Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38312e342e302f32322d3232203d3e203633373034.roa
File:                     3130332e38312e342e302f32322d3232203d3e203633373034.roa (raw, json)
Hash identifier:          xkiYXaYkjbgn7P2e90y5r4lr6+YSk3FzLISw0PFGzS8=
Subject key identifier:   1D:69:D9:09:34:B1:8D:6A:73:B2:13:6B:9F:3A:15:F5:3D:F0:10:03
Certificate issuer:       /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772
Certificate serial:       04D20E2044111A52E40B3D3037A426DFC2FF4F12
Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38312e342e302f32322d3232203d3e203633373034.roa
Signing time:             Thu 04 Jun 2026 02:30:20 +0000
ROA not before:           Thu 04 Jun 2026 02:25:20 +0000
ROA not after:            Thu 03 Jun 2027 02:30:20 +0000
asID:                     63704
IP address blocks:        103.81.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d2:0e:20:44:11:1a:52:e4:0b:3d:30:37:a4:26:df:c2:ff:4f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772
        Validity
            Not Before: Jun  4 02:25:20 2026 GMT
            Not After : Jun  3 02:30:20 2027 GMT
        Subject: CN=1D69D90934B18D6A73B2136B9F3A15F53DF01003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:57:96:8e:cb:b8:ac:9d:b3:86:5e:d6:39:20:
                    a8:4f:a3:55:7a:2f:d8:8d:93:4c:e8:9d:7c:5f:76:
                    47:62:c7:67:a0:c7:83:c6:02:54:96:bd:7d:5f:4a:
                    2c:5a:8e:97:31:4b:96:eb:9a:d5:af:b4:9c:54:60:
                    48:fb:76:b5:02:d0:2d:91:ea:fc:f3:a3:99:11:d0:
                    5f:06:7d:a9:3e:e2:77:21:91:5e:a1:7e:58:42:13:
                    4d:6e:1f:e3:f7:eb:88:62:1c:e2:bd:23:72:32:a1:
                    18:c5:0c:da:8d:1c:d6:e3:b2:b1:45:0e:02:ae:00:
                    ec:14:31:3f:96:3f:11:40:97:d6:61:33:54:0d:12:
                    c0:50:5f:1c:06:55:91:e9:cf:9b:30:92:17:8c:fb:
                    74:97:26:49:58:18:44:1b:c6:46:c7:23:20:4c:94:
                    67:cc:18:c0:cb:d4:a2:ef:13:34:5a:27:05:64:17:
                    3c:f8:c7:dc:5b:cd:07:56:0e:f2:c1:19:7c:f6:32:
                    ab:7d:3e:58:45:30:76:8b:30:6d:9b:44:17:04:90:
                    bf:f6:2f:6d:5e:b1:04:43:98:5b:56:54:a4:01:80:
                    a0:3f:4f:e9:b5:28:d6:17:fa:6e:b4:78:f3:4c:15:
                    ac:2d:ad:f6:47:70:fe:7d:38:ef:ae:d6:21:c8:bb:
                    78:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:69:D9:09:34:B1:8D:6A:73:B2:13:6B:9F:3A:15:F5:3D:F0:10:03
            X509v3 Authority Key Identifier:
                keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/3130332e38312e342e302f32322d3232203d3e203633373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:42:1d:4a:d5:ab:b7:79:72:fd:6b:6b:d1:c8:09:7e:63:bf:
         f6:e0:5c:8f:b8:3a:6e:ad:77:bd:ba:5b:da:02:c5:33:4c:a6:
         73:ae:ba:fe:4e:e5:d5:e5:bd:36:10:f1:56:b2:8a:5a:61:2c:
         a3:7f:83:a1:8a:9f:6f:76:b6:33:fa:9d:ae:a0:f3:df:20:f3:
         d1:24:b1:71:d0:75:72:4a:11:cf:b3:6a:0a:79:86:d1:b2:6f:
         84:36:9f:a1:b7:26:05:b7:2f:de:ac:c4:84:21:4c:e4:49:0a:
         56:81:66:ae:25:d3:8b:28:1c:ce:0f:b3:25:08:3d:6a:48:f0:
         cf:3b:8e:4f:78:d3:38:47:dd:ce:ec:fc:d8:ca:ca:b5:70:8c:
         03:16:6a:25:e3:10:7d:a0:be:7c:45:ee:d7:2d:16:e8:9f:3d:
         9b:f8:9f:8c:b2:19:af:08:de:78:5e:1b:f5:59:04:4b:0f:be:
         20:2c:ba:87:d8:fd:33:75:0b:0e:0c:e0:f5:84:e2:46:db:03:
         90:04:c4:0b:cb:89:cc:03:20:e4:dc:73:94:89:3e:d8:11:e7:
         50:b2:c9:b4:c4:e4:f5:d0:15:23:66:ff:9b:08:9e:e7:1c:09:
         4a:8f:9f:cd:4c:86:b7:b5:f0:05:64:c7:e5:02:b2:06:40:5a:
         58:40:3e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:27 2026 by rpki-client