Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e322e3231322e302f32322d3232203d3e2030.roa
File:                     3130332e322e3231322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          DBKugX2MYIF9SYWsR5seKnfCHI7xr0bJ1FNQKr/vUTM=
Subject key identifier:   4F:CC:F4:FB:A7:AF:E5:D0:87:2C:7B:DD:41:4A:87:1E:7A:6B:38:4F
Certificate issuer:       /CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
Certificate serial:       1B60FC0348E33B4D27C18BB996BCDA285BD2B5F9
Authority key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e322e3231322e302f32322d3232203d3e2030.roa
Signing time:             Wed 13 May 2026 09:11:29 +0000
ROA not before:           Wed 13 May 2026 09:06:29 +0000
ROA not after:            Wed 12 May 2027 09:11:29 +0000
asID:                     0
IP address blocks:        103.2.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:05:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:60:fc:03:48:e3:3b:4d:27:c1:8b:b9:96:bc:da:28:5b:d2:b5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415
        Validity
            Not Before: May 13 09:06:29 2026 GMT
            Not After : May 12 09:11:29 2027 GMT
        Subject: CN=4FCCF4FBA7AFE5D0872C7BDD414A871E7A6B384F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:2d:cf:b2:a9:a1:53:34:d4:82:dc:96:a2:
                    5d:e9:3b:39:3f:6c:99:5a:30:e8:49:0c:b5:38:e9:
                    f1:c7:e5:21:9f:e7:bd:81:1b:2a:34:3c:c6:6d:90:
                    72:2a:86:0a:e8:e1:d0:ec:67:b8:c6:16:5f:75:be:
                    63:d5:54:82:b4:68:01:a0:46:f3:d4:82:fa:4c:50:
                    5f:9b:de:35:97:89:48:b4:e4:2a:e2:30:24:26:07:
                    4e:77:ce:db:64:0c:21:f6:6d:55:8e:22:cd:d3:91:
                    37:80:53:34:b7:19:f1:6e:cc:91:56:0e:06:59:6a:
                    78:dc:e1:e3:db:9f:34:96:b3:f6:52:4d:59:9b:33:
                    5a:ce:d9:49:35:78:89:04:47:56:47:35:97:a7:af:
                    0d:0d:2d:32:4a:f0:81:29:c3:f2:34:59:37:8a:61:
                    6f:bf:f3:38:b6:ad:c8:4c:27:f6:64:8d:bd:29:75:
                    56:46:df:2d:48:52:ee:cf:9d:44:9d:be:80:7e:e6:
                    97:8d:d0:0a:45:2f:6c:d3:c8:c0:0b:bb:00:7d:2a:
                    03:bd:5d:b4:db:b7:a7:33:b8:e4:a6:3a:7b:15:40:
                    16:b1:92:59:b2:e3:c3:1e:13:c8:3d:71:96:66:11:
                    2f:e3:86:31:94:61:84:23:6f:af:16:56:fd:85:76:
                    df:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CC:F4:FB:A7:AF:E5:D0:87:2C:7B:DD:41:4A:87:1E:7A:6B:38:4F
            X509v3 Authority Key Identifier:
                keyid:90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/3130332e322e3231322e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:15:f3:06:5c:cd:ed:fd:6f:3b:17:8c:49:97:66:ca:19:3f:
         e5:e3:8f:a2:61:1a:a7:06:98:18:99:49:b1:58:37:98:d4:1c:
         c8:b5:73:ae:f2:85:dc:21:00:9e:31:59:db:18:e4:db:17:55:
         1d:d0:86:1b:20:b6:34:92:b4:0c:63:7b:b1:e6:75:17:0b:58:
         06:35:ef:92:51:07:de:5c:42:a7:84:9f:3e:d2:59:ba:ed:ea:
         ac:72:c9:55:2c:15:cb:58:d4:6c:fb:e5:ec:c7:de:0d:21:f6:
         26:e8:6f:7f:80:f9:f0:03:6e:ad:cd:69:38:82:86:32:3d:10:
         88:57:29:ad:25:09:7e:53:0e:06:38:a0:16:bf:27:03:2f:f1:
         c4:4c:21:d9:90:8e:63:99:74:79:ad:b1:22:55:1f:fd:88:66:
         8d:8b:37:ac:2b:94:94:83:54:cc:45:b0:7b:49:41:9a:c4:90:
         99:4d:b7:66:70:7a:7c:46:41:f5:26:28:1a:b6:f9:ca:fa:17:
         58:c7:ae:76:b6:4e:6c:0f:ae:46:da:c4:9a:ea:29:09:d4:67:
         26:bb:2a:dd:f2:a4:fa:ba:e7:0b:06:01:df:fb:0d:c2:a3:f7:
         69:43:d4:3d:69:d3:b8:ee:70:b8:6a:ed:42:c8:85:13:cd:31:
         1b:71:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:28 2026 by rpki-client