Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232382e302f32322d3232203d3e2034383337.roa
File:                     3130332e32342e3232382e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          qJPJ83xaMw16qDsSncZcoy/olhHqgPT6g3PgUjqsbok=
Subject key identifier:   2F:D6:0C:BF:A8:A0:14:76:52:C7:55:4C:A4:50:8C:DF:A0:A0:D7:6C
Certificate issuer:       /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial:       78DF377D26117C0CD510D2C7173A3EDD242FE306
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232382e302f32322d3232203d3e2034383337.roa
Signing time:             Thu 16 Apr 2026 06:16:24 +0000
ROA not before:           Thu 16 Apr 2026 06:11:24 +0000
ROA not after:            Thu 15 Apr 2027 06:16:24 +0000
asID:                     4837
IP address blocks:        103.24.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 03:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:df:37:7d:26:11:7c:0c:d5:10:d2:c7:17:3a:3e:dd:24:2f:e3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
        Validity
            Not Before: Apr 16 06:11:24 2026 GMT
            Not After : Apr 15 06:16:24 2027 GMT
        Subject: CN=2FD60CBFA8A0147652C7554CA4508CDFA0A0D76C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:07:46:f4:5f:08:c1:13:27:83:85:05:48:
                    a2:5c:41:34:13:2a:c5:1a:a2:5d:4e:9d:f0:de:9f:
                    62:fb:fc:48:17:06:7a:1b:7e:24:74:af:08:de:f5:
                    ff:b3:e6:38:b4:73:a3:bc:19:6f:76:03:fa:12:6d:
                    96:13:4c:30:04:cd:c1:44:53:a8:60:77:8f:e7:d3:
                    f0:e4:8f:2e:7b:1d:93:ca:37:e2:4a:ce:b0:e8:69:
                    da:ef:eb:5f:ae:cc:29:83:b1:bf:d0:cd:34:d5:27:
                    a7:a7:1a:44:7b:b5:99:48:c9:e2:73:69:b9:98:9b:
                    37:c2:09:62:2f:75:ae:2f:b3:8e:d2:ce:5c:85:bc:
                    e7:fe:b5:92:c6:21:ee:b4:41:7c:80:90:e2:22:3f:
                    5f:f9:a1:1e:66:3f:4f:42:f3:fb:06:43:13:b5:72:
                    b1:dc:91:a4:db:31:88:6b:d6:e7:fd:5e:35:71:6c:
                    0c:01:74:57:ea:7e:74:d9:cc:be:fc:58:5b:c1:6d:
                    50:bb:5c:0d:ca:9c:9d:60:62:2d:62:2c:ac:57:21:
                    e5:8d:6d:ba:05:71:c1:44:21:67:8c:c9:8a:0c:7d:
                    6d:e0:77:c1:57:38:c3:68:f5:83:60:a2:b8:bb:c6:
                    06:75:fd:10:2f:ce:25:17:80:02:1e:1f:86:98:dc:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D6:0C:BF:A8:A0:14:76:52:C7:55:4C:A4:50:8C:DF:A0:A0:D7:6C
            X509v3 Authority Key Identifier:
                keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/3130332e32342e3232382e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:73:b7:cb:a8:6c:61:ee:ee:8e:2b:a2:42:12:38:b3:7e:ee:
         43:a1:9c:f9:9c:5b:cb:f6:c9:bb:64:9c:6d:03:28:a7:46:b5:
         f0:08:56:7c:2b:25:ce:ba:85:d2:18:6a:05:b8:9c:f5:90:1d:
         92:6a:6b:e2:51:02:c5:82:39:4b:85:7f:c1:ca:4f:06:08:a8:
         b2:65:34:ea:63:05:79:ec:06:c2:7a:25:84:d2:56:dd:a7:ad:
         23:34:d2:8b:31:cd:1d:7e:42:a3:8c:52:46:81:7d:38:e6:70:
         07:e1:60:56:ac:1a:24:7d:bd:c1:c7:8b:2a:68:53:ef:d4:1e:
         a6:29:b2:4c:e1:db:b8:21:eb:b1:17:ce:4d:05:5a:cc:82:85:
         a0:3e:b8:5a:2f:56:4b:44:27:86:12:76:24:39:89:60:25:a6:
         93:ec:e3:76:68:7b:82:81:09:d8:a8:5f:e7:48:2e:34:3b:48:
         45:c9:67:fb:af:49:25:3b:76:de:fb:2a:3e:da:eb:5a:a0:a7:
         da:28:25:b1:a1:cb:72:ac:96:30:e1:ec:42:e6:da:7b:20:01:
         72:f6:d5:8f:47:6b:e8:c1:f1:f0:32:52:1d:4f:e2:c2:c9:b9:
         56:6c:aa:29:b3:43:91:07:7b:b3:c5:24:e9:87:75:9a:08:fd:
         c8:66:8a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:17:48 2026 by rpki-client