Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38352e3134342e302f32322d3232203d3e203538383532.roa
File:                     3130332e38352e3134342e302f32322d3232203d3e203538383532.roa (raw, json)
Hash identifier:          AP2XkGbQdxNfpeDQ85zmsd8wo9vC7UwbtiBOtnaRaHE=
Subject key identifier:   C2:D3:36:7F:AD:3F:99:A8:34:A5:5D:22:95:50:41:47:FE:BD:6B:A0
Certificate issuer:       /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772
Certificate serial:       32DEDF582E60D637F576C3A8C592E81813460C66
Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38352e3134342e302f32322d3232203d3e203538383532.roa
Signing time:             Thu 23 Apr 2026 09:10:10 +0000
ROA not before:           Thu 23 Apr 2026 09:05:10 +0000
ROA not after:            Thu 22 Apr 2027 09:10:10 +0000
asID:                     58852
IP address blocks:        103.85.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:de:df:58:2e:60:d6:37:f5:76:c3:a8:c5:92:e8:18:13:46:0c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772
        Validity
            Not Before: Apr 23 09:05:10 2026 GMT
            Not After : Apr 22 09:10:10 2027 GMT
        Subject: CN=C2D3367FAD3F99A834A55D2295504147FEBD6BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:8d:a4:37:d2:2a:d2:65:c3:68:ec:8d:94:
                    2a:1c:0d:84:e5:98:28:ec:4b:fb:88:43:10:33:f5:
                    c6:41:db:70:0c:c8:62:35:c7:f3:bf:05:35:8b:f8:
                    e0:6d:d4:2b:65:85:34:5b:b0:d3:60:2f:7e:e1:76:
                    bd:65:cc:a6:8c:bb:35:6c:91:b7:76:7f:9b:b1:64:
                    4d:2c:96:1c:f5:b5:9f:ac:f2:73:b3:b0:78:3d:70:
                    c2:4a:47:cc:13:cf:3d:e8:f8:df:23:81:9e:e5:50:
                    7c:5d:41:ab:14:e2:70:86:d9:ac:4d:68:09:e8:6f:
                    95:c8:7e:8d:c1:fa:de:79:fd:a6:f3:03:00:1c:ea:
                    9f:d3:82:30:95:91:0d:f9:e4:d8:45:26:78:7e:ba:
                    69:f6:7c:f9:ba:30:cb:82:74:73:73:a6:97:91:a2:
                    2e:0c:ee:08:0f:04:38:0c:8e:1c:07:67:d6:07:fe:
                    fa:46:89:13:ef:12:bb:d0:1f:33:38:54:c9:72:9b:
                    0d:df:83:8c:4a:6b:10:0d:bd:6c:21:14:f1:76:76:
                    cb:e5:e4:bd:81:c1:6e:86:97:61:c3:eb:db:d7:59:
                    9a:fe:ad:47:05:4e:52:4b:bf:bf:d1:38:db:4c:f5:
                    99:3f:ac:f6:45:1d:99:85:ce:14:cd:cf:9a:b2:67:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D3:36:7F:AD:3F:99:A8:34:A5:5D:22:95:50:41:47:FE:BD:6B:A0
            X509v3 Authority Key Identifier:
                keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38352e3134342e302f32322d3232203d3e203538383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:ef:fb:32:ab:39:f5:e1:cf:9d:ad:27:72:47:0f:ab:29:d3:
         5e:98:d3:09:83:2f:bc:b5:ee:fd:fc:93:b9:31:f7:93:20:6c:
         85:c3:e3:63:02:d6:f7:d9:0e:e8:56:e8:68:4c:a3:0b:48:52:
         ce:a5:a1:ee:5a:3d:05:24:3d:98:a2:a9:0a:11:58:00:07:88:
         aa:d7:f8:c3:6e:0e:50:97:d5:f3:8e:f1:3b:dd:ea:b8:42:4b:
         1a:da:93:09:a7:25:0a:2a:fd:b2:b7:98:e2:d6:2b:73:7d:1c:
         a4:6c:12:ea:16:75:bb:52:45:4f:07:a5:33:fa:79:60:1b:b9:
         c1:24:1e:32:bd:75:f7:8d:df:93:23:44:e8:a0:27:b4:58:c0:
         8e:0a:1c:7f:42:1d:a2:b5:2f:ad:6d:2d:af:af:78:f2:98:a2:
         f7:59:31:36:ab:a6:59:69:86:a3:67:9f:f3:50:0c:3f:ca:e5:
         f9:22:66:67:0d:56:a6:99:d2:98:26:05:96:ba:d8:a1:42:ec:
         24:0f:e4:b5:99:17:b4:c6:f4:8c:f3:2c:ae:4e:19:b8:a5:da:
         ba:81:65:54:17:f6:1a:36:f1:be:90:5f:50:1a:44:33:57:74:
         85:e7:c6:d9:ff:11:34:ce:26:f7:88:1e:1c:c6:c1:c6:d1:c2:
         7b:ec:24:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:34 2026 by rpki-client