Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106476310596681747/0/3130332e3139392e3139362e302f32322d3232203d3e2030.roa
File:                     3130332e3139392e3139362e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          KbskMLMNoQgPiikLyhepYWH6Nj+6SK5AaW5w9e2tIDg=
Subject key identifier:   CF:FC:9C:F7:6B:74:CE:1A:E9:FB:19:F4:99:97:B3:78:85:8D:10:D5
Certificate issuer:       /CN=C82C40F45E62C70EAF5B663FC69919FEE497C232
Certificate serial:       0C110F385C5FDCCFFE4CF0BF2C8397C46AF8D9B6
Authority key identifier: C8:2C:40:F4:5E:62:C7:0E:AF:5B:66:3F:C6:99:19:FE:E4:97:C2:32
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/3130332e3139392e3139362e302f32322d3232203d3e2030.roa
Signing time:             Wed 13 May 2026 01:20:45 +0000
ROA not before:           Wed 13 May 2026 01:15:45 +0000
ROA not after:            Wed 12 May 2027 01:20:45 +0000
asID:                     0
IP address blocks:        103.199.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:11:0f:38:5c:5f:dc:cf:fe:4c:f0:bf:2c:83:97:c4:6a:f8:d9:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C82C40F45E62C70EAF5B663FC69919FEE497C232
        Validity
            Not Before: May 13 01:15:45 2026 GMT
            Not After : May 12 01:20:45 2027 GMT
        Subject: CN=CFFC9CF76B74CE1AE9FB19F49997B378858D10D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:7d:1d:3e:5b:3c:37:ea:f0:7f:3f:6c:65:
                    d4:1e:57:e3:26:7c:96:71:08:1d:fb:c0:36:57:bc:
                    36:a8:e6:42:8d:52:27:ed:a4:2a:48:c5:a5:e3:6a:
                    7b:64:e4:c9:e8:1f:13:44:15:bc:a6:5e:ba:17:4c:
                    00:6a:16:0e:22:54:a5:80:d6:93:47:fb:00:16:f5:
                    ba:57:18:53:18:8c:60:8e:74:01:a4:a5:77:4b:25:
                    aa:40:8a:35:51:09:40:e0:2f:ac:b8:87:5a:99:f6:
                    0e:9c:b1:b9:ef:86:ae:70:ae:ea:0a:01:e6:e0:4f:
                    bc:e3:fc:4c:4e:6e:ac:fd:d2:8e:c2:0c:fa:6b:85:
                    77:b4:72:21:36:25:5f:9b:91:71:ff:e3:69:12:86:
                    8c:22:7c:72:b2:a0:9a:b4:1c:72:90:11:22:dd:7a:
                    ff:7f:ab:dd:52:a1:5d:db:68:3f:ff:59:90:be:38:
                    31:26:cb:53:51:f2:35:15:92:58:00:62:30:ca:40:
                    ca:7f:77:85:8c:4c:08:82:7b:b8:06:af:6c:57:d2:
                    b5:87:6d:cc:ed:69:e5:d5:e8:f1:c1:cd:db:e6:bf:
                    c0:bc:92:d3:ad:74:d6:75:5a:13:d0:52:62:aa:7b:
                    ec:de:d1:de:9f:6e:41:ca:af:95:27:d4:e2:0f:9a:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FC:9C:F7:6B:74:CE:1A:E9:FB:19:F4:99:97:B3:78:85:8D:10:D5
            X509v3 Authority Key Identifier:
                keyid:C8:2C:40:F4:5E:62:C7:0E:AF:5B:66:3F:C6:99:19:FE:E4:97:C2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/C82C40F45E62C70EAF5B663FC69919FEE497C232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82C40F45E62C70EAF5B663FC69919FEE497C232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106476310596681747/0/3130332e3139392e3139362e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.199.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:85:d2:1f:4c:17:e1:69:35:99:ef:ce:ba:e9:18:99:c3:c6:
         f7:47:39:f3:f0:e8:7c:33:f9:98:32:f7:4f:ba:c3:c9:48:08:
         6a:12:53:39:d4:51:22:3d:4b:3d:c7:6c:1b:5a:58:03:4f:e8:
         fa:ad:ee:1b:22:5d:3c:27:6f:f4:4f:9a:f3:63:98:65:c7:95:
         80:30:e4:de:51:9a:23:f2:16:37:19:38:6e:61:28:93:f9:74:
         27:5c:4f:a6:e5:a5:6a:6c:b9:67:ef:71:fd:1e:75:42:73:a5:
         3f:00:1d:ac:e2:07:09:0c:15:d0:37:48:61:bf:6f:ba:de:0e:
         73:14:23:9b:99:35:da:ff:83:8d:56:d3:07:99:73:3b:47:de:
         14:47:c7:09:bd:dc:ae:4f:51:08:f9:d5:ed:5f:c7:0a:75:11:
         6d:90:ab:79:bb:ab:9e:86:fc:f0:43:ec:0b:86:a8:91:31:a5:
         24:3e:49:d0:a5:78:8f:97:0d:2f:ce:b3:ab:d2:bf:e1:38:9a:
         86:21:61:85:5d:ea:48:81:aa:02:5f:b2:15:19:39:ce:0b:24:
         74:87:de:7b:60:02:49:f1:31:1a:12:8e:4b:2c:c3:d2:0d:71:
         f5:11:58:bb:1d:89:27:f2:4f:95:18:01:f3:8b:3b:76:46:1a:
         9e:f3:ff:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:33 2026 by rpki-client