Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220108819/0/3130332e37302e3232302e302f32322d3232203d3e203633363230.roa
File:                     3130332e37302e3232302e302f32322d3232203d3e203633363230.roa (raw, json)
Hash identifier:          3qFSuhseOlQYOClfmoRUWVSL78nGJzbZToh19IkyDe0=
Subject key identifier:   D4:62:8A:1D:23:45:9F:FC:AA:CA:CC:42:8C:EE:84:B1:FD:3D:F9:A6
Certificate issuer:       /CN=C1686602F57C97BDB7058DB5F05623F79F733F08
Certificate serial:       0F187EADC069853817ED73E866674D6204ABB1DB
Authority key identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/3130332e37302e3232302e302f32322d3232203d3e203633363230.roa
Signing time:             Wed 13 May 2026 09:21:03 +0000
ROA not before:           Wed 13 May 2026 09:16:03 +0000
ROA not after:            Wed 12 May 2027 09:21:03 +0000
asID:                     63620
IP address blocks:        103.70.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:18:7e:ad:c0:69:85:38:17:ed:73:e8:66:67:4d:62:04:ab:b1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1686602F57C97BDB7058DB5F05623F79F733F08
        Validity
            Not Before: May 13 09:16:03 2026 GMT
            Not After : May 12 09:21:03 2027 GMT
        Subject: CN=D4628A1D23459FFCAACACC428CEE84B1FD3DF9A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:99:68:63:42:45:c8:60:60:66:ad:1c:91:
                    80:41:06:20:05:6a:6f:f8:da:a6:8e:5c:ca:82:6f:
                    ce:ce:7b:84:35:56:8d:90:48:e1:57:7f:1d:71:58:
                    26:7d:80:e6:2a:17:6d:63:fd:1c:2d:2a:45:36:c4:
                    4b:17:7c:90:2f:fb:06:56:aa:a3:3b:78:8c:eb:d6:
                    cd:f0:2a:1e:ba:6e:12:fc:23:c8:47:67:73:bf:7d:
                    06:37:5d:05:af:70:77:a5:f4:7d:d4:24:40:41:b2:
                    7d:7c:be:cb:eb:66:fb:f1:2b:15:e4:04:ab:93:ec:
                    ee:fe:70:af:8d:7d:4b:06:ae:42:73:7c:91:f9:03:
                    53:c3:e7:93:0d:2f:b8:ca:e5:fc:58:72:cd:1e:64:
                    1d:99:0e:fa:9e:e7:23:41:38:74:e4:d7:2f:5d:c5:
                    56:0e:cf:3c:8a:d1:65:b2:84:00:ce:d6:2d:13:bb:
                    ae:48:57:5f:f3:70:71:e8:70:e1:ec:74:8c:28:9d:
                    5c:99:7b:a0:cc:5e:19:33:37:43:fa:68:f3:25:43:
                    0b:79:d1:7b:bc:a2:4e:ac:c3:37:54:d5:99:d2:35:
                    2a:b1:4f:84:8d:9e:f2:29:ef:d3:46:ce:b6:cb:73:
                    d2:4d:c9:ce:1b:fd:45:5d:02:76:8b:c3:0d:13:62:
                    f1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:62:8A:1D:23:45:9F:FC:AA:CA:CC:42:8C:EE:84:B1:FD:3D:F9:A6
            X509v3 Authority Key Identifier:
