:e2:d4:8d:4e:66:71:e0:3f:
         3b:b6:49:df:33:0c:0b:73:9d:3d:5e:84:ef:f3:49:bf:61:b2:
         49:c7:ce:a7:86:84:9d:e3:84:df:60:c9:3c:d9:a0:80:50:44:
         d5:9c:cd:2d:0f:11:af:ed:5b:b4:d3:27:41:99:6d:ed:c4:57:
         a5:c2:f0:66:fe:be:6c:de:14:c4:68:0e:13:4b:01:30:82:fa:
         39:5a:af:36:d4:e4:fa:a3:da:a8:21:67:d6:b0:35:ac:54:5c:
         ec:f7:48:e7:ee:66:ca:b4:89:34:42:dd:d9:a7:bf:2f:36:b7:
         c1:77:46:b9:b0:88:25:06:91:63:b9:da:8e:95:3d:fc:a5:4a:
         68:3d:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:55 2026 by rpki-client