Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa
File:                     3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa (raw, json)
Hash identifier:          qJvTHeXEIs4Vdls12BNbPtiipv+CuWwX/mjYv5JIrAk=
Subject key identifier:   E7:EE:2A:CE:EB:1D:FD:35:80:74:EE:B8:41:A8:41:CA:C0:A3:08:01
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       287BB9CF8474F87657B2D4CD9606BF0CAD0D2832
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa
Signing time:             Sat 06 Jun 2026 14:52:51 +0000
ROA not before:           Sat 06 Jun 2026 14:47:51 +0000
ROA not after:            Sat 05 Jun 2027 14:52:51 +0000
asID:                     134772
IP address blocks:        103.218.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7b:b9:cf:84:74:f8:76:57:b2:d4:cd:96:06:bf:0c:ad:0d:28:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 14:47:51 2026 GMT
            Not After : Jun  5 14:52:51 2027 GMT
        Subject: CN=E7EE2ACEEB1DFD358074EEB841A841CAC0A30801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:c1:33:a7:a2:0a:65:d1:c1:e4:7f:19:19:
                    cb:48:4b:e2:f9:56:2f:d9:56:45:97:2c:dc:67:9d:
                    14:9c:6a:f0:61:cf:55:fa:6b:8c:c7:ee:7c:14:51:
                    79:83:91:17:d8:23:a3:59:cd:b4:cd:33:02:b0:69:
                    2e:87:ac:04:a9:a0:9d:3d:c3:a6:81:1c:cf:85:36:
                    48:87:fa:d5:49:c6:f3:58:f2:f5:eb:95:23:c8:29:
                    e1:36:f7:f1:7f:3f:e9:8b:36:6f:e9:35:99:1f:30:
                    5e:35:b8:e1:fd:7a:03:f3:b1:a6:8f:c2:5c:21:0d:
                    04:56:72:17:ba:de:6c:bf:7b:20:64:b3:ab:d8:9e:
                    84:f6:84:34:b4:a5:92:83:c8:f4:87:bb:6d:b6:d6:
                    28:eb:65:07:6e:35:1f:d1:54:66:e8:52:cc:fe:b4:
                    45:8d:2e:2f:92:12:9e:10:86:d1:d6:28:ab:85:dc:
                    fa:58:92:f7:be:7b:e1:45:de:10:1f:41:aa:ce:17:
                    19:da:60:0b:d6:f6:fc:ad:2c:ac:3b:33:47:af:2a:
                    9c:80:3f:f1:0a:40:a0:c7:47:b7:a3:78:dd:19:d0:
                    3c:e8:c8:88:5b:10:af:76:f3:3f:b2:58:ef:84:f0:
                    fb:c7:2f:7e:77:67:bf:85:f0:c4:57:1f:f1:65:ee:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EE:2A:CE:EB:1D:FD:35:80:74:EE:B8:41:A8:41:CA:C0:A3