Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105055744207683593/0/3130332e3130372e3130382e302f32322d3232203d3e2030.roa
File:                     3130332e3130372e3130382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          v3s0WHWsHN7gLw6ctSTDGQRf26tMQsIpS21ppnvBCk0=
Subject key identifier:   2C:3E:B0:E5:4C:07:11:05:BA:12:FD:80:55:53:55:30:11:6B:5D:5F
Certificate issuer:       /CN=94CD4C01C346E7777BF9874A62B37929003445D7
Certificate serial:       2C3DB9227FC4D39EE69A96B9BD7D4303AF914B2B
Authority key identifier: 94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/3130332e3130372e3130382e302f32322d3232203d3e2030.roa
Signing time:             Fri 08 May 2026 09:27:18 +0000
ROA not before:           Fri 08 May 2026 09:22:18 +0000
ROA not after:            Fri 07 May 2027 09:27:18 +0000
asID:                     0
IP address blocks:        103.107.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3d:b9:22:7f:c4:d3:9e:e6:9a:96:b9:bd:7d:43:03:af:91:4b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94CD4C01C346E7777BF9874A62B37929003445D7
        Validity
            Not Before: May  8 09:22:18 2026 GMT
            Not After : May  7 09:27:18 2027 GMT
        Subject: CN=2C3EB0E54C071105BA12FD8055535530116B5D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:ef:ca:51:2c:12:ef:7a:43:94:ce:9c:54:
                    fe:76:c9:4a:a1:2c:98:50:0b:0f:a8:a9:d4:18:39:
                    17:fb:c5:6e:d9:cb:f7:dd:4b:af:01:92:93:bb:72:
                    57:68:65:f4:6b:9f:35:9a:73:9e:11:a9:31:af:20:
                    52:34:b0:71:8a:c4:ca:d3:6c:53:b0:e7:69:f8:d1:
                    c8:a7:6b:74:1d:e2:c7:e0:dc:8e:76:16:29:de:07:
                    e4:09:7d:3e:2c:9e:af:ce:c2:53:98:4e:f1:f1:d2:
                    53:33:00:1f:54:27:74:96:91:f2:a7:27:12:9e:ad:
                    e9:56:76:c9:22:c6:59:ac:d2:2e:d4:69:e5:34:c7:
                    c4:2d:50:ea:9b:b0:31:4d:38:f2:79:39:c7:b4:68:
                    de:94:41:ae:c2:e0:35:4b:77:8a:12:19:62:81:9b:
                    32:96:61:e4:70:e8:cb:9a:7c:99:4b:34:42:68:84:
                    8c:db:0e:44:68:c7:12:36:34:45:9c:35:50:97:54:
                    6f:6e:aa:43:9b:51:db:25:c9:31:c6:dd:0f:3d:62:
                    3d:fa:fb:27:4e:d5:af:07:aa:9e:c6:ae:94:65:a9:
                    fa:6c:5c:28:fd:fa:9e:59:1d:78:5a:87:7f:18:1a:
                    cd:65:ff:3c:d2:d0:7e:29:fd:64:b5:d6:61:2f:91:
                    9c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3E:B0:E5:4C:07:11:05:BA:12:FD:80:55:53:55:30:11:6B:5D:5F
            X509v3 Authority Key Identifier:
                keyid:94:CD:4C:01:C3:46:E7:77:7B:F9:87:4A:62:B3:79:29:00:34:45:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/94CD4C01C346E7777BF9874A62B37929003445D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94CD4C01C346E7777BF9874A62B37929003445D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105055744207683593/0/3130332e3130372e3130382e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:15:8e:a2:91:f8:69:4b:de:b5:ae:eb:a6:ab:89:93:1c:74:
         10:0b:51:d9:3b:16:58:09:cf:28:14:08:c1:1a:4c:6b:e5:3c:
         31:12:b7:af:e9:da:b9:e3:ac:79:ee:a1:ba:d7:34:94:57:17:
         4e:f9:cf:b4:43:10:58:27:79:8f:4e:9e:fb:86:18:97:3c:b2:
         eb:08:ff:ac:8b:48:7f:ff:20:79:e2:2f:c5:c7:21:66:66:ce:
         31:36:f2:0c:3c:28:fc:a4:bc:0b:b9:ad:b7:30:6d:7a:47:9f:
         f6:6b:4c:6e:54:11:2b:81:fe:3d:53:2d:d8:4d:32:5c:ed:d9:
         0d:60:16:8f:e9:da:01:3f:95:bb:c4:ac:b5:50:e6:02:c4:ff:
         a5:47:28:88:f8:cb:24:8d:7b:13:0b:04:b5:dd:12:45:da:9b:
         95:c0:cb:e2:d2:ea:9e:e6:57:cd:61:4c:95:44:68:e2:e9:5f:
         61:a5:8d:03:fe:1c:60:5b:d2:88:ef:b0:7a:38:60:97:18:32:
         0a:3c:d0:20:1d:74:56:8c:76:28:3b:16:fb:cd:d5:02:e2:dc:
         f7:f1:0b:b3:4d:6a:99:5f:37:9c:19:5a:89:94:79:5b:da:bd:
         72:7a:e7:2a:6f:3b:d4:2d:93:3d:61:13:60:d3:bd:35:31:73:
         79:a2:3a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:14 2026 by rpki-client