Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137342e302f32342d3234203d3e203234313338.roa
File:                     3130332e38352e3137342e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier:          xWi+xEQIPVMZkF1kE0B2whGiJ0xqqNRiHsTYxUFsTRg=
Subject key identifier:   58:C0:CA:20:3E:B5:BB:52:60:E9:BD:03:1C:B7:B5:04:77:55:8A:01
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       792A49BE5739A090DF6BD38D3C078B6A4BD162E7
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137342e302f32342d3234203d3e203234313338.roa
Signing time:             Thu 04 Jun 2026 09:20:51 +0000
ROA not before:           Thu 04 Jun 2026 09:15:51 +0000
ROA not after:            Thu 03 Jun 2027 09:20:51 +0000
asID:                     24138
IP address blocks:        103.85.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2a:49:be:57:39:a0:90:df:6b:d3:8d:3c:07:8b:6a:4b:d1:62:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:15:51 2026 GMT
            Not After : Jun  3 09:20:51 2027 GMT
        Subject: CN=58C0CA203EB5BB5260E9BD031CB7B50477558A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:25:b6:7e:a1:fd:10:87:e9:88:de:1d:bc:
                    72:3d:d0:d7:6c:50:23:2d:4f:9f:6b:d1:6f:90:63:
                    d8:88:c1:bd:8c:81:27:b1:74:d5:e9:b4:8a:0e:47:
                    00:47:94:93:a7:40:37:d7:56:59:9c:02:6a:eb:87:
                    71:d4:b0:d5:51:9c:98:41:4f:62:fc:c5:38:e4:e0:
                    6f:cc:36:5f:f0:ad:25:19:e3:95:d8:6c:24:d0:a8:
                    8c:7d:c6:e0:e6:6f:6d:22:65:32:61:0e:fe:bc:56:
                    9a:43:1a:86:cd:81:b8:79:c1:08:d8:fe:5d:1b:99:
                    4d:7f:0a:37:95:f7:5c:61:f9:fa:02:a5:95:8e:a3:
                    3a:c4:1c:8a:e3:de:8f:5d:d5:a0:a2:aa:b3:08:a2:
                    80:d6:7c:4b:29:4e:8f:45:e6:b1:63:02:e5:7e:b6:
                    e1:b7:7f:59:27:70:88:ee:c8:53:26:92:ad:0e:30:
                    b2:f5:ff:58:42:47:f9:ca:41:08:00:fa:8c:2a:c4:
                    04:a6:4d:90:5c:2d:1e:01:1a:d9:3b:db:17:d3:ed:
                    20:1b:32:84:67:2b:ff:5c:59:77:2c:71:c5:b7:5d:
                    fe:bf:ac:a8:0c:49:7a:85:8e:1d:d3:22:fb:aa:ab:
                    dd:1e:8f:99:28:be:a0:b8:c6:50:3a:f2:5a:e6:75:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C0:CA:20:3E:B5:BB:52:60:E9:BD:03:1C:B7:B5:04:77:55:8A:01
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137342e302f32342d3234203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:d9:b7:2c:28:31:a9:17:1e:94:1f:68:c6:a0:30:23:53:
         53:aa:3d:f1:e1:c4:25:97:fc:c9:a6:3e:54:02:7d:0b:88:bf:
         7b:7b:e1:1f:2c:c1:3e:d6:c7:61:ec:7a:02:a8:10:bc:f8:32:
         8d:de:2d:99:58:3a:c0:46:9f:6d:28:9a:84:eb:13:09:98:22:
         70:b7:22:e5:cd:9c:d5:ea:1e:0f:4e:a2:95:65:f8:af:ed:7e:
         74:08:a9:ab:24:ef:26:b8:51:ee:b4:db:56:21:eb:53:14:5e:
         f4:bb:e8:ce:a0:38:58:1c:02:0f:8e:29:b8:e5:b6:a0:47:b6:
         bd:25:4f:59:ee:17:8c:9b:a6:2d:27:38:73:3d:95:83:9b:1a:
         3f:f0:34:2a:7b:89:c9:0e:a7:6b:39:c9:28:0c:d6:65:ac:5e:
         39:ba:0b:1f:65:1c:a9:db:30:38:83:37:c2:08:46:9a:37:13:
         70:e8:58:0a:ef:91:b9:7b:45:38:fc:21:01:c9:12:f0:fb:83:
         4c:10:94:f3:68:88:6a:d9:06:25:16:c7:85:0f:0c:38:b8:23:
         f7:a0:f4:06:a6:c0:f4:1e:1f:59:5b:4d:32:67:e8:6c:f7:ce:
         66:41:af:b8:60:3e:ee:8b:fb:98:c1:da:82:c9:d0:47:42:15:
         2e:77:33:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:16:41 2026 by rpki-client