Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e37302e302f32342d3234203d3e2034383437.roa
File:                     3130332e3235342e37302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          FNZmyanxz07Qqhgjs5JxEU8wVZNOlunehBdVCp6eaeg=
Subject key identifier:   66:FC:46:8A:A6:A7:04:76:96:FA:B3:C0:45:1D:63:01:83:36:65:56
Certificate issuer:       /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial:       6407ACC8785EEC9C287D8AE0FC7F10C10982128D
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e37302e302f32342d3234203d3e2034383437.roa
Signing time:             Sat 09 May 2026 06:18:17 +0000
ROA not before:           Sat 09 May 2026 06:13:17 +0000
ROA not after:            Sat 08 May 2027 06:18:17 +0000
asID:                     4847
IP address blocks:        103.254.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:07:ac:c8:78:5e:ec:9c:28:7d:8a:e0:fc:7f:10:c1:09:82:12:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
        Validity
            Not Before: May  9 06:13:17 2026 GMT
            Not After : May  8 06:18:17 2027 GMT
        Subject: CN=66FC468AA6A7047696FAB3C0451D630183366556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:cf:7a:48:78:af:19:fe:1c:93:00:35:cb:
                    8f:89:97:07:91:08:34:b2:a0:93:bf:ac:57:8b:00:
                    45:a9:c8:83:19:b7:fe:a5:74:13:34:93:5c:74:0f:
                    2c:10:84:40:96:85:02:da:a3:14:89:b4:e3:50:96:
                    f2:87:1a:44:e8:84:a1:eb:00:09:92:4c:06:f4:5e:
                    0c:ff:30:ef:02:28:1b:7b:93:c8:4f:fa:38:40:62:
                    05:e4:d5:8a:19:46:b7:8c:c2:af:cb:72:ff:f5:4c:
                    fa:de:e4:ae:6f:5d:72:b4:21:b0:28:df:42:fa:2e:
                    3b:6d:b3:a4:87:90:3e:5d:0a:84:6b:66:70:00:61:
                    0b:8e:ef:07:46:c4:19:f6:a8:b4:eb:57:84:b6:9a:
                    a9:a1:48:f6:53:5f:fa:27:59:f9:97:22:bc:2b:56:
                    0c:94:e4:57:b3:5a:fb:47:35:dc:4a:d9:f4:29:f4:
                    a1:30:45:19:cf:4b:59:89:8c:b1:f0:58:6d:6d:4b:
                    2f:6b:6d:ea:ba:0d:4a:5d:3c:a4:20:47:fe:d8:05:
                    dd:3e:e3:63:c5:26:21:70:5b:b7:b9:5d:b7:b1:b5:
                    fe:6d:af:6b:6f:49:09:0f:f7:a8:8c:14:92:b1:19:
                    ad:bb:36:c1:81:42:96:d0:3a:88:19:93:03:3c:a1:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FC:46:8A:A6:A7:04:76:96:FA:B3:C0:45:1D:63:01:83:36:65:56
            X509v3 Authority Key Identifier:
                keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e37302e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:13:03:49:3e:f8:76:a0:94:13:2f:ca:63:ed:45:39:7d:c1:
         10:4c:97:1f:8f:d1:8a:a5:34:be:d8:0f:9b:c0:ef:85:23:77:
         e6:fc:85:ad:2c:f3:8d:b8:03:58:c8:d5:95:8e:20:0e:39:19:
         07:8b:ee:a8:23:34:64:33:1e:57:57:ca:fe:46:64:2e:cb:71:
         ee:9e:48:04:50:68:b2:97:80:79:6e:a6:1a:2e:a1:9a:fa:83:
         d6:86:bd:03:14:3d:c0:63:87:42:f6:e6:06:a8:aa:27:b8:c8:
         4b:f9:21:84:39:64:c6:cd:bf:a5:7a:2d:d0:d7:7b:e7:ef:23:
         52:04:78:b2:36:b1:ef:5f:59:db:a7:46:6f:98:e9:50:6b:89:
         95:ae:3a:39:3c:72:b3:da:8b:03:e4:e2:d4:ff:19:63:25:3d:
         3b:67:0e:e6:42:19:9a:f3:a7:dc:0d:ef:11:a7:c0:e9:2e:34:
         06:06:82:f6:5a:aa:13:f3:2a:b1:79:09:f9:1b:37:e0:97:53:
         7a:6c:51:25:a7:95:a8:65:ca:b9:2a:9d:a2:ff:cc:ee:c2:9f:
         e2:c6:8d:b0:b9:9e:f3:de:6d:c6:fe:0f:11:ea:88:05:0c:b9:
         0c:8d:7e:87:90:62:cb:e2:60:66:9a:0b:b7:67:f7:17:9d:ad:
         09:05:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:18 2026 by rpki-client