Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa
File:                     3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier:          KJ8ndn4BgQmtgW+vFewhPUiCUx0OF8yJqc/FF4/GVvA=
Subject key identifier:   65:9F:BF:62:50:F6:EA:45:B3:F0:1F:B0:5D:2C:D4:2E:B7:51:5D:8B
Certificate issuer:       /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial:       1426107B7AB90286917C7DA85D3FEB29E6E3ED5A
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa
Signing time:             Fri 08 May 2026 08:33:29 +0000
ROA not before:           Fri 08 May 2026 08:28:29 +0000
ROA not after:            Fri 07 May 2027 08:33:29 +0000
asID:                     58466
IP address blocks:        103.222.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:26:10:7b:7a:b9:02:86:91:7c:7d:a8:5d:3f:eb:29:e6:e3:ed:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
        Validity
            Not Before: May  8 08:28:29 2026 GMT
            Not After : May  7 08:33:29 2027 GMT
        Subject: CN=659FBF6250F6EA45B3F01FB05D2CD42EB7515D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f6:b2:65:cf:f5:8b:50:61:8f:6d:c0:ec:78:
                    0b:58:fd:82:fe:1f:fd:41:10:21:b2:af:ac:85:78:
                    d6:7e:38:75:28:69:35:61:87:29:0e:60:bc:ca:4a:
                    df:a5:d4:52:9e:8e:46:5f:20:a4:75:f9:a3:3a:ab:
                    d3:e2:45:c0:5a:27:e0:62:82:93:ce:3f:cb:76:4e:
                    7a:e8:e2:98:26:60:ed:e5:7d:5b:55:33:34:57:f5:
                    bc:8b:84:ca:b9:bd:81:26:db:c9:9e:45:84:d7:48:
                    19:cf:00:67:d0:0b:83:b5:5e:68:fd:8c:5f:77:58:
                    55:fa:92:1f:5e:a7:39:d9:e2:6b:f9:ff:52:da:b1:
                    c0:99:43:34:ee:25:64:86:6d:a0:f6:e4:82:a2:30:
                    95:e2:98:31:67:82:ba:c6:80:2e:8e:e3:db:fc:53:
                    65:37:9e:c9:5e:87:ee:d8:8b:2b:d2:0f:28:df:b1:
                    20:22:79:f7:e0:46:e9:8a:5a:77:f8:e4:17:b4:ea:
                    78:3d:f5:84:3a:32:02:fd:2e:f4:b8:2b:99:b5:26:
                    bc:a3:70:3c:34:dd:ae:58:6c:d6:d1:cf:5c:b6:c9:
                    00:1f:d5:61:bc:06:bc:2d:ea:17:43:75:f6:9f:12:
                    62:16:ce:9a:1d:dd:3a:73:bd:a1:ae:8d:e1:22:ea:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9F:BF:62:50:F6:EA:45:B3:F0:1F:B0:5D:2C:D4:2E:B7:51:5D:8B
            X509v3 Authority Key Identifier:
                keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3138302e302f32322d3232203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.222.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:75:9e:78:a0:8b:74:57:d6:ac:a7:06:de:5f:a3:fa:09:de:
         25:d9:e7:83:b4:63:2a:9d:8c:69:f2:c0:ae:1c:7b:90:c8:14:
         1c:94:7a:ac:2d:b5:8a:81:28:9c:21:a9:d6:74:c2:51:5b:08:
         60:44:06:1c:6d:03:48:20:c4:91:e1:61:07:8d:46:a4:6f:08:
         3b:85:6d:df:e5:60:47:60:85:8f:23:39:52:8a:82:2f:26:10:
         1d:e0:97:30:5a:f1:df:83:12:3e:9f:c2:50:8a:1c:f8:4b:3d:
         78:7a:c6:58:64:38:9a:48:cb:26:3a:01:94:37:e4:1d:cd:f7:
         0c:35:80:57:38:07:aa:1a:12:bb:e4:48:a5:8d:d3:46:68:d0:
         d9:8c:e1:d5:b6:f1:3c:e6:d6:e4:68:90:d1:4a:58:3d:4a:37:
         a8:d7:84:45:ae:64:fa:62:c6:e0:be:1a:48:d6:f3:f4:ff:3a:
         8f:83:54:25:60:b5:82:5a:4c:cb:fc:92:0e:29:87:6b:12:f4:
         ef:ef:61:3c:cd:f6:db:12:0e:16:57:78:88:7b:3a:43:68:fd:
         a3:8f:8d:f0:8a:c1:94:3f:bb:20:72:aa:69:16:5f:58:19:e6:
         df:0b:56:79:93:0b:8b:1c:1f:3b:d8:93:17:65:d4:e2:cf:f2:
         3f:59:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:36:45 2026 by rpki-client