Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa
File:                     3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa (raw, json)
Hash identifier:          7HRLarWGgnBDjlECd+4RsFmaJ0KCNtnMIG+jEZ4BYb0=
Subject key identifier:   87:83:6E:B0:DC:D5:63:A1:E6:75:02:B6:9E:EF:E5:80:BC:7E:50:01
Certificate issuer:       /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Certificate serial:       377B36741B722408342D9F21FB9D130A9AA1F2CC
Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa
Signing time:             Thu 07 May 2026 03:24:10 +0000
ROA not before:           Thu 07 May 2026 03:19:10 +0000
ROA not after:            Thu 06 May 2027 03:24:10 +0000
asID:                     131565
IP address blocks:        103.55.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7b:36:74:1b:72:24:08:34:2d:9f:21:fb:9d:13:0a:9a:a1:f2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
        Validity
            Not Before: May  7 03:19:10 2026 GMT
            Not After : May  6 03:24:10 2027 GMT
        Subject: CN=87836EB0DCD563A1E67502B69EEFE580BC7E5001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:b7:4e:ed:9b:c7:88:ff:37:e5:dc:3d:2a:
                    8d:eb:8c:7e:eb:40:41:7f:91:fa:e3:d1:a0:1b:9a:
                    c0:67:f9:f5:7f:9b:bf:f6:0f:e0:54:9f:ff:59:b4:
                    b9:46:b8:c2:2d:c6:45:f7:d4:7a:43:e9:c7:0c:89:
                    e5:5a:e9:76:5b:e0:25:4b:94:8f:8d:e9:5d:34:23:
                    f2:99:fb:c4:dc:ec:df:6c:2f:3f:eb:e6:7a:e7:5e:
                    0c:94:be:1e:a0:ca:23:a2:4e:c6:0d:0b:00:60:b9:
                    5e:5a:9f:9f:b5:d8:ce:0f:0c:24:0c:b9:36:1c:ac:
                    d4:8c:d1:99:96:5c:2d:a3:dc:cd:40:e2:de:de:d4:
                    aa:25:f2:6a:ed:9f:a0:d0:fc:33:fc:f0:91:de:cf:
                    ab:be:60:8c:bd:82:94:1c:89:36:df:34:bb:e6:a5:
                    03:91:a4:c9:68:75:fc:d6:80:6f:94:b5:91:3e:60:
                    5e:49:5c:e6:38:f3:b9:fa:4c:b0:35:ea:fb:54:7b:
                    21:c5:30:5d:e8:8d:34:ee:11:71:e5:3a:e5:68:9f:
                    a1:7f:52:61:b3:95:e1:ea:81:a7:f5:59:51:7a:d7:
                    8b:51:21:10:51:69:96:bf:d8:97:2b:9b:6e:52:3b:
                    19:e4:a2:b8:68:5d:38:e0:4c:73:e1:8b:ca:39:de:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:83:6E:B0:DC:D5:63:A1:E6:75:02:B6:9E:EF:E5:80:BC:7E:50:01
            X509v3 Authority Key Identifier:
                keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:78:b0:31:fd:3d:81:bf:5c:d6:00:93:91:2a:bc:4f:a5:ed:
         d7:f6:bc:5a:d4:f4:76:6b:01:16:9b:f1:fa:d3:ea:26:34:07:
         f7:8e:e7:3e:dc:a5:81:05:7a:c9:1e:8d:d4:9a:76:b8:ed:5f:
         2c:66:74:e7:37:c1:cb:10:ba:6e:da:9e:0c:57:91:35:23:2d:
         2e:77:ed:71:b3:1b:70:8f:ba:e5:a2:c3:76:4f:2e:10:94:49:
         b0:fc:71:d8:fc:ab:30:c3:e7:98:92:9e:ca:81:e8:5a:c3:72:
         3f:40:10:5f:9b:36:d0:61:85:44:a9:96:9c:ff:c9:b9:80:5c:
         e5:70:88:5d:09:9f:ef:40:b5:3f:3b:02:30:f8:83:cd:64:3d:
         9a:8d:83:5c:a5:fd:ef:8f:20:95:64:59:4e:c6:65:24:60:19:
         8f:3d:74:c1:8e:be:49:d0:a8:de:3f:30:8b:0a:13:f2:f9:b7:
         d6:dc:79:b3:2b:c9:23:01:64:52:00:16:3a:27:ea:30:78:4d:
         72:37:fa:48:23:02:e4:3b:da:1e:90:b3:b5:e5:78:c8:6e:14:
         57:d8:61:88:db:17:c5:68:64:d3:d0:d9:b1:e0:37:88:51:06:
         14:ee:3c:b5:cc:3b:ef:b4:0f:9d:e2:55:1c:4d:7d:40:5a:9b:
         97:48:f8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:23 2026 by rpki-client