Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa
File:                     3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa (raw, json)
Hash identifier:          l20mQBMrYLf5Wq5MznRX5BSW2+IC0U4zBJVGZ6jKOmY=
Subject key identifier:   B6:7C:89:B5:8E:68:14:BA:AB:AA:27:1A:76:34:0F:91:E2:A1:53:15
Certificate issuer:       /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13
Certificate serial:       397E7C6673D5330A05C1DCBEF18BC532A6A0F4EA
Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa
Signing time:             Tue 28 Apr 2026 03:00:55 +0000
ROA not before:           Tue 28 Apr 2026 02:55:55 +0000
ROA not after:            Tue 27 Apr 2027 03:00:55 +0000
asID:                     4812
IP address blocks:        103.198.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7e:7c:66:73:d5:33:0a:05:c1:dc:be:f1:8b:c5:32:a6:a0:f4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13
        Validity
            Not Before: Apr 28 02:55:55 2026 GMT
            Not After : Apr 27 03:00:55 2027 GMT
        Subject: CN=B67C89B58E6814BAABAA271A76340F91E2A15315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:76:03:2d:e8:e7:2c:03:72:86:a7:71:97:
                    28:2f:df:5a:74:4a:1d:48:79:c3:fa:25:c5:0d:02:
                    db:d8:a6:3c:20:49:e4:3d:96:30:75:24:83:7b:26:
                    a6:81:bb:68:ff:8b:e3:09:64:63:a8:8d:29:5f:dd:
                    7d:59:6d:42:7c:a3:16:b5:78:7a:97:8d:0c:21:c5:
                    b3:7d:d6:ba:6f:b9:f0:fb:20:e6:70:4b:c4:ec:b5:
                    59:ba:81:4d:6d:64:17:1b:9c:fc:86:ca:80:06:f0:
                    1e:1c:27:42:6b:d3:15:e3:54:26:c1:79:38:9b:97:
                    9d:d1:28:5e:73:e6:05:a1:74:fe:61:a0:78:c8:bf:
                    ae:27:64:3a:50:e3:ef:5a:61:2c:7a:2c:7d:eb:4e:
                    eb:be:45:9a:23:1a:36:01:5d:f2:c7:3a:70:3c:c1:
                    f1:67:90:49:e0:3b:1f:65:2c:73:20:9f:e8:86:66:
                    27:32:b8:90:46:2f:81:cf:06:4a:3a:3f:69:24:e5:
                    e6:46:e2:5a:e2:c1:58:f3:be:4c:90:b3:fa:19:fa:
                    1c:58:c9:88:4b:36:58:bd:d7:45:be:98:27:2f:72:
                    3c:af:c4:25:89:ab:4b:b4:e0:41:9e:13:98:b7:78:
                    22:d6:64:c3:e3:10:bf:54:ec:12:e1:0e:82:46:81:
                    57:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7C:89:B5:8E:68:14:BA:AB:AA:27:1A:76:34:0F:91:E2:A1:53:15
            X509v3 Authority Key Identifier:
                keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:d4:a2:d4:e6:86:74:ea:06:60:5c:f4:b0:5b:ee:a2:ab:ab:
         50:14:78:dc:c8:fd:aa:4b:4f:6e:6b:ab:cd:7c:08:1f:82:00:
         38:74:a5:5f:3d:88:32:a0:57:3e:fa:2e:d0:02:a9:77:6d:a6:
         69:25:84:99:3a:17:27:69:5f:41:1a:83:f2:cb:1b:94:56:14:
         1a:0d:e6:fa:d5:27:49:da:8a:5b:9a:bc:60:da:5d:7b:0f:62:
         cb:f7:f0:87:35:f8:a8:49:5c:17:a0:68:88:50:83:d5:2f:65:
         0d:26:19:79:ed:bf:fe:1c:36:b8:5b:9c:fc:a2:98:70:e5:20:
         3a:5b:31:a1:cd:77:7a:ed:8a:6b:2f:2f:df:0f:ac:99:6a:c6:
         e5:0c:2a:e6:96:f6:5d:f7:67:a7:b1:f8:7d:6f:55:05:bc:17:
         3b:19:49:42:32:80:26:dd:83:19:20:1e:dd:fe:70:a2:d6:b7:
         2b:b1:fd:a4:99:45:1a:63:5b:1d:f3:97:de:0d:3c:89:0b:27:
         f6:f8:bd:ad:76:23:4d:40:6f:92:14:6e:a9:c7:87:82:e8:d5:
         4f:27:b2:a7:44:e5:34:1f:b5:b2:b3:07:46:0e:0b:6f:4f:e3:
         75:25:00:b5:13:67:3c:3b:56:dc:c0:fb:01:c4:c6:cf:21:97:
         01:6a:a6:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:12:28 2026 by rpki-client