Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098524737883078659/0/3130332e3131392e32382e302f32322d3232203d3e2030.roa
File:                     3130332e3131392e32382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          OhggVO6V+L8Uq4dwZzxkFnjLxTIYUZIlj0+gjoYhKf0=
Subject key identifier:   06:B0:5C:36:00:DC:30:BE:3A:57:44:EC:91:EF:6A:CD:16:B3:F2:DE
Certificate issuer:       /CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7
Certificate serial:       5DC411A28B67C2728B61E9B30124E697DCF7FB9B
Authority key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/3130332e3131392e32382e302f32322d3232203d3e2030.roa
Signing time:             Mon 20 Apr 2026 08:26:38 +0000
ROA not before:           Mon 20 Apr 2026 08:21:38 +0000
ROA not after:            Mon 19 Apr 2027 08:26:38 +0000
asID:                     0
IP address blocks:        103.119.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c4:11:a2:8b:67:c2:72:8b:61:e9:b3:01:24:e6:97:dc:f7:fb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7
        Validity
            Not Before: Apr 20 08:21:38 2026 GMT
            Not After : Apr 19 08:26:38 2027 GMT
        Subject: CN=06B05C3600DC30BE3A5744EC91EF6ACD16B3F2DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:be:cf:8e:5d:eb:bd:d2:4b:50:5a:ed:f4:
                    64:61:33:1f:85:05:db:b6:b4:d3:0b:d3:5b:25:bf:
                    94:d6:3f:37:d9:d5:d9:b3:99:57:22:4e:91:b0:99:
                    34:91:a4:70:01:ff:97:ae:eb:c9:8e:66:4a:49:72:
                    74:55:5c:85:81:dc:03:5d:1a:ca:af:62:35:d5:4a:
                    03:bb:96:a6:dd:60:5f:dc:4e:16:52:3d:49:36:0f:
                    3b:78:df:65:54:6d:e9:0b:05:a8:50:4c:1d:64:52:
                    b5:38:6a:c9:7c:e1:55:f9:27:6e:98:4a:05:d2:9a:
                    bc:22:2d:e1:4d:39:9b:f5:57:ae:32:bc:0c:fb:fd:
                    f0:ef:34:58:94:6e:9c:5d:09:0b:83:8a:62:79:d6:
                    e8:ef:d6:78:1b:f6:ae:5b:22:ca:03:02:3d:1b:d5:
                    7b:7c:fd:ac:63:5a:80:4f:fa:13:6d:96:91:12:65:
                    98:c9:23:23:fb:f1:7b:eb:ae:40:cf:6c:7e:6f:e2:
                    04:49:da:40:8c:a4:89:7e:77:42:0a:c6:89:f6:59:
                    83:f1:e0:a9:0f:32:d2:32:9e:14:6c:b4:36:48:09:
                    93:53:0f:72:09:04:c6:03:ee:5a:f2:84:6b:08:fe:
                    f5:8a:2a:56:09:64:bd:af:35:0c:6f:59:aa:ea:1e:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B0:5C:36:00:DC:30:BE:3A:57:44:EC:91:EF:6A:CD:16:B3:F2:DE
            X509v3 Authority Key Identifier:
                keyid:E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/3130332e3131392e32382e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:6c:40:b7:8f:42:c9:61:78:e8:f6:7a:bd:4f:d0:ea:41:c2:
         9a:54:3f:8a:18:47:f0:25:77:b1:b6:89:9b:57:db:ae:85:6e:
         a0:19:94:c6:e6:26:b8:bb:39:5f:6f:91:76:fb:af:b0:38:1e:
         0b:dc:e9:f5:86:91:1f:84:b7:fc:0d:39:36:67:2e:28:f5:c2:
         bd:ee:be:bd:49:65:f2:c2:26:a5:5d:7a:07:7a:f3:e7:fc:e6:
         81:85:e3:de:a7:d1:0a:21:43:6d:46:fc:79:60:d5:24:60:cb:
         87:d6:b8:8f:ed:4a:47:87:b7:81:6a:55:ea:f9:88:79:68:72:
         8e:78:21:24:f4:ef:68:26:3d:88:01:51:a4:6d:94:25:65:f0:
         e2:1a:a2:3c:1d:ac:b0:37:41:1a:c3:68:19:74:37:7f:d0:18:
         59:30:8f:54:ad:21:1d:46:46:d0:1f:b6:22:9a:60:a6:78:6f:
         8a:87:7a:95:d6:26:d0:c5:c7:4c:f1:bb:5b:4d:82:0a:4a:63:
         8b:0b:f7:af:b2:f0:ce:21:97:45:c1:e5:0b:e8:58:60:5c:d8:
         47:3e:8b:b4:2e:7f:d1:e4:61:77:f3:b5:b4:97:f4:c7:ac:48:
         08:71:91:9e:e7:90:32:c1:19:b3:45:ae:ca:c6:2e:fd:38:38:
         d0:9e:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:17 2026 by rpki-client