Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102991697580654601/0/3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa
File:                     3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier:          0Mhtj21hVbeX9XUR/Q2Gx0H8h7HJJx0VMMT+V2reTHc=
Subject key identifier:   6A:2B:FE:46:70:09:0B:89:3A:FF:D0:C9:79:54:66:AB:FA:3C:C1:B9
Certificate issuer:       /CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7
Certificate serial:       2CBE65C6C9A4F2DDA2D31E79A90B93F173048480
Authority key identifier: 45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa
Signing time:             Sat 02 May 2026 16:18:50 +0000
ROA not before:           Sat 02 May 2026 16:13:50 +0000
ROA not after:            Sat 01 May 2027 16:18:50 +0000
asID:                     4808
IP address blocks:        103.228.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:be:65:c6:c9:a4:f2:dd:a2:d3:1e:79:a9:0b:93:f1:73:04:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450AC0E4CDE3181682FF27C2521CC4BF7290C0D7
        Validity
            Not Before: May  2 16:13:50 2026 GMT
            Not After : May  1 16:18:50 2027 GMT
        Subject: CN=6A2BFE4670090B893AFFD0C9795466ABFA3CC1B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:45:03:58:32:e1:c7:03:ff:e8:ca:5c:28:
                    20:4d:3e:5b:a3:bc:be:74:e7:22:af:17:97:be:0c:
                    b6:4e:31:80:c5:5d:57:4d:98:de:ca:03:ba:cf:ae:
                    e8:d8:3c:84:8b:84:8e:a1:0f:b6:f3:72:a0:9c:89:
                    b1:fc:9c:3d:bc:ad:a3:bc:c7:f2:f7:3a:61:99:13:
                    22:cf:94:7f:4d:a8:38:24:1f:ea:7e:ae:0c:db:29:
                    a0:13:fc:8a:e2:b6:29:2a:98:e3:c0:8c:b6:2c:0a:
                    d8:0f:5d:0b:f7:c3:f6:b8:91:48:f4:88:c2:11:bd:
                    0a:9e:f6:8a:06:cd:b4:a4:22:72:39:9c:b8:af:aa:
                    83:b3:82:88:28:f3:ad:3c:78:c9:c1:d3:25:4d:cf:
                    bf:69:2b:5c:89:a0:f2:3b:2f:33:b2:8b:dd:05:48:
                    4c:09:de:de:c2:76:ad:54:63:0c:e0:ea:30:f5:e3:
                    9a:5c:3e:57:2f:c6:93:47:3a:84:fe:35:8c:de:d3:
                    20:c7:a6:d1:3e:89:28:e6:0b:ca:dc:49:8b:9e:03:
                    a5:b2:fd:b0:1b:4b:98:af:e5:3a:4a:93:d5:75:2b:
                    d1:a8:77:4e:71:dd:04:5f:c8:ad:fe:1f:15:c4:a6:
                    39:67:35:1e:0e:95:1e:22:f7:23:39:d4:65:6a:b3:
                    54:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2B:FE:46:70:09:0B:89:3A:FF:D0:C9:79:54:66:AB:FA:3C:C1:B9
            X509v3 Authority Key Identifier:
                keyid:45:0A:C0:E4:CD:E3:18:16:82:FF:27:C2:52:1C:C4:BF:72:90:C0:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/450AC0E4CDE3181682FF27C2521CC4BF7290C0D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102991697580654601/0/3130332e3232382e3230342e302f32332d3233203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:48:67:3f:e1:41:96:82:c3:c0:69:83:37:f6:66:1d:06:36:
         e4:1f:fb:21:75:4c:c8:48:9c:67:b7:0b:ae:ab:e1:fa:ca:61:
         f4:10:9a:64:cf:46:fe:e7:a6:e2:49:a0:ab:51:dd:3f:c7:b7:
         f5:a0:d8:25:5d:49:54:02:04:ed:9b:72:6e:06:84:3a:86:e9:
         25:91:3b:54:61:cc:27:14:b0:11:ed:eb:a9:57:44:02:36:fb:
         34:a1:28:a5:f4:c7:1a:f8:c3:15:96:14:53:dd:15:f0:4e:ad:
         a4:81:2e:77:49:58:c4:8c:01:ea:10:31:fc:f5:c6:17:63:dc:
         7c:dc:15:99:c6:90:bd:6e:9a:3b:f8:5b:19:6e:1a:4f:06:35:
         c7:e5:f2:4b:6c:02:f3:59:da:9b:2b:0e:68:e1:5e:f6:9b:ce:
         a4:2f:be:b1:1e:ea:9c:cc:fd:e2:e3:5d:36:7e:db:e0:c4:86:
         3b:e5:c0:d1:c3:c8:07:d8:2e:01:22:ed:ed:b1:ec:70:f7:09:
         34:52:11:86:05:7d:7d:25:bf:48:40:36:f9:ae:be:67:b9:6d:
         9e:8b:1f:7d:bc:a5:13:cf:cf:54:c7:82:42:cb:b5:46:5d:ae:
         9e:69:60:85:b0:15:53:ce:18:71:18:11:68:15:d1:89:d0:07:
         2f:4e:d0:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 09:12:00 2026 by rpki-client