Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105370877056253965/0/3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa
File:                     3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa (raw, json)
Hash identifier:          p4rGdOCdtSi/gskb6wDTowKIkMH8aqSZrt6W9t8cL0g=
Subject key identifier:   7D:53:2E:A0:36:04:EC:97:C5:CD:CA:7D:6F:C1:A9:A3:B2:A3:54:F8
Certificate issuer:       /CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Certificate serial:       4DCB215B97E69DB1D9835EAEAD73F3C9035AE164
Authority key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa
Signing time:             Sat 09 May 2026 06:08:03 +0000
ROA not before:           Sat 09 May 2026 06:03:03 +0000
ROA not after:            Sat 08 May 2027 06:08:03 +0000
asID:                     63530
IP address blocks:        103.207.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:cb:21:5b:97:e6:9d:b1:d9:83:5e:ae:ad:73:f3:c9:03:5a:e1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
        Validity
            Not Before: May  9 06:03:03 2026 GMT
            Not After : May  8 06:08:03 2027 GMT
        Subject: CN=7D532EA03604EC97C5CDCA7D6FC1A9A3B2A354F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ee:0c:52:86:3e:55:d3:3f:b0:3b:35:23:3b:
                    65:49:93:6c:ec:78:35:e0:81:15:3d:d9:20:67:4f:
                    69:0f:8b:d1:5b:70:35:4d:f8:10:05:a0:55:d3:3b:
                    5e:01:b4:94:75:9f:0e:3e:a5:29:e1:ed:6a:df:8b:
                    11:a6:26:6f:12:02:ff:9d:a8:a4:d8:d8:39:17:78:
                    82:20:c9:7f:b8:e7:51:f9:15:81:2e:11:ef:af:3e:
                    06:fe:11:62:c4:86:b9:d0:61:69:8d:68:a0:cd:4e:
                    79:02:01:ce:3c:3e:69:b2:55:f3:24:e1:b8:d7:ad:
                    60:56:d7:77:90:b4:f8:73:e6:22:d3:3b:47:ba:93:
                    c2:20:c3:72:80:c5:0c:4b:a0:7c:50:04:86:07:9e:
                    fb:fa:ef:bf:51:83:aa:20:87:af:cd:be:65:7e:0b:
                    8c:30:2f:ac:1c:89:97:b5:90:a0:21:0c:f7:9e:58:
                    17:e0:2e:1f:9d:c4:0b:30:a6:bf:29:fa:b5:46:73:
                    30:7a:9e:a1:29:1f:fa:ad:e5:4a:66:c5:d3:c1:0a:
                    44:4f:f4:20:00:da:34:dd:2c:a6:8a:e0:f5:63:5f:
                    1c:df:dd:b9:fd:c5:ee:1d:de:20:0e:fa:d2:dd:04:
                    03:cb:75:42:ba:77:0f:78:97:e0:49:53:d7:26:8e:
                    db:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:53:2E:A0:36:04:EC:97:C5:CD:CA:7D:6F:C1:A9:A3:B2:A3:54:F8
            X509v3 Authority Key Identifier:
                keyid:6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:6f:15:e9:03:21:41:26:90:c6:47:6c:11:6f:08:4c:79:24:
         eb:c8:19:c4:a6:c6:34:2d:81:09:a9:3a:e3:ce:94:ab:32:02:
         64:f2:5f:b0:2b:c7:bb:11:ff:96:a6:48:74:3c:ae:6b:50:3e:
         c2:2a:23:00:d9:c2:d7:b5:9d:0d:30:a6:c6:43:65:32:2f:1c:
         55:f9:01:92:44:df:a3:e8:2a:7b:78:22:3c:9c:b3:4a:37:73:
         6c:a2:1f:90:78:43:f6:a9:80:b3:a8:0b:1b:f3:3e:81:9b:55:
         0a:86:b7:f7:99:9a:72:13:ec:b1:5c:07:87:ed:bd:fb:5a:3f:
         ea:12:e0:3b:78:39:a9:05:dd:8a:c6:8e:b0:ce:e5:60:59:e8:
         1b:4a:38:37:cc:f6:56:b6:c6:48:34:12:71:a3:84:52:e9:f7:
         b6:20:ba:88:55:9a:1f:cc:07:ed:80:37:7e:41:ef:91:96:50:
         2b:8a:a1:8c:d8:c8:5c:4f:c2:d5:ff:08:b9:78:70:d0:29:a1:
         b4:c9:7f:bc:c8:5b:95:84:b2:0b:66:ce:57:57:23:74:02:c3:
         15:48:51:ff:f4:24:de:dc:73:04:57:5b:cc:fb:26:3c:53:ee:
         3f:0b:fd:cd:eb:c1:c9:5e:dd:72:7c:dc:c8:ae:94:ea:10:f1:
         29:70:30:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:41 2026 by rpki-client