Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39352e3133362e302f32322d3234203d3e2030.roa
File:                     3130332e39352e3133362e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          Nwx000mWONEcJp92FiieVi0dDm3vEmvPf9vv0GRyLCg=
Subject key identifier:   9F:3A:E6:27:D1:27:64:7D:3C:36:D0:BD:AE:6F:B5:5C:E2:66:5E:E3
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       332B68F86B0CE6AEFD6DF9ED0BC0D70A9B75DDFB
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39352e3133362e302f32322d3234203d3e2030.roa
Signing time:             Thu 04 Jun 2026 07:23:28 +0000
ROA not before:           Thu 04 Jun 2026 07:18:28 +0000
ROA not after:            Thu 03 Jun 2027 07:23:28 +0000
asID:                     0
IP address blocks:        103.95.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 14:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2b:68:f8:6b:0c:e6:ae:fd:6d:f9:ed:0b:c0:d7:0a:9b:75:dd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 07:18:28 2026 GMT
            Not After : Jun  3 07:23:28 2027 GMT
        Subject: CN=9F3AE627D127647D3C36D0BDAE6FB55CE2665EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:69:b0:84:44:a3:6a:27:b6:c3:5a:8a:d9:
                    7d:6b:30:4b:f3:93:c2:7e:d3:4d:d7:6b:f5:88:93:
                    86:a4:20:d9:27:03:46:fb:cb:84:e8:8d:a6:ab:91:
                    80:db:56:27:d5:8b:af:d1:55:10:bf:5e:7b:8f:d0:
                    74:99:de:bb:ce:71:62:e6:d3:38:e8:43:4b:db:5e:
                    1b:84:82:fd:7b:de:0a:b4:09:f5:bf:2e:93:44:66:
                    71:c1:1a:7b:54:87:2a:58:e0:05:bd:9a:ee:d2:7a:
                    1a:69:6b:2f:3d:4a:ed:c4:00:35:ff:04:98:f1:39:
                    d3:7e:48:5b:c1:bc:04:be:20:b8:67:81:5f:b9:fb:
                    9b:a6:36:b0:9d:ec:92:c2:d1:f4:d2:50:c4:34:b8:
                    c7:f7:3e:44:89:b9:63:55:43:75:9e:ae:c0:7c:77:
                    a5:b1:3e:db:2a:e4:93:4f:f2:66:66:bb:3a:4a:21:
                    7f:43:c8:42:33:f3:a7:bc:15:0c:3e:54:55:9c:2d:
                    0d:77:f6:48:f1:9b:ef:4b:0c:8f:5f:2b:c1:ca:81:
                    f3:8a:13:89:c0:d9:fc:9a:05:8d:06:cd:41:ff:cc:
                    c2:0e:a3:e6:2a:6e:9b:4a:65:d1:9b:a0:ee:8f:05:
                    86:f8:6e:f1:c4:49:cc:17:dc:a4:56:37:e5:7e:0c:
                    01:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3A:E6:27:D1:27:64:7D:3C:36:D0:BD:AE:6F:B5:5C:E2:66:5E:E3
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/3130332e39352e3133362e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:8f:9e:c2:69:86:e2:d3:a8:03:8c:46:00:5b:22:27:b9:9c:
         62:ea:89:5a:73:9c:5a:c0:1a:63:d8:f8:fc:44:87:ca:2c:c1:
         21:44:45:58:98:f6:d2:ad:af:fe:6a:f6:31:47:b2:ee:16:d7:
         02:c5:55:0f:0f:0c:25:42:98:3c:c3:60:b9:5d:5d:e4:0a:7a:
         5a:04:e8:1b:e3:f7:3e:ef:53:54:78:d8:bc:78:51:d4:b0:22:
         f4:d9:ba:8f:1c:dc:61:34:1e:50:bf:27:f9:24:e1:30:f0:bb:
         ec:12:79:ff:74:f7:00:ca:5c:e3:20:f2:c4:46:2c:66:4e:f7:
         b5:cd:4f:a7:d0:cf:08:18:23:ee:e9:78:aa:90:f6:5b:85:b3:
         1f:84:09:47:97:7a:20:11:44:0c:1f:0b:d7:13:b5:e5:13:01:
         4f:f0:b5:0e:37:44:a9:27:d7:5c:5d:56:91:78:86:5e:6b:bc:
         92:7d:15:e3:aa:87:45:05:bf:aa:5e:5c:23:0b:54:a4:b2:14:
         03:ae:46:d2:1a:90:0b:d3:2e:21:c4:1d:93:c9:1f:1d:47:d0:
         8d:e9:6a:c3:74:55:74:32:d5:3e:29:45:98:da:54:45:65:a0:
         b6:c2:39:09:c2:5b:19:9d:92:f9:84:2a:42:ed:68:4d:7b:95:
         d8:2c:87:26
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUMyto+GsM5q79bfntC8DXCpt13fswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3
RDI3NzVDOTAeFw0yNjA2MDQwNzE4MjhaFw0yNzA2MDMwNzIzMjhaMDMxMTAvBgNV
BAMTKDlGM0FFNjI3RDEyNzY0N0QzQzM2RDBCREFFNkZCNTVDRTI2NjVFRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMGmwhESjaie2w1qK2X1rMEvz
k8J+003Xa/WIk4akINknA0b7y4TojaarkYDbVifVi6/RVRC/XnuP0HSZ3rvOcWLm
0zjoQ0vbXhuEgv173gq0CfW/LpNEZnHBGntUhypY4AW9mu7Sehppay89Su3EADX/
BJjxOdN+SFvBvAS+ILhngV+5+5umNrCd7JLC0fTSUMQ0uMf3PkSJuWNVQ3WersB8
d6WxPtsq5JNP8mZmuzpKIX9DyEIz86e8FQw+VFWcLQ139kjxm+9LDI9fK8HKgfOK
E4nA2fyaBY0GzUH/zMIOo+YqbptKZdGboO6PBYb4bvHEScwX3KRWN+V+DAEvAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUnzrmJ9EnZH08NtC9rm+1XOJmXuMwHwYDVR0j
BBgwFoAUsoJ0pxih/pp0525HeweQYH0ndckwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjcyNDMzMTczNTAyMzYzMy8wL0IyODI3NEE3MThBMUZFOUE3NEU3NkU0NzdCMDc5
MDYwN0QyNzc1QzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3RDI3NzVDOS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNzI0MzMxNzM1MDIzNjMzLzAvMzEzMDMzMmUzOTM1
MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdf
iDANBgkqhkiG9w0BAQsFAAOCAQEAbo+ewmmG4tOoA4xGAFsiJ7mcYuqJWnOcWsAa
Y9j4/ESHyizBIURFWJj20q2v/mr2MUey7hbXAsVVDw8MJUKYPMNguV1d5Ap6WgTo
G+P3Pu9TVHjYvHhR1LAi9Nm6jxzcYTQeUL8n+SThMPC77BJ5/3T3AMpc4yDyxEYs
Zk73tc1Pp9DPCBgj7ul4qpD2W4WzH4QJR5d6IBFEDB8L1xO15RMBT/C1DjdEqSfX
XF1WkXiGXmu8kn0V46qHRQW/ql5cIwtUpLIUA65G0hqQC9MuIcQdk8kfHUfQjelq
w3RVdDLVPilFmNpURWWgtsI5CcJbGZ2S+YQqQu1oTXuV2CyHJg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:34:34 2026 by rpki-client