Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166966283/0/3130332e3138392e39332e302f32342d3234203d3e2034383337.roa
File:                     3130332e3138392e39332e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          gkpsLZeTrjGyQq6N61S2DVSjIch7+Hcv8M6Eql6Q6/k=
Subject key identifier:   E8:40:3F:70:82:F8:4F:6A:EB:59:76:F8:75:51:81:31:54:F7:F2:D2
Certificate issuer:       /CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD
Certificate serial:       6C9C600B4AFA5F5D880449F013DEF4BE20F2B36D
Authority key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/3130332e3138392e39332e302f32342d3234203d3e2034383337.roa
Signing time:             Fri 12 Jun 2026 06:41:17 +0000
ROA not before:           Fri 12 Jun 2026 06:36:17 +0000
ROA not after:            Fri 11 Jun 2027 06:41:17 +0000
asID:                     4837
IP address blocks:        103.189.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9c:60:0b:4a:fa:5f:5d:88:04:49:f0:13:de:f4:be:20:f2:b3:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD
        Validity
            Not Before: Jun 12 06:36:17 2026 GMT
            Not After : Jun 11 06:41:17 2027 GMT
        Subject: CN=E8403F7082F84F6AEB5976F87551813154F7F2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:21:69:cf:6c:2e:ec:21:b1:79:3b:53:3e:
                    89:53:79:14:ed:88:7b:18:87:a5:56:cb:df:90:70:
                    69:b2:30:ef:4e:6f:9a:83:c9:ab:b0:91:7f:67:47:
                    ba:19:48:b9:bd:ae:ae:f5:b7:05:7f:dd:7d:07:5c:
                    1a:72:11:ae:fc:6b:a2:ed:68:09:c6:e0:d7:48:6e:
                    4b:8a:bf:92:18:48:da:b5:a2:21:1a:5a:24:a2:be:
                    0c:88:bf:80:56:ee:63:aa:5f:f3:ae:83:22:78:29:
                    cf:cb:7f:2e:de:18:e4:9a:bc:e2:35:8b:8d:7c:2a:
                    30:88:17:a9:51:74:82:c8:c3:d1:9e:35:cf:7f:4b:
                    86:6b:1a:2a:a9:78:67:a4:08:4a:7f:b2:2f:71:16:
                    da:2e:1b:98:88:74:39:39:38:64:b3:05:b5:33:3d:
                    ab:6c:76:3c:d6:e3:3d:95:cc:52:77:10:3f:4d:8b:
                    6b:57:1d:6e:5a:f2:12:af:50:f5:bb:fb:6f:78:ad:
                    97:00:cf:fc:0f:d0:20:3b:4e:dc:7c:b0:7f:cc:56:
                    c1:12:b9:7a:95:87:f0:ab:74:d3:71:08:b5:ff:a8:
                    1e:95:da:6b:4c:2a:80:8c:dd:30:b7:e4:c7:68:75:
                    f3:42:06:99:01:e4:45:8c:e8:58:c1:c9:83:20:3c:
                    3d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:40:3F:70:82:F8:4F:6A:EB:59:76:F8:75:51:81:31:54:F7:F2:D2
            X509v3 Authority Key Identifier:
                keyid:91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/3130332e3138392e39332e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a4:08:1e:94:1c:aa:ce:9b:64:49:e4:9c:a1:e7:74:44:e2:
         9b:22:43:cd:bd:4b:e5:26:3b:a8:b3:f4:40:dc:b2:db:da:43:
         4f:54:44:7b:14:3f:a3:b2:f9:99:83:16:c9:8a:d3:32:fc:72:
         16:bc:34:dc:81:ef:12:54:31:e3:a3:f3:ed:17:84:37:75:12:
         82:fe:47:21:bc:52:35:ec:2f:1a:04:94:53:c7:54:4d:b1:0d:
         d4:51:ff:30:20:50:aa:5e:78:71:32:87:7f:73:a5:a4:32:9c:
         84:da:7f:05:22:c6:3c:f5:1b:0d:ab:99:ce:f4:c3:d6:89:d4:
         f0:5b:74:a1:d6:92:f3:97:66:ae:12:9b:0c:7c:80:50:90:0f:
         fc:9a:0b:0a:21:53:a5:27:58:82:2b:f8:12:8e:0b:ad:5f:b2:
         07:f5:22:dd:49:87:17:f3:5f:ce:f8:a9:1b:5b:e5:cc:b8:ef:
         51:ea:b2:4f:f6:05:2c:98:20:65:89:21:16:e7:0e:5b:86:0d:
         d4:11:5f:97:26:a7:de:5b:98:7b:14:d0:02:d5:fb:cb:7c:22:
         6a:7e:fb:e7:4a:96:10:86:20:6e:c0:4f:32:6d:a8:80:0d:2b:
         5d:84:d1:ef:a5:94:39:71:96:1c:e9:a9:70:9e:69:ac:41:50:
         41:1d:5f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:05 2026 by rpki-client