Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e31322e302f32322d3232203d3e2039383038.roa
File:                     3130332e3231362e31322e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier:          s4rqNrSBauNmGEpPs3PQza+LIlbk8wVvxnITqmkQYmg=
Subject key identifier:   2D:7E:F1:09:B6:6D:F5:77:50:60:93:32:77:8D:75:6F:EF:82:9A:20
Certificate issuer:       /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial:       6B7F8C0144986C73C78E138FD946DDD9488A8180
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e31322e302f32322d3232203d3e2039383038.roa
Signing time:             Wed 13 May 2026 02:02:15 +0000
ROA not before:           Wed 13 May 2026 01:57:15 +0000
ROA not after:            Wed 12 May 2027 02:02:15 +0000
asID:                     9808
IP address blocks:        103.216.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7f:8c:01:44:98:6c:73:c7:8e:13:8f:d9:46:dd:d9:48:8a:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
        Validity
            Not Before: May 13 01:57:15 2026 GMT
            Not After : May 12 02:02:15 2027 GMT
        Subject: CN=2D7EF109B66DF57750609332778D756FEF829A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:11:38:c3:18:c9:22:f6:3c:95:ea:ad:70:15:
                    39:0f:33:f0:57:3b:90:63:d2:64:5f:e1:18:9d:b6:
                    96:84:1b:70:2e:20:70:b9:a6:ce:3d:1e:06:24:56:
                    2b:2e:95:3c:15:18:62:9a:83:de:92:69:8a:07:02:
                    08:c1:b7:91:01:45:7f:23:71:98:36:e4:cc:92:43:
                    9d:ef:32:dc:a5:0a:08:ee:de:20:35:d1:7f:e1:42:
                    fe:1f:ed:e7:dd:8a:13:9a:7b:e4:71:6d:75:e8:ab:
                    19:0c:f3:01:8c:8f:00:49:f8:5b:3e:94:e9:91:60:
                    76:35:26:2c:fc:08:8e:5e:3a:a5:fa:c5:69:6d:29:
                    aa:9f:68:c7:bc:5f:f4:fb:3a:59:1d:48:0d:d8:df:
                    ba:bf:f1:f7:c7:c7:b8:58:17:ea:c4:3f:21:16:d2:
                    06:cc:bf:39:c2:04:b8:8b:5f:7b:11:0b:9e:5c:11:
                    66:fd:06:fe:0d:d9:9a:36:95:67:18:cd:89:de:94:
                    c3:27:f4:df:e7:16:e7:97:0a:d9:7f:43:47:2e:d0:
                    96:0b:5e:11:85:e5:cf:d5:e6:0d:04:51:69:ca:ce:
                    a4:29:fe:57:b1:d6:24:90:1c:25:f5:9d:b3:70:f0:
                    af:99:8b:cb:64:1a:b0:16:9b:e4:98:1a:7f:2d:1c:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7E:F1:09:B6:6D:F5:77:50:60:93:32:77:8D:75:6F:EF:82:9A:20
            X509v3 Authority Key Identifier:
                keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e31322e302f32322d3232203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:4c:25:ce:94:f7:6c:06:65:06:68:a2:26:bf:86:2e:a2:
         52:ba:44:55:6b:cb:45:c4:41:a0:5a:c4:75:1a:c3:2e:dc:0e:
         b2:0f:1c:3c:5d:ec:01:bb:1d:b3:9b:b2:8e:57:b6:d3:08:04:
         6b:d4:5a:87:04:4b:78:94:71:8d:e9:82:27:05:b8:67:ab:65:
         ce:c0:15:44:72:02:d7:f7:9b:57:3b:39:55:e8:21:80:8f:19:
         75:f8:04:00:a3:44:dd:48:80:ea:9d:04:4e:69:bf:8f:0a:74:
         5f:1b:95:58:f9:d9:0d:4c:ad:bd:c5:a3:ab:ea:19:51:f6:06:
         bd:15:fd:48:d9:78:c3:ad:47:6f:3f:3f:58:7b:33:aa:c5:28:
         77:99:14:3e:ab:6a:28:8e:24:a0:73:76:47:98:de:f5:ac:8a:
         f5:6d:00:ee:6f:c3:c2:db:d1:d5:f9:28:0c:ba:d0:ad:ee:fa:
         f3:5d:a8:f4:b4:0d:8c:d8:72:20:f1:4a:f8:68:ad:e7:c7:b5:
         d3:4d:7a:98:21:a7:fd:c6:70:75:09:aa:cf:16:e5:95:90:4f:
         dd:e0:42:d5:b9:d0:b9:bf:49:4f:16:5b:74:29:7a:25:8b:db:
         eb:d5:a7:ed:33:ff:00:97:1a:b3:2d:7b:6a:e5:84:db:28:f9:
         b3:8e:16:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:25:16 2026 by rpki-client