Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36302e302f32322d3232203d3e203338303139.roa
File:                     3130332e3232302e36302e302f32322d3232203d3e203338303139.roa (raw, json)
Hash identifier:          iShB9cHkCwz5TExfHEI9Gv8GmO4ZLK8Bb54bQbSoCVs=
Subject key identifier:   FC:2D:9D:97:53:6C:DD:56:67:62:07:2D:D1:DF:B5:BC:7A:D9:BF:CA
Certificate issuer:       /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial:       13874ABD72F2AE35D36CA1D686DCCC49A57760E1
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36302e302f32322d3232203d3e203338303139.roa
Signing time:             Thu 16 Jul 2026 01:50:01 +0000
ROA not before:           Thu 16 Jul 2026 01:45:01 +0000
ROA not after:            Thu 15 Jul 2027 01:50:01 +0000
asID:                     38019
IP address blocks:        103.220.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:87:4a:bd:72:f2:ae:35:d3:6c:a1:d6:86:dc:cc:49:a5:77:60:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
        Validity
            Not Before: Jul 16 01:45:01 2026 GMT
            Not After : Jul 15 01:50:01 2027 GMT
        Subject: CN=FC2D9D97536CDD566762072DD1DFB5BC7AD9BFCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:b2:14:42:b2:f6:08:55:7a:2c:2b:a0:b4:
                    1a:ec:a5:31:b5:f5:e7:6a:50:61:23:f4:a1:03:3e:
                    fa:73:17:28:7f:26:48:57:53:9f:97:21:e2:72:98:
                    3d:fc:5e:08:66:68:08:52:05:2b:de:4b:90:1a:00:
                    bd:51:8b:39:90:df:7a:30:14:32:4f:5c:4a:74:af:
                    a0:3d:ed:77:4d:7c:52:44:48:0a:70:21:f3:9a:fa:
                    74:69:bd:90:b3:71:e3:17:b9:34:e4:8a:c5:ec:88:
                    3a:2b:77:25:37:76:d7:04:4a:83:c4:f9:7b:f2:a6:
                    51:49:0e:d5:ca:f2:f5:84:28:ec:12:87:cb:d0:d8:
                    91:7d:74:51:78:61:3a:21:25:7c:a7:92:6c:9b:f6:
                    5f:e5:01:d3:d2:cb:04:67:b7:83:57:20:17:23:41:
                    f1:33:9c:65:0a:17:9c:0a:56:19:c0:a8:d7:fb:d0:
                    66:64:8b:ab:ef:d7:9b:51:81:d5:14:10:47:e9:68:
                    a4:ef:92:46:36:80:3b:08:58:c4:a0:13:79:83:4c:
                    1c:75:3b:fb:e2:59:43:a3:9a:bf:13:64:2b:1b:2a:
                    06:49:98:d0:46:f7:39:f8:a2:f8:a1:c2:ef:23:4b:
                    4e:81:2c:d8:61:da:e0:94:90:82:8f:b2:28:7f:85:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2D:9D:97:53:6C:DD:56:67:62:07:2D:D1:DF:B5:BC:7A:D9:BF:CA
            X509v3 Authority Key Identifier:
                keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/3130332e3232302e36302e302f32322d3232203d3e203338303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:17:33:69:cb:36:c3:da:9b:b9:c9:c9:dc:58:b5:63:96:de:
         d1:99:1d:44:2a:2a:c8:24:23:e4:2e:31:bb:71:48:1a:da:3e:
         eb:c9:c1:99:eb:e7:bd:11:9b:7d:c3:79:31:87:d0:a9:87:6a:
         fa:85:bf:a5:b6:95:95:d0:d1:87:10:8f:e2:0f:ce:5e:3c:1c:
         83:6c:0c:ae:f7:09:72:5e:37:55:14:be:f9:50:b1:87:19:6b:
         f8:de:14:b1:2f:8c:a2:3d:73:63:12:e7:99:8f:71:dc:a9:01:
         26:2e:f0:da:be:3b:e9:74:ab:d0:e9:3a:96:91:34:80:53:b4:
         0e:eb:c7:a4:0b:20:0e:e2:64:05:75:30:73:6b:e9:d2:82:4c:
         9f:c9:20:21:31:86:57:ef:7b:5f:bb:28:e8:69:55:9b:09:ab:
         24:c7:08:01:f5:46:e5:5b:94:d0:da:52:cf:e7:94:cb:9c:61:
         c1:4c:9e:53:a7:e5:be:3f:d2:fe:36:81:b9:02:dc:e2:c5:38:
         2b:02:0c:d1:91:50:99:6d:5e:c7:f5:b2:99:ea:46:98:33:2c:
         50:12:fb:df:7a:77:42:aa:45:d8:f5:a4:15:68:4c:4b:72:4c:
         c4:4b:2a:86:26:2d:01:30:8d:8f:96:da:ab:7b:1f:b1:36:cf:
         a8:8e:e4:e7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUE4dKvXLyrjXTbKHWhtzMSaV3YOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw
OThCQzhEMjAeFw0yNjA3MTYwMTQ1MDFaFw0yNzA3MTUwMTUwMDFaMDMxMTAvBgNV
BAMTKEZDMkQ5RDk3NTM2Q0RENTY2NzYyMDcyREQxREZCNUJDN0FEOUJGQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo8LIUQrL2CFV6LCugtBrspTG1
9edqUGEj9KEDPvpzFyh/JkhXU5+XIeJymD38XghmaAhSBSveS5AaAL1RizmQ33ow
FDJPXEp0r6A97XdNfFJESApwIfOa+nRpvZCzceMXuTTkisXsiDordyU3dtcESoPE
+XvyplFJDtXK8vWEKOwSh8vQ2JF9dFF4YTohJXynkmyb9l/lAdPSywRnt4NXIBcj
QfEznGUKF5wKVhnAqNf70GZki6vv15tRgdUUEEfpaKTvkkY2gDsIWMSgE3mDTBx1
O/viWUOjmr8TZCsbKgZJmNBG9zn4ovihwu8jS06BLNhh2uCUkIKPsih/hYFzAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/C2dl1Ns3VZnYgct0d+1vHrZv8owHwYDVR0j
BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5
MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwOTM1NDAzNjg2OTQ2NDA4NS8wLzMxMzAzMzJlMzIz
MjMwMmUzNjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzODMwMzEzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmfcPDANBgkqhkiG9w0BAQsFAAOCAQEAdhczacs2w9qbucnJ3Fi1Y5be
0ZkdRCoqyCQj5C4xu3FIGto+68nBmevnvRGbfcN5MYfQqYdq+oW/pbaVldDRhxCP
4g/OXjwcg2wMrvcJcl43VRS++VCxhxlr+N4UsS+Moj1zYxLnmY9x3KkBJi7w2r47
6XSr0Ok6lpE0gFO0DuvHpAsgDuJkBXUwc2vp0oJMn8kgITGGV+97X7so6GlVmwmr
JMcIAfVG5VuU0NpSz+eUy5xhwUyeU6flvj/S/jaBuQLc4sU4KwIM0ZFQmW1ex/Wy
mepGmDMsUBL733p3QqpF2PWkFWhMS3JMxEsqhiYtATCNj5baq3sfsTbPqI7k5w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:36 2026 by rpki-client