Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105067938269888525/0/3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa
File:                     3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa (raw, json)
Hash identifier:          KKCqpde6Dhe4+7RyJYUAxN7mjehJt+BZVg2xReVpvv0=
Subject key identifier:   76:23:C3:CD:30:72:E2:97:FD:0C:22:87:CF:0A:7D:F2:80:A6:D9:36
Certificate issuer:       /CN=C05947A00A72638CD4BE67C4BF53224357777E0A
Certificate serial:       4D5465A2306AA2C1A40547CB63A68A970B354FAF
Authority key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa
Signing time:             Fri 08 May 2026 09:46:23 +0000
ROA not before:           Fri 08 May 2026 09:41:23 +0000
ROA not after:            Fri 07 May 2027 09:46:23 +0000
asID:                     4816
IP address blocks:        103.212.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:54:65:a2:30:6a:a2:c1:a4:05:47:cb:63:a6:8a:97:0b:35:4f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C05947A00A72638CD4BE67C4BF53224357777E0A
        Validity
            Not Before: May  8 09:41:23 2026 GMT
            Not After : May  7 09:46:23 2027 GMT
        Subject: CN=7623C3CD3072E297FD0C2287CF0A7DF280A6D936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:49:5f:e6:78:c5:cc:58:62:0f:aa:c7:69:
                    4d:1a:32:58:aa:da:d0:bc:98:63:f7:23:3d:68:18:
                    ff:f8:ae:bf:d2:64:f6:f6:03:40:7c:e8:4b:b5:74:
                    59:a9:b2:77:f2:c7:7a:b0:35:6a:6d:3e:a1:2b:47:
                    27:57:a7:37:e5:80:50:24:55:8d:83:16:19:14:f3:
                    68:6e:5b:24:8d:ec:d0:60:c8:cd:c7:86:91:57:a2:
                    06:34:26:e8:ab:ec:fb:13:dd:00:a9:83:a5:ae:9a:
                    ce:84:ef:21:26:69:c7:80:9b:bc:01:16:1b:d2:9c:
                    49:a6:ff:6f:1a:45:ac:c2:e0:97:34:6d:37:77:e5:
                    d6:6c:1a:fd:17:49:97:be:1a:28:6f:f7:b3:09:8d:
                    1a:51:7c:22:1e:85:cb:d3:c8:19:54:bd:52:04:e0:
                    26:61:17:d5:5c:07:10:bb:2e:02:07:9b:1e:fc:2b:
                    66:ed:4f:d2:5b:bd:b3:93:97:77:09:f7:d2:dd:21:
                    53:7a:f1:20:ee:03:46:96:eb:4b:4d:25:1e:64:4f:
                    f3:db:bd:9b:8c:36:41:08:7d:24:86:1f:a7:e9:d7:
                    24:89:16:ea:4a:a7:9b:3a:cb:06:56:c5:28:b7:98:
                    24:ff:e6:e7:ce:d7:ce:12:d7:dc:d9:95:a8:22:46:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:23:C3:CD:30:72:E2:97:FD:0C:22:87:CF:0A:7D:F2:80:A6:D9:36
            X509v3 Authority Key Identifier:
                keyid:C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:6c:9d:a4:f6:94:a7:0f:d9:d9:8f:2b:c5:e2:55:12:3f:41:
         6c:f5:42:32:28:53:2a:4e:5e:6e:22:13:6f:d0:23:57:52:ea:
         f6:2b:b9:04:27:43:ba:3b:90:41:e5:1b:a0:bc:2b:7c:9c:a6:
         07:af:0b:cd:fb:96:f9:4b:ba:bb:7f:69:66:e3:c7:1c:b7:8f:
         10:5a:1c:f8:c7:23:48:ae:98:c8:c2:c5:5b:50:f6:e5:f3:df:
         25:d4:e8:11:3d:27:9c:15:72:96:72:da:6c:2d:54:ed:21:0b:
         8a:2c:79:35:3c:4b:4d:b6:a9:58:a4:c2:d5:5f:3d:0f:be:30:
         62:63:43:7f:3d:3e:4c:49:7f:97:82:60:06:77:23:16:45:cc:
         36:75:8f:46:60:ae:8a:0b:8f:5a:c1:1c:61:4a:22:85:4f:d8:
         e8:3e:63:35:09:02:f7:f9:68:32:0f:ca:d8:92:2a:6b:9e:5f:
         b4:90:af:18:87:42:b5:33:a6:3c:4d:b1:22:da:a4:0f:a2:da:
         62:1f:80:50:bf:08:86:1e:54:91:94:2d:04:8b:b9:2b:97:54:
         f9:1a:92:3d:7a:df:af:de:ae:49:12:4d:1b:ee:b1:77:bc:ef:
         0b:35:84:f0:42:14:63:d8:54:77:bc:77:cf:13:7c:ef:4e:dc:
         66:1e:c9:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:17 2026 by rpki-client