Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa
File:                     3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa (raw, json)
Hash identifier:          r42RnGBeCl6YkTG2opLn9O58WhJSoIZybnJyVr/dKgQ=
Subject key identifier:   49:5F:BC:FE:1E:E7:0B:62:00:23:FC:CB:E6:93:A2:B7:A3:A9:6E:AD
Certificate issuer:       /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Certificate serial:       3298E1ED6D8996FA5DA5A052A1D96FF41E30BC70
Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa
Signing time:             Mon 11 May 2026 00:50:34 +0000
ROA not before:           Mon 11 May 2026 00:45:34 +0000
ROA not after:            Mon 10 May 2027 00:50:34 +0000
asID:                     131565
IP address blocks:        103.230.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:98:e1:ed:6d:89:96:fa:5d:a5:a0:52:a1:d9:6f:f4:1e:30:bc:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
        Validity
            Not Before: May 11 00:45:34 2026 GMT
            Not After : May 10 00:50:34 2027 GMT
        Subject: CN=495FBCFE1EE70B620023FCCBE693A2B7A3A96EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d6:6a:4a:2e:71:70:38:b6:14:71:95:51:2d:
                    7d:7e:e6:f7:82:0d:9d:60:2c:d9:70:9c:7c:68:20:
                    40:c2:32:53:62:7e:57:9d:d6:7e:41:fd:6c:1b:cd:
                    1c:e9:cd:6f:46:f4:62:a5:40:ae:f8:70:36:94:ed:
                    2f:2e:b0:fb:d2:bc:78:6c:d2:7f:48:9b:9d:99:35:
                    c5:8e:ff:8f:83:88:21:b2:ed:da:9f:99:07:f6:ed:
                    1b:ed:4b:43:d7:dc:c2:4b:12:e9:a9:22:ac:07:54:
                    bc:59:39:bb:29:44:db:a1:f7:a9:cb:e1:f4:cc:0d:
                    82:d8:07:d9:70:62:23:48:65:01:d4:8a:ce:97:e7:
                    f1:c3:fc:45:17:77:36:ce:89:a8:24:4e:27:e1:b9:
                    14:b9:75:f8:d1:9d:43:fa:3a:4e:25:dc:36:2f:60:
                    d3:f9:49:b7:48:96:7c:b1:b3:ef:8f:dc:40:56:28:
                    47:8f:d6:02:0e:a1:2b:90:f9:5d:eb:ad:f6:7b:5f:
                    d9:07:89:05:3f:53:67:58:27:bf:85:ba:11:b6:ce:
                    0e:34:8a:22:40:a5:a3:41:f9:58:56:4b:40:c0:fe:
                    94:09:52:09:c3:80:13:79:1c:ca:53:dc:21:06:20:
                    e2:e3:ac:38:d6:bc:35:42:c5:fb:36:a9:6f:24:b7:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5F:BC:FE:1E:E7:0B:62:00:23:FC:CB:E6:93:A2:B7:A3:A9:6E:AD
            X509v3 Authority Key Identifier:
                keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:77:2a:09:73:42:52:52:d8:2e:9b:20:a5:35:eb:6d:e5:09:
         9a:ea:1d:22:9b:df:f8:8a:24:da:78:fb:98:35:18:e8:23:86:
         c9:77:bc:36:00:87:ff:22:dc:4e:01:a2:0c:f3:3a:63:5b:38:
         10:a4:16:63:ea:84:14:6c:39:e2:24:0e:06:d5:eb:20:a8:a3:
         00:bc:69:99:40:63:49:d8:1f:c8:dd:b6:05:8e:86:b4:22:0b:
         d2:2d:f7:d1:9b:8c:8d:81:52:1a:e1:13:e7:b9:46:40:09:3b:
         ce:b9:50:57:83:9e:3c:a7:f8:fe:47:57:10:96:30:b0:f7:0f:
         0e:4a:92:f3:42:42:d5:a3:54:9e:a0:b5:83:6f:5b:6f:2a:b4:
         36:ba:dd:f7:ca:05:b5:bc:f9:d3:34:c2:5d:f2:63:08:d1:e7:
         9c:f8:74:ca:9f:d1:04:d3:77:8d:a0:2c:09:ca:21:a2:01:1e:
         a8:b4:4e:87:dd:4a:f9:d1:0f:dc:54:93:7d:c6:43:2e:d5:6c:
         ba:8e:50:96:01:c7:1d:51:8c:27:28:a9:3d:d7:ef:b6:1f:b0:
         7f:60:9a:d0:5a:af:f5:f3:bc:25:67:cd:5a:65:42:84:8e:0a:
         2a:7d:55:1d:fd:57:10:55:04:b1:ac:05:01:d2:e0:e5:34:8b:
         af:bb:51:bc
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUMpjh7W2JlvpdpaBSodlv9B4wvHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1
NUVBMEFBNjAeFw0yNjA1MTEwMDQ1MzRaFw0yNzA1MTAwMDUwMzRaMDMxMTAvBgNV
BAMTKDQ5NUZCQ0ZFMUVFNzBCNjIwMDIzRkNDQkU2OTNBMkI3QTNBOTZFQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL1mpKLnFwOLYUcZVRLX1+5veC
DZ1gLNlwnHxoIEDCMlNifled1n5B/WwbzRzpzW9G9GKlQK74cDaU7S8usPvSvHhs
0n9Im52ZNcWO/4+DiCGy7dqfmQf27RvtS0PX3MJLEumpIqwHVLxZObspRNuh96nL
4fTMDYLYB9lwYiNIZQHUis6X5/HD/EUXdzbOiagkTifhuRS5dfjRnUP6Ok4l3DYv
YNP5SbdIlnyxs++P3EBWKEeP1gIOoSuQ+V3rrfZ7X9kHiQU/U2dYJ7+FuhG2zg40
iiJApaNB+VhWS0DA/pQJUgnDgBN5HMpT3CEGIOLjrDjWvDVCxfs2qW8kt9oxAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUSV+8/h7nC2IAI/zL5pOit6Opbq0wHwYDVR0j
BBgwFoAUJielVtN782lu9eqbD/KKYVXqCqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDYwODE4ODEyNjE5OTgxNS8wLzI2MjdBNTU2RDM3QkYzNjk2RUY1RUE5QjBGRjI4
QTYxNTVFQTBBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1NUVBMEFBNi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTA0NjA4MTg4MTI2MTk5ODE1LzAvMzEzMDMzMmUz
MjMzMzAyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMTM1MzYz
NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmfmyDANBgkqhkiG9w0BAQsFAAOCAQEAFHcqCXNCUlLYLpsg
pTXrbeUJmuodIpvf+Iok2nj7mDUY6COGyXe8NgCH/yLcTgGiDPM6Y1s4EKQWY+qE
FGw54iQOBtXrIKijALxpmUBjSdgfyN22BY6GtCIL0i330ZuMjYFSGuET57lGQAk7
zrlQV4OePKf4/kdXEJYwsPcPDkqS80JC1aNUnqC1g29bbyq0Nrrd98oFtbz50zTC
XfJjCNHnnPh0yp/RBNN3jaAsCcohogEeqLROh91K+dEP3FSTfcZDLtVsuo5QlgHH
HVGMJyipPdfvth+wf2Ca0Fqv9fO8JWfNWmVChI4KKn1VHf1XEFUEsawFAdLg5TSL
r7tRvA==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:26 2026 by rpki-client