Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e382e302f32322d3232203d3e2039383038.roa
File:                     3130332e3231362e382e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier:          DCTYGZ7uo54dS8EaRsrrrjl62MVWPENCeWI3PSIfn0M=
Subject key identifier:   E4:05:74:D5:CE:B1:B0:01:57:10:48:6B:DC:E6:24:26:2B:50:51:7D
Certificate issuer:       /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial:       382DA7463CAD7D90B5B8942B1650A774841F576B
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e382e302f32322d3232203d3e2039383038.roa
Signing time:             Wed 13 May 2026 02:01:35 +0000
ROA not before:           Wed 13 May 2026 01:56:35 +0000
ROA not after:            Wed 12 May 2027 02:01:35 +0000
asID:                     9808
IP address blocks:        103.216.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2d:a7:46:3c:ad:7d:90:b5:b8:94:2b:16:50:a7:74:84:1f:57:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
        Validity
            Not Before: May 13 01:56:35 2026 GMT
            Not After : May 12 02:01:35 2027 GMT
        Subject: CN=E40574D5CEB1B0015710486BDCE624262B50517D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:cf:89:d0:23:7a:7a:be:27:06:c1:ad:98:
                    d0:3b:34:a2:c8:84:e6:ab:14:eb:99:16:eb:e1:61:
                    a9:55:25:b3:8d:c8:aa:84:79:7a:37:5d:5b:66:f2:
                    e9:75:02:93:e4:cc:45:45:a8:f5:80:d6:43:0f:a3:
                    3f:4a:90:c0:39:97:74:41:d8:be:87:03:d5:5d:af:
                    a2:10:56:09:6b:6e:b3:a9:5e:70:22:da:94:a5:1f:
                    f8:fb:ea:6d:09:1c:1c:55:c4:23:e7:fd:cd:e5:39:
                    a9:7e:05:4c:53:e3:76:60:b4:3e:9a:62:21:77:c3:
                    a0:50:1e:89:bc:a1:71:e8:99:76:e4:d0:66:54:7c:
                    67:3e:f6:a6:4e:89:66:72:1f:80:97:05:52:db:6e:
                    8f:9f:a8:27:9f:e0:43:40:11:8b:a8:26:e7:25:9b:
                    10:e4:13:e1:bb:79:a8:fe:22:ed:ef:81:88:66:0c:
                    35:eb:8c:e9:f6:25:3b:c5:f5:41:60:d8:4c:02:61:
                    00:10:8a:ae:00:61:ce:90:15:88:76:97:0c:3f:0d:
                    59:0b:a9:24:c7:88:ee:2d:97:41:7d:78:92:35:bf:
                    16:84:d8:af:27:a9:c5:0f:e2:ac:3c:0a:33:87:98:
                    f5:6d:b5:dd:9d:f5:b7:9d:c6:ee:e9:00:d9:a4:1b:
                    1c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:74:D5:CE:B1:B0:01:57:10:48:6B:DC:E6:24:26:2B:50:51:7D
            X509v3 Authority Key Identifier:
                keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3130332e3231362e382e302f32322d3232203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:29:58:3c:86:86:67:16:36:58:69:71:90:6a:1f:82:b6:4d:
         02:77:cb:53:1d:9b:91:a5:b8:8b:3a:08:2c:48:ac:77:12:25:
         ca:45:84:0f:71:73:da:d9:9f:bc:e4:09:a7:10:40:81:58:d8:
         dd:26:03:32:e8:f3:73:b6:3e:71:d9:b1:0a:05:4d:09:a6:6d:
         83:d1:04:e4:13:1f:b3:7b:4b:a8:aa:d8:86:29:dc:76:8d:2d:
         1b:95:74:a4:37:90:84:56:55:d4:31:f3:42:8d:db:70:36:9f:
         7b:f1:bf:cf:b1:57:b7:04:70:c0:69:57:a6:cd:0a:97:4a:43:
         61:13:cf:80:47:48:cd:e3:20:f1:6a:1a:ba:5f:c0:92:21:ee:
         ce:f7:81:ec:66:96:01:58:bd:e3:60:66:2c:74:0b:c2:ee:b7:
         e0:d7:1f:a9:34:b0:87:67:b9:64:20:02:7d:7b:1e:1a:cb:b3:
         ed:f7:a0:f0:10:20:79:1a:3c:d3:10:c5:f8:54:a4:d6:fa:33:
         e1:6b:1a:44:03:2a:44:30:aa:e0:5d:7e:16:e5:6c:1b:f5:45:
         2d:46:dc:70:7e:9f:86:ff:25:dd:e2:d4:8d:1f:2c:b9:2f:35:
         66:03:81:d7:64:b0:e1:29:4d:4c:94:63:dc:de:08:fa:21:b2:
         b9:61:bf:44
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUOC2nRjytfZC1uJQrFlCndIQfV2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJG
NEM0QzZEQjAeFw0yNjA1MTMwMTU2MzVaFw0yNzA1MTIwMjAxMzVaMDMxMTAvBgNV
BAMTKEU0MDU3NEQ1Q0VCMUIwMDE1NzEwNDg2QkRDRTYyNDI2MkI1MDUxN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXc+J0CN6er4nBsGtmNA7NKLI
hOarFOuZFuvhYalVJbONyKqEeXo3XVtm8ul1ApPkzEVFqPWA1kMPoz9KkMA5l3RB
2L6HA9Vdr6IQVglrbrOpXnAi2pSlH/j76m0JHBxVxCPn/c3lOal+BUxT43ZgtD6a
YiF3w6BQHom8oXHomXbk0GZUfGc+9qZOiWZyH4CXBVLbbo+fqCef4ENAEYuoJucl
mxDkE+G7eaj+Iu3vgYhmDDXrjOn2JTvF9UFg2EwCYQAQiq4AYc6QFYh2lww/DVkL
qSTHiO4tl0F9eJI1vxaE2K8nqcUP4qw8CjOHmPVttd2d9bedxu7pANmkGxxtAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU5AV01c6xsAFXEEhr3OYkJitQUX0wHwYDVR0j
BBgwFoAUUREBQGl6XnkVRuWUoiCAQvTExtswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ4OTI0NTU1MjYwNzIzNS8wLzUxMTEwMTQwNjk3QTVFNzkxNTQ2RTU5NEEyMjA4
MDQyRjRDNEM2REIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJGNEM0QzZEQi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk4NDg5MjQ1NTUyNjA3MjM1LzAvMzEzMDMzMmUzMjMx
MzYyZTM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJn2AgwDQYJKoZIhvcNAQELBQADggEBAIEpWDyGhmcWNlhpcZBqH4K2TQJ3y1Md
m5GluIs6CCxIrHcSJcpFhA9xc9rZn7zkCacQQIFY2N0mAzLo83O2PnHZsQoFTQmm
bYPRBOQTH7N7S6iq2IYp3HaNLRuVdKQ3kIRWVdQx80KN23A2n3vxv8+xV7cEcMBp
V6bNCpdKQ2ETz4BHSM3jIPFqGrpfwJIh7s73gexmlgFYveNgZix0C8Lut+DXH6k0
sIdnuWQgAn17HhrLs+33oPAQIHkaPNMQxfhUpNb6M+FrGkQDKkQwquBdfhblbBv1
RS1G3HB+n4b/Jd3i1I0fLLkvNWYDgddksOEpTUyUY9zeCPohsrlhv0Q=
-----END CERTIFICATE-----
Generated at Wed May 13 12:46:19 2026 by rpki-client