Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137352e302f32342d3234203d3e203234313338.roa
File:                     3130332e38352e3137352e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier:          oXqhoEQsEvpQ2J3TivWGguot0yLn2FMba/7VJWBdM0c=
Subject key identifier:   6C:E9:03:65:3F:A8:9A:20:3A:21:A4:B3:0E:DF:03:5F:62:E4:4B:44
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       40005ACFE6E6146ABC272E7DE854E8BC81FDBEE7
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137352e302f32342d3234203d3e203234313338.roa
Signing time:             Thu 04 Jun 2026 09:20:59 +0000
ROA not before:           Thu 04 Jun 2026 09:15:59 +0000
ROA not after:            Thu 03 Jun 2027 09:20:59 +0000
asID:                     24138
IP address blocks:        103.85.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:00:5a:cf:e6:e6:14:6a:bc:27:2e:7d:e8:54:e8:bc:81:fd:be:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 09:15:59 2026 GMT
            Not After : Jun  3 09:20:59 2027 GMT
        Subject: CN=6CE903653FA89A203A21A4B30EDF035F62E44B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:f7:4a:8e:dc:7c:2f:dd:81:9a:eb:e9:84:
                    0a:70:50:8a:0d:19:7d:4f:db:cf:18:57:18:bd:c6:
                    c2:6c:b4:2e:46:d7:b7:b2:1f:8c:bc:81:e0:73:7f:
                    a6:01:25:4b:24:c8:ff:42:63:1a:0d:34:8d:37:6b:
                    56:28:62:9a:d9:ad:d9:d1:df:81:a4:17:7b:8c:bf:
                    04:59:ac:47:5f:a1:d1:3f:67:76:36:a6:2f:61:4e:
                    7d:3a:d8:5e:5a:a1:16:f0:99:68:82:1b:31:5b:ae:
                    9d:75:cc:98:66:ee:c3:a5:65:07:14:91:a6:80:08:
                    d9:fa:fd:e0:91:c6:58:57:48:3d:b7:79:5b:59:c6:
                    fc:51:04:61:d4:d8:d7:a5:3f:55:2b:05:45:84:81:
                    5b:82:c0:6e:a1:ae:71:04:76:2e:de:13:6e:22:91:
                    93:c6:85:59:1e:c9:13:8f:f8:27:85:f9:b0:0f:82:
                    ce:4a:6e:11:0a:72:f1:e0:cc:6e:f6:f7:63:4b:bd:
                    1d:9a:06:c5:2b:78:dc:14:2f:f0:72:48:80:90:a8:
                    ba:1e:e7:03:38:e0:65:56:78:8f:22:1f:4d:d9:a7:
                    8f:69:90:c7:4f:c6:6a:99:ac:71:1b:57:96:b5:12:
                    a9:ec:eb:51:14:11:64:1c:50:27:ae:d0:51:5e:5c:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E9:03:65:3F:A8:9A:20:3A:21:A4:B3:0E:DF:03:5F:62:E4:4B:44
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e38352e3137352e302f32342d3234203d3e203234313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:21:73:2c:5d:4c:a9:17:d7:c4:3e:07:18:47:69:54:ba:0b:
         12:9d:b4:f2:65:47:ab:be:87:e7:ad:6a:d9:6b:fc:65:d4:d1:
         51:4d:93:ec:87:2f:b4:39:d7:3a:dc:8a:a4:fa:2c:1e:7a:f2:
         15:1e:09:a5:ba:ba:c7:e2:cf:30:30:a1:e3:3f:9a:dd:b0:03:
         c0:d7:49:07:05:78:d6:4a:17:85:eb:2c:38:19:05:9b:0b:90:
         30:6a:e2:84:d1:d8:f9:98:8e:41:4b:5c:79:58:73:54:f5:7f:
         4f:6f:e5:f2:78:4c:9b:be:5f:57:26:f4:dd:d8:ae:51:d6:72:
         8a:29:51:4e:84:6f:77:eb:e0:9c:f4:c2:c5:e4:6f:3a:bc:9d:
         bb:e7:c7:70:81:f6:c1:62:56:75:ad:cb:41:fa:2c:87:6b:51:
         68:0f:58:37:52:e6:aa:ae:80:1a:a9:8b:9e:4e:dc:b0:bb:10:
         ca:8b:68:93:78:2b:05:6b:19:31:40:84:9d:32:26:a3:62:47:
         f1:cc:3a:46:cd:27:54:b8:cc:89:45:d1:b6:49:ba:86:2a:13:
         76:87:1c:6c:76:17:9c:a6:3d:bd:a6:9f:c1:24:cd:a8:c1:07:
         76:63:50:18:06:28:e5:e8:30:04:1d:b6:2b:64:64:71:78:9b:
         bd:8c:72:e3
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUQABaz+bmFGq8Jy596FTovIH9vucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3
RDI3NzVDOTAeFw0yNjA2MDQwOTE1NTlaFw0yNzA2MDMwOTIwNTlaMDMxMTAvBgNV
BAMTKDZDRTkwMzY1M0ZBODlBMjAzQTIxQTRCMzBFREYwMzVGNjJFNDRCNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLvdKjtx8L92BmuvphApwUIoN
GX1P288YVxi9xsJstC5G17eyH4y8geBzf6YBJUskyP9CYxoNNI03a1YoYprZrdnR
34GkF3uMvwRZrEdfodE/Z3Y2pi9hTn062F5aoRbwmWiCGzFbrp11zJhm7sOlZQcU
kaaACNn6/eCRxlhXSD23eVtZxvxRBGHU2NelP1UrBUWEgVuCwG6hrnEEdi7eE24i
kZPGhVkeyROP+CeF+bAPgs5KbhEKcvHgzG7292NLvR2aBsUreNwUL/BySICQqLoe
5wM44GVWeI8iH03Zp49pkMdPxmqZrHEbV5a1Eqns61EUEWQcUCeu0FFeXGATAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUbOkDZT+omiA6IaSzDt8DX2LkS0QwHwYDVR0j
BBgwFoAUsoJ0pxih/pp0525HeweQYH0ndckwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjcyNDMzMTczNTAyMzYzMy8wL0IyODI3NEE3MThBMUZFOUE3NEU3NkU0NzdCMDc5
MDYwN0QyNzc1QzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3RDI3NzVDOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExMjcyNDMzMTczNTAyMzYzMy8wLzMxMzAzMzJlMzgz
NTJlMzEzNzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzMzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGdVrzANBgkqhkiG9w0BAQsFAAOCAQEAeCFzLF1MqRfXxD4HGEdpVLoL
Ep208mVHq76H561q2Wv8ZdTRUU2T7IcvtDnXOtyKpPosHnryFR4Jpbq6x+LPMDCh
4z+a3bADwNdJBwV41koXhessOBkFmwuQMGrihNHY+ZiOQUtceVhzVPV/T2/l8nhM
m75fVyb03diuUdZyiilRToRvd+vgnPTCxeRvOrydu+fHcIH2wWJWda3LQfosh2tR
aA9YN1Lmqq6AGqmLnk7csLsQyotok3grBWsZMUCEnTImo2JH8cw6Rs0nVLjMiUXR
tkm6hioTdoccbHYXnKY9vaafwSTNqMEHdmNQGAYo5egwBB22K2RkcXibvYxy4w==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:13:46 2026 by rpki-client