Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e35302e302f32342d3234203d3e203538353433.roa
File:                     3130332e3231322e35302e302f32342d3234203d3e203538353433.roa (raw, json)
Hash identifier:          xaN0L6MIhYTiVT+4KdxJh2bu0A3f3Mf9iKQ9KbjS3CQ=
Subject key identifier:   BA:2E:87:70:6F:18:54:10:38:2C:6A:FA:51:32:BB:FE:0C:43:4A:3D
Certificate issuer:       /CN=CA269469647823B4286B5E34CC0E3D54FD201592
Certificate serial:       1CD87DFB7E97338275B4E359983B51268276F563
Authority key identifier: CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e35302e302f32342d3234203d3e203538353433.roa
Signing time:             Thu 07 May 2026 09:12:03 +0000
ROA not before:           Thu 07 May 2026 09:07:03 +0000
ROA not after:            Thu 06 May 2027 09:12:03 +0000
asID:                     58543
IP address blocks:        103.212.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d8:7d:fb:7e:97:33:82:75:b4:e3:59:98:3b:51:26:82:76:f5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA269469647823B4286B5E34CC0E3D54FD201592
        Validity
            Not Before: May  7 09:07:03 2026 GMT
            Not After : May  6 09:12:03 2027 GMT
        Subject: CN=BA2E87706F185410382C6AFA5132BBFE0C434A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:6d:e0:fb:d1:6f:c8:0e:98:4c:6f:27:ee:83:
                    bf:71:09:5d:fb:93:31:ca:30:fe:df:7b:42:4d:a3:
                    5a:e3:3c:b9:1d:7f:10:c2:de:2f:4b:ff:64:09:f4:
                    46:b2:ad:83:37:bb:0d:38:48:8f:a1:19:78:b5:c3:
                    fd:6d:27:be:08:66:a0:ca:ec:37:20:e9:45:de:a4:
                    cf:d0:b8:d7:b8:95:5f:a4:b3:f4:7d:70:01:88:f1:
                    20:18:28:7c:32:b8:2b:4a:7e:0e:cc:28:47:ea:7f:
                    74:3c:6f:f2:9d:df:d7:6d:e7:9f:9a:e6:63:29:57:
                    2b:e1:92:5c:f0:51:95:c3:86:d8:8a:e3:4f:f2:3c:
                    c6:99:a7:b6:98:71:87:72:07:19:4c:c4:fc:9c:83:
                    39:2d:0c:d5:8e:16:c7:11:9a:82:39:e9:2b:6d:ea:
                    6a:f6:b6:62:62:f2:82:5b:65:4b:21:da:ed:c2:90:
                    9e:71:fa:92:59:a5:be:f5:42:5a:37:8e:a7:25:50:
                    57:0f:f2:c5:db:e0:7d:ab:85:cd:cd:ee:00:28:95:
                    e1:1d:b9:ca:fc:f5:f4:8b:8c:b9:2b:32:0b:36:db:
                    b6:f9:c9:d7:89:c7:ca:f4:2e:58:6d:c5:5f:20:d1:
                    b5:33:3c:9c:0e:39:3f:28:d1:71:04:2d:73:32:00:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2E:87:70:6F:18:54:10:38:2C:6A:FA:51:32:BB:FE:0C:43:4A:3D
            X509v3 Authority Key Identifier:
                keyid:CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e35302e302f32342d3234203d3e203538353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:55:cf:60:90:78:00:e3:b9:12:3d:7d:c5:98:54:d1:79:08:
         60:ab:82:1d:3e:67:16:f1:89:e3:8d:74:79:ad:18:6e:fc:2a:
         c0:81:a8:36:5b:36:93:33:2b:3c:a9:15:6d:69:de:c2:1f:77:
         b9:e7:b0:56:5e:d7:bc:a0:99:ff:72:ad:e0:34:bb:19:e4:6d:
         5b:b9:00:7f:a7:c6:b1:90:61:22:77:8c:ad:23:a5:37:85:ff:
         6c:72:f5:71:da:99:5e:24:e9:3e:56:d9:00:a4:99:a0:ae:76:
         03:c4:ce:b3:56:0d:f5:96:73:ac:72:03:78:10:35:d2:89:81:
         29:45:5f:27:00:90:a3:4c:4a:36:16:ed:2b:16:af:14:89:66:
         9c:8f:b3:b9:05:c3:e7:77:71:fe:e0:05:67:8e:2a:cc:c1:23:
         e0:f8:20:c3:28:cc:1c:36:ec:f6:fa:6e:60:1c:d3:66:b6:44:
         a2:1a:45:ff:bd:8a:fb:dc:7b:70:bb:a3:7c:05:18:e4:34:e4:
         97:15:f5:c0:b7:0b:a7:62:f9:1d:5b:3b:7c:cf:4e:e4:09:a6:
         6f:29:d5:91:e5:38:63:13:10:3b:c6:99:6c:11:4b:ac:0e:22:
         18:c1:5a:ec:3a:c3:b9:cc:68:15:ad:ed:6b:24:d3:b1:c8:f8:
         b6:b1:e5:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:24:19 2026 by rpki-client