Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e37312e302f32342d3234203d3e2034383437.roa
File:                     3130332e3235342e37312e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          Z9Cz6Wun0YZVCea+g+TAm8panVnYO6AEROUy+XcBmjo=
Subject key identifier:   D0:99:39:2E:3C:F1:7A:C4:B0:D1:E0:0A:B3:59:83:B3:64:C7:59:4B
Certificate issuer:       /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
Certificate serial:       7F4DD8FB2F885430B13B686C11C4C0ACA2002C50
Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e37312e302f32342d3234203d3e2034383437.roa
Signing time:             Sat 09 May 2026 06:18:17 +0000
ROA not before:           Sat 09 May 2026 06:13:17 +0000
ROA not after:            Sat 08 May 2027 06:18:17 +0000
asID:                     4847
IP address blocks:        103.254.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4d:d8:fb:2f:88:54:30:b1:3b:68:6c:11:c4:c0:ac:a2:00:2c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507
        Validity
            Not Before: May  9 06:13:17 2026 GMT
            Not After : May  8 06:18:17 2027 GMT
        Subject: CN=D099392E3CF17AC4B0D1E00AB35983B364C7594B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:c4:96:e8:8e:46:25:4d:42:76:e3:9f:4d:
                    93:81:54:c4:98:aa:95:9f:e5:83:08:89:78:c0:71:
                    fc:e9:de:47:a4:f0:9f:ea:de:0a:bb:23:a2:14:90:
                    5f:65:38:0d:63:20:f8:7a:0c:a9:03:c3:24:40:ea:
                    fb:4e:c6:e8:f5:b8:22:e8:17:56:51:76:27:9f:6b:
                    04:f7:ca:be:3e:6b:0e:e5:07:72:58:75:c2:c7:02:
                    1f:03:dd:07:70:ae:ba:15:63:54:fc:61:cc:01:6a:
                    b5:a9:b8:2f:f8:6d:ea:02:ec:93:76:49:ec:c1:a4:
                    09:51:2b:47:a2:5f:27:8d:c7:72:d6:e4:4e:53:50:
                    90:21:0e:bd:33:b5:85:30:26:9e:57:c9:f6:6d:53:
                    9b:78:c3:17:dc:c8:97:cf:09:47:80:71:0d:a9:9a:
                    d5:47:28:b4:11:17:3a:45:d5:7f:b8:b8:d9:2d:47:
                    d3:4a:a7:b1:bc:69:c2:06:5d:a4:0d:6a:ba:73:1b:
                    56:40:dd:73:f3:c0:99:d1:84:0d:15:1e:bb:41:19:
                    5c:32:8f:77:a2:e6:46:ec:dc:53:69:61:ad:cd:fa:
                    97:1d:c7:d0:14:56:37:33:58:10:37:e5:81:76:e6:
                    2c:df:57:0b:97:eb:4b:37:57:07:b3:42:53:34:5c:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:99:39:2E:3C:F1:7A:C4:B0:D1:E0:0A:B3:59:83:B3:64:C7:59:4B
            X509v3 Authority Key Identifier:
                keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/3130332e3235342e37312e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:2e:d8:d8:81:50:0c:c7:ac:9d:5f:f3:2a:63:21:7f:9a:f7:
         18:c1:ab:04:df:fa:f4:a5:13:fb:bc:76:cd:f5:90:39:4c:51:
         dd:1d:bb:9b:fa:38:56:cb:5e:70:1f:ea:6c:78:8d:08:36:38:
         52:f4:de:7b:37:25:a9:33:7b:53:8a:53:a8:e9:02:ee:b0:02:
         07:8c:3b:4a:bd:ca:c6:7d:d7:9c:c9:d7:d5:ab:b1:2e:db:27:
         7e:12:7e:b8:26:5c:ba:ef:40:73:12:9d:45:56:f2:74:43:cb:
         f8:e6:19:7b:ca:86:96:55:6f:0e:5c:d7:ab:98:0a:42:63:87:
         49:3a:d9:0f:77:16:e6:0e:96:22:88:f9:f1:da:9a:ab:27:8f:
         e0:09:5a:89:bd:92:7d:02:ff:42:c4:fe:a0:b9:48:58:06:f1:
         70:f8:ec:8f:f3:b5:b4:5d:0e:32:83:8d:a6:eb:77:ae:f9:1d:
         5e:e7:63:39:41:f7:cf:6f:66:a3:b5:bd:a7:12:65:52:19:3e:
         d9:07:ed:65:31:0c:7a:4f:c2:1a:ae:f3:22:c4:75:a7:63:eb:
         7a:c3:3f:46:c4:37:e8:7b:82:e1:96:4c:d6:32:da:b6:b3:49:
         78:91:ba:c1:a1:d3:83:bc:79:22:7f:f0:f8:2b:f6:82:6f:5c:
         90:a2:da:d4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUf03Y+y+IVDCxO2hsEcTArKIALFAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQw
NTE4RjUwNzAeFw0yNjA1MDkwNjEzMTdaFw0yNzA1MDgwNjE4MTdaMDMxMTAvBgNV
BAMTKEQwOTkzOTJFM0NGMTdBQzRCMEQxRTAwQUIzNTk4M0IzNjRDNzU5NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJsSW6I5GJU1CduOfTZOBVMSY
qpWf5YMIiXjAcfzp3kek8J/q3gq7I6IUkF9lOA1jIPh6DKkDwyRA6vtOxuj1uCLo
F1ZRdiefawT3yr4+aw7lB3JYdcLHAh8D3QdwrroVY1T8YcwBarWpuC/4beoC7JN2
SezBpAlRK0eiXyeNx3LW5E5TUJAhDr0ztYUwJp5XyfZtU5t4wxfcyJfPCUeAcQ2p
mtVHKLQRFzpF1X+4uNktR9NKp7G8acIGXaQNarpzG1ZA3XPzwJnRhA0VHrtBGVwy
j3ei5kbs3FNpYa3N+pcdx9AUVjczWBA35YF25izfVwuX60s3VwezQlM0XBmPAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU0Jk5LjzxesSw0eAKs1mDs2THWUswHwYDVR0j
BBgwFoAUML/eSMq53dXidackH/fk5AUY9QcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTM3NTkzMDMyODU0NzM0MS8wLzMwQkZERTQ4Q0FCOURERDVFMjc1QTcyNDFGRjdF
NEU0MDUxOEY1MDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQwNTE4RjUwNy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA1Mzc1OTMwMzI4NTQ3MzQxLzAvMzEzMDMzMmUzMjM1
MzQyZTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGf+RzANBgkqhkiG9w0BAQsFAAOCAQEARi7Y2IFQDMesnV/zKmMhf5r3GMGr
BN/69KUT+7x2zfWQOUxR3R27m/o4VstecB/qbHiNCDY4UvTeezclqTN7U4pTqOkC
7rACB4w7Sr3Kxn3XnMnX1auxLtsnfhJ+uCZcuu9AcxKdRVbydEPL+OYZe8qGllVv
DlzXq5gKQmOHSTrZD3cW5g6WIoj58dqaqyeP4Alaib2SfQL/QsT+oLlIWAbxcPjs
j/O1tF0OMoONput3rvkdXudjOUH3z29mo7W9pxJlUhk+2QftZTEMek/CGq7zIsR1
p2PresM/RsQ36HuC4ZZM1jLatrNJeJG6waHTg7x5In/w+Cv2gm9ckKLa1A==
-----END CERTIFICATE-----
Generated at Wed May 13 12:43:39 2026 by rpki-client