                keyid:C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/3130332e37302e3232302e302f32322d3232203d3e203633363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:37:c9:b1:d7:92:89:23:ff:59:9b:3a:18:6f:cf:e4:a5:
         38:d3:47:81:85:48:20:cc:0d:e7:89:d0:2b:83:c3:ad:9a:df:
         10:11:2d:92:18:6d:43:1f:a0:d6:ad:29:18:11:b0:41:51:9b:
         b6:56:7f:9f:4b:32:02:3b:e9:b7:a3:d1:94:77:3f:0e:77:79:
         3a:1f:5a:46:11:15:46:7b:6c:20:84:6f:da:7d:f6:83:e9:c1:
         fe:ea:1b:b6:b5:9a:90:dc:b5:e6:77:4a:9b:89:65:d7:3c:d8:
         39:87:30:39:11:6b:b2:e3:77:8f:c5:eb:74:cd:57:89:71:47:
         a7:b0:ba:ea:17:68:40:3a:3e:7e:f7:d4:bc:c9:ab:d3:cc:6d:
         6b:57:ef:84:27:78:81:9a:03:fd:e4:9e:32:8a:66:c6:b3:dd:
         a5:bc:8a:f0:48:73:90:58:33:a4:3d:78:02:5f:2f:c8:4c:51:
         86:e5:65:80:78:4a:25:86:05:25:26:ee:3a:3b:05:2b:f8:61:
         29:93:d4:3e:62:d1:07:ce:66:d9:bf:e2:52:0c:d6:4a:c4:1e:
         f7:37:36:7e:64:60:18:5b:5b:d1:39:16:cd:97:0f:cf:0e:33:
         47:8b:eb:b6:14:e8:61:f2:22:1b:1a:fd:d8:e1:b5:84:2b:41:
         bf:3c:db:24
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDxh+rcBphTgX7XPoZmdNYgSrsdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5
RjczM0YwODAeFw0yNjA1MTMwOTE2MDNaFw0yNzA1MTIwOTIxMDNaMDMxMTAvBgNV
BAMTKEQ0NjI4QTFEMjM0NTlGRkNBQUNBQ0M0MjhDRUU4NEIxRkQzREY5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VploY0JFyGBgZq0ckYBBBiAF
am/42qaOXMqCb87Oe4Q1Vo2QSOFXfx1xWCZ9gOYqF21j/RwtKkU2xEsXfJAv+wZW
qqM7eIzr1s3wKh66bhL8I8hHZ3O/fQY3XQWvcHel9H3UJEBBsn18vsvrZvvxKxXk
BKuT7O7+cK+NfUsGrkJzfJH5A1PD55MNL7jK5fxYcs0eZB2ZDvqe5yNBOHTk1y9d
xVYOzzyK0WWyhADO1i0Tu65IV1/zcHHocOHsdIwonVyZe6DMXhkzN0P6aPMlQwt5
0Xu8ok6swzdU1ZnSNSqxT4SNnvIp79NGzrbLc9JNyc4b/UVdAnaLww0TYvFPAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU1GKKHSNFn/yqysxCjO6Esf09+aYwHwYDVR0j
BBgwFoAUwWhmAvV8l723BY218FYj959zPwgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg3MTA3NjIyMDEwODgxOS8wL0MxNjg2NjAyRjU3Qzk3QkRCNzA1OERCNUYwNTYy
M0Y3OUY3MzNGMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5RjczM0YwOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwNjg3MTA3NjIyMDEwODgxOS8wLzMxMzAzMzJlMzcz
MDJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM2MzIzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmdG3DANBgkqhkiG9w0BAQsFAAOCAQEAeic3ybHXkokj/1mbOhhvz+Sl
ONNHgYVIIMwN54nQK4PDrZrfEBEtkhhtQx+g1q0pGBGwQVGbtlZ/n0syAjvpt6PR
lHc/Dnd5Oh9aRhEVRntsIIRv2n32g+nB/uobtrWakNy15ndKm4ll1zzYOYcwORFr
suN3j8XrdM1XiXFHp7C66hdoQDo+fvfUvMmr08xta1fvhCd4gZoD/eSeMopmxrPd
pbyK8EhzkFgzpD14Al8vyExRhuVlgHhKJYYFJSbuOjsFK/hhKZPUPmLRB85m2b/i
UgzWSsQe9zc2fmRgGFtb0TkWzZcPzw4zR4vrthToYfIiGxr92OG1hCtBvzzbJA==
-----END CERTIFICATE-----
Generated at Wed May 13 21:31:12 2026 by rpki-client