Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e35312e302f32342d3234203d3e203538353433.roa
File:                     3130332e3231322e35312e302f32342d3234203d3e203538353433.roa (raw, json)
Hash identifier:          B9aDkTKHMGvRXsX22b7vWHUXzf2hOERSdesDrjN6KIw=
Subject key identifier:   40:74:6A:86:5D:2D:06:8D:01:F6:78:83:0C:96:08:E3:BE:05:28:28
Certificate issuer:       /CN=CA269469647823B4286B5E34CC0E3D54FD201592
Certificate serial:       7F24CFE768C9314796BBFB68C87583EC24A58323
Authority key identifier: CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e35312e302f32342d3234203d3e203538353433.roa
Signing time:             Thu 07 May 2026 09:12:02 +0000
ROA not before:           Thu 07 May 2026 09:07:02 +0000
ROA not after:            Thu 06 May 2027 09:12:02 +0000
asID:                     58543
IP address blocks:        103.212.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:24:cf:e7:68:c9:31:47:96:bb:fb:68:c8:75:83:ec:24:a5:83:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA269469647823B4286B5E34CC0E3D54FD201592
        Validity
            Not Before: May  7 09:07:02 2026 GMT
            Not After : May  6 09:12:02 2027 GMT
        Subject: CN=40746A865D2D068D01F678830C9608E3BE052828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:aa:dc:44:bb:dd:74:18:e2:ca:2c:01:9f:
                    b5:38:f3:2f:18:fa:2b:eb:09:33:54:df:c4:28:ca:
                    f7:30:26:e6:74:ea:32:4b:93:0a:72:b4:02:67:37:
                    f9:80:9d:8f:59:6b:5b:c8:14:20:1d:c5:fb:4d:44:
                    e1:54:03:6b:db:22:e7:f5:54:aa:51:5f:4c:bb:fe:
                    cc:d9:25:0f:49:88:f7:ed:8d:6f:95:43:49:61:99:
                    29:fa:68:f9:4b:05:db:f1:98:2a:34:30:3e:e0:58:
                    a9:c2:16:ef:c1:dc:4d:ee:90:aa:eb:75:1b:da:cd:
                    18:0c:96:4f:85:74:ae:c8:e0:b1:97:96:cf:76:0c:
                    4a:4f:a1:0a:b1:6b:7e:4c:75:e5:c8:7c:13:00:6f:
                    8c:73:6d:06:4c:56:ca:fa:39:a3:2e:d3:6d:ac:6c:
                    d4:1c:5c:50:91:b7:1c:5a:2f:ee:35:f6:73:17:b2:
                    22:95:11:c5:8d:59:e4:d6:37:21:9a:70:54:0c:c2:
                    1e:8a:21:37:ba:c2:16:3d:e5:77:5e:48:be:ea:43:
                    68:1d:33:a2:d6:b3:eb:22:6a:44:df:ab:52:a7:b6:
                    91:cd:92:ac:a1:43:35:d8:c6:ba:a3:6c:9f:dc:59:
                    08:a6:4e:16:14:87:96:d3:81:72:88:b7:7b:22:96:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:74:6A:86:5D:2D:06:8D:01:F6:78:83:0C:96:08:E3:BE:05:28:28
            X509v3 Authority Key Identifier:
                keyid:CA:26:94:69:64:78:23:B4:28:6B:5E:34:CC:0E:3D:54:FD:20:15:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/CA269469647823B4286B5E34CC0E3D54FD201592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CA269469647823B4286B5E34CC0E3D54FD201592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104692273511137285/0/3130332e3231322e35312e302f32342d3234203d3e203538353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:3c:e5:ca:80:49:de:09:e0:37:7d:cf:8d:86:11:5d:78:
