Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e34382e302f32342d3234203d3e203538353433.roa
File:                     3130332e3231322e34382e302f32342d3234203d3e203538353433.roa (raw, json)
Hash identifier:          5/39JD8QAhr2k0Nnag8g+qBgUlArx+iKMhC27wBai7U=
Subject key identifier:   B6:0F:1A:46:69:D1:D0:6F:69:3A:76:3F:74:16:F2:31:4D:87:26:87
Certificate issuer:       /CN=CA269469647823B4286B5E34CC0E3D54FD201592
Certificate serial:       4020E756E3DC4D6E6D17A48AE87736B64E37B376
Authority key identifier: CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e34382e302f32342d3234203d3e203538353433.roa
Signing time:             Thu 07 May 2026 09:48:48 +0000
ROA not before:           Thu 07 May 2026 09:43:48 +0000
ROA not after:            Thu 06 May 2027 09:48:48 +0000
asID:                     58543
IP address blocks:        103.212.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:20:e7:56:e3:dc:4d:6e:6d:17:a4:8a:e8:77:36:b6:4e:37:b3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA269469647823B4286B5E34CC0E3D54FD201592
        Validity
            Not Before: May  7 09:43:48 2026 GMT
            Not After : May  6 09:48:48 2027 GMT
        Subject: CN=B60F1A4669D1D06F693A763F7416F2314D872687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:8c:e5:f9:51:b5:59:ef:a4:21:4a:42:43:
                    18:e8:88:fd:44:66:04:89:5e:c1:d8:35:52:91:a8:
                    4a:24:9e:01:1c:46:02:39:82:e7:cf:af:60:50:43:
                    22:c5:da:b5:55:aa:2e:fd:4e:be:dd:eb:78:c9:77:
                    d1:c2:8d:d4:08:73:be:b2:07:a3:fd:af:1f:20:ee:
                    ff:3b:5f:f7:db:e5:a3:95:a0:1e:6a:d3:95:0d:2c:
                    9a:9d:52:7c:6d:3e:c6:42:1b:f1:7c:ab:10:5a:d6:
                    24:3c:27:30:f9:b4:56:d4:45:66:a6:1a:f9:82:3e:
                    31:1a:23:3b:5b:ed:17:ba:81:a6:76:62:cd:2a:b5:
                    87:d8:67:db:ed:72:1a:ba:1a:a2:51:c0:57:4e:29:
                    e0:0b:b6:5f:b5:54:5a:48:e6:a3:ec:b7:f9:72:2a:
                    5c:ca:3b:b8:1f:e4:e5:5d:aa:57:56:25:49:ce:c8:
                    97:e0:fc:8f:9b:5a:e7:eb:2e:3b:c0:43:bd:66:6a:
                    9f:b0:f5:a7:05:b3:f6:78:a4:87:50:a4:f1:d6:15:
                    05:ae:46:54:14:2d:06:51:2f:3e:35:1d:0c:c9:1a:
                    5e:cb:fe:8b:b8:8e:23:92:a7:59:fc:ae:11:2f:fd:
                    cb:2f:1b:d2:a3:3f:e8:37:3c:23:69:db:c7:c9:19:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0F:1A:46:69:D1:D0:6F:69:3A:76:3F:74:16:F2:31:4D:87:26:87
            X509v3 Authority Key Identifier:
                keyid:CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e34382e302f32342d3234203d3e203538353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:24:11:ca:e4:a5:f4:44:3a:3a:14:51:8d:bc:c7:c0:04:10:
         ff:83:de:60:1f:ac:b9:01:69:95:5e:63:ff:7c:f8:06:25:df:
         3e:7a:32:ce:77:cc:9d:84:71:5d:3b:e0:a6:7c:7c:3f:f0:36:
         2c:6f:ff:23:0e:62:55:ec:fa:77:f4:47:19:de:82:8c:8d:68:
         d9:ae:35:86:02:c1:b4:6f:b0:dd:04:66:de:de:01:8e:a7:fb:
         be:28:b7:af:4d:c6:f3:49:cb:9b:60:04:d3:e1:db:4a:46:55:
         6b:99:14:a8:bc:2d:12:3c:65:30:e2:d2:38:fc:89:8e:cb:8e:
         05:29:5d:d7:c7:0d:32:66:50:87:d3:a6:d3:fa:64:f1:c2:5f:
         5f:0d:5d:dd:5c:b4:1a:95:92:6c:52:77:f3:a3:b3:42:89:a1:
         e1:8b:46:cb:a0:32:ae:ea:ed:2a:d4:a8:4e:72:17:4d:19:e5:
         47:76:f8:d7:1f:79:8e:c9:dc:88:73:60:88:e7:93:3f:6a:a3:
         9c:36:50:b2:40:40:10:b4:6a:26:24:dc:51:79:8d:51:a5:56:
         ae:6e:ac:ac:17:4b:5a:46:5a:5d:7d:56:fc:e0:f6:d5:91:6e:
         92:d0:40:df:f0:11:fc:79:f8:fd:aa:76:6f:4f:35:f9:33:91:
         d4:7c:3a:30
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:40:28 2026 by rpki-client