Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e31302e38342e302f32322d3332203d3e2034383038.roa
File:                     3130332e31302e38342e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier:          E9700slhkGbRskkzcgfXjk8DkT0j8lImRJLnwgy5/3A=
Subject key identifier:   2B:6B:1F:29:FD:BD:2A:43:BE:7C:BE:36:3B:86:78:5A:CA:6B:F6:50
Certificate issuer:       /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
Certificate serial:       61079B67F8767637150A5267952A9B8A0E1BFB18
Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e31302e38342e302f32322d3332203d3e2034383038.roa
Signing time:             Tue 28 Apr 2026 06:51:52 +0000
ROA not before:           Tue 28 Apr 2026 06:46:52 +0000
ROA not after:            Tue 27 Apr 2027 06:51:52 +0000
asID:                     4808
IP address blocks:        103.10.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:07:9b:67:f8:76:76:37:15:0a:52:67:95:2a:9b:8a:0e:1b:fb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061
        Validity
            Not Before: Apr 28 06:46:52 2026 GMT
            Not After : Apr 27 06:51:52 2027 GMT
        Subject: CN=2B6B1F29FDBD2A43BE7CBE363B86785ACA6BF650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:0e:0d:85:df:e4:3e:55:65:6c:2c:31:93:
                    db:a7:b2:fb:d1:ec:46:bb:39:9b:c9:88:3e:96:ba:
                    51:71:48:24:32:87:99:4f:75:22:c6:6d:5e:36:45:
                    d7:82:f4:6c:20:4a:69:bd:f0:ea:95:47:3f:fb:94:
                    0b:08:5e:8d:72:8d:d5:63:9f:54:31:d1:fe:e0:01:
                    43:93:89:4c:53:f1:21:6b:97:f1:6f:8d:a3:f0:f4:
                    40:1f:82:96:49:e8:f3:3b:f3:47:80:ab:18:ac:70:
                    d6:d8:42:4b:0f:c5:90:33:9f:2e:5c:aa:04:27:22:
                    44:29:da:c5:dc:bb:8d:2c:f7:68:60:0a:43:4d:8d:
                    5e:04:1b:a7:d4:0d:3d:83:82:36:4e:8a:f0:66:a5:
                    05:9c:0d:f3:18:eb:2e:9d:bf:c7:a8:5a:1f:34:b2:
                    87:ce:64:87:0f:ea:75:42:f6:1c:c9:0c:1f:27:12:
                    70:75:23:b2:9e:f4:3b:a3:01:de:9f:b5:42:cf:f7:
                    9d:70:be:7f:4e:f0:8d:77:10:65:2a:24:f2:f2:3f:
                    63:e9:8f:d3:e8:8a:5d:81:a1:ad:e1:56:6a:c5:20:
                    5e:68:52:43:22:49:72:b3:bb:fc:62:4a:96:6b:ec:
                    98:04:7d:3d:0b:2d:6d:63:3a:34:ae:50:32:ec:47:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:1F:29:FD:BD:2A:43:BE:7C:BE:36:3B:86:78:5A:CA:6B:F6:50
            X509v3 Authority Key Identifier:
                keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e31302e38342e302f32322d3332203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:bd:c7:d4:85:04:b1:91:bc:46:ac:05:6d:37:d8:c8:a1:51:
         97:6d:cc:e8:76:ee:36:3e:2e:48:71:3f:3a:f0:d8:0f:59:2a:
         5c:98:ef:dc:e0:53:75:cd:55:9b:4e:5a:ee:be:2e:3c:b1:99:
         a0:75:39:5f:36:f3:ba:29:9c:4b:9c:35:0b:82:d0:3f:65:f0:
         5d:7d:ac:60:8c:4a:80:fd:e1:5f:51:78:5d:87:69:5e:e2:3f:
         2a:02:02:1e:e3:8d:38:5a:c7:c5:4e:f4:5b:9b:48:d5:2d:c2:
         c0:bc:3d:f6:18:b9:58:a7:ce:80:49:8d:f1:d8:8b:a1:eb:2e:
         8a:44:d6:73:58:f7:a9:04:62:8f:7d:b1:db:51:d3:6a:b1:64:
         80:d1:6f:93:b3:ee:8c:9f:a7:2b:1d:03:e6:af:9d:26:fc:7d:
         fd:52:46:4e:b6:51:b3:d6:73:51:30:36:47:9b:16:1d:f6:84:
         c3:d7:09:81:6c:b0:49:86:0f:d3:98:a0:1c:03:48:b6:70:88:
         fd:50:38:dc:2b:59:b3:39:6e:2e:26:36:4e:8f:7f:e3:97:ef:
         a1:ae:78:b5:6b:ca:92:b3:0a:43:9e:bc:f7:eb:e0:b7:7b:41:
         68:d4:c5:e5:5f:27:7e:5e:29:dd:73:a2:79:a1:98:e1:03:b9:
         2a:23:88:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:43 2026 by rpki-client