         e1:73:b9:7b:b7:10:6b:df:33:5e:33:4c:a2:2c:b5:be:8b:f2:
         68:56:ce:e0:bf:62:ca:ef:60:3e:43:d1:f3:9b:78:13:c8:4f:
         96:04:7f:c0:5c:34:33:2d:91:20:1c:d8:d6:5d:00:e2:ec:dd:
         f8:3c:ff:ab:5b:05:82:51:51:7c:67:ca:b1:9a:27:4a:ef:53:
         2b:4a:79:dd:08:57:e4:bb:03:cb:54:37:d4:93:1f:7a:e0:a9:
         d8:62:e9:e7:b5:36:b6:44:67:7c:64:17:5c:77:ef:40:99:c6:
         77:a7:75:96:03:d2:4b:a5:66:15:31:12:4a:39:c3:60:50:b1:
         6d:dd:48:dc:90:3d:00:25:b1:0b:5e:17:a8:f1:cb:de:03:b7:
         16:67:be:53:0b:57:61:a0:ca:05:a5:59:36:e2:3c:46:a6:75:
         7a:99:3b:48:74:1d:cf:fd:08:4f:84:e9:ec:cd:89:92:c7:34:
         c0:92:5e:f8:95:9f:d0:41:c7:0d:19:a8:a7:03:9a:96:2e:24:
         ca:8b:18:2f:aa:2b:62:b8:89:76:ec:66:27:15:61:51:91:c9:
         37:08:1e:ae:c2:a2:53:9b:79:93:d9:f5:97:76:75:a2:df:d8:
         c7:9a:89:db
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUfyTP52jJMUeWu/toyHWD7CSlgyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EyNjk0Njk2NDc4MjNCNDI4NkI1RTM0Q0MwRTNENTRG
RDIwMTU5MjAeFw0yNjA1MDcwOTA3MDJaFw0yNzA1MDYwOTEyMDJaMDMxMTAvBgNV
BAMTKDQwNzQ2QTg2NUQyRDA2OEQwMUY2Nzg4MzBDOTYwOEUzQkUwNTI4MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCye6rcRLvddBjiyiwBn7U48y8Y
+ivrCTNU38QoyvcwJuZ06jJLkwpytAJnN/mAnY9Za1vIFCAdxftNROFUA2vbIuf1
VKpRX0y7/szZJQ9JiPftjW+VQ0lhmSn6aPlLBdvxmCo0MD7gWKnCFu/B3E3ukKrr
dRvazRgMlk+FdK7I4LGXls92DEpPoQqxa35MdeXIfBMAb4xzbQZMVsr6OaMu022s
bNQcXFCRtxxaL+419nMXsiKVEcWNWeTWNyGacFQMwh6KITe6whY95XdeSL7qQ2gd
M6LWs+siakTfq1KntpHNkqyhQzXYxrqjbJ/cWQimThYUh5bTgXKIt3silodvAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUQHRqhl0tBo0B9niDDJYI474FKCgwHwYDVR0j
BBgwFoAUyiaUaWR4I7Qoa140zA49VP0gFZIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NDY5MjI3MzUxMTEzNzI4NS8wL0NBMjY5NDY5NjQ3ODIzQjQyODZCNUUzNENDMEUz
RDU0RkQyMDE1OTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQ0EyNjk0Njk2NDc4MjNCNDI4NkI1RTM0Q0MwRTNENTRGRDIwMTU5Mi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNDY5MjI3MzUxMTEzNzI4NS8wLzMxMzAzMzJlMzIz
MTMyMmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM1MzQzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGfUMzANBgkqhkiG9w0BAQsFAAOCAQEAqpE85cqASd4J4Dd9z42GEV14
4XO5e7cQa98zXjNMoiy1vovyaFbO4L9iyu9gPkPR85t4E8hPlgR/wFw0My2RIBzY
1l0A4uzd+Dz/q1sFglFRfGfKsZonSu9TK0p53QhX5LsDy1Q31JMfeuCp2GLp57U2
tkRnfGQXXHfvQJnGd6d1lgPSS6VmFTESSjnDYFCxbd1I3JA9ACWxC14XqPHL3gO3
Fme+UwtXYaDKBaVZNuI8RqZ1epk7SHQdz/0IT4Tp7M2Jksc0wJJe+JWf0EHHDRmo
pwOali4kyosYL6orYriJduxmJxVhUZHJNwgersKiU5t5k9n1l3Z1ot/Yx5qJ2w==
-----END CERTIFICATE-----
Generated at Wed May 13 14:28:04 2026 by rpki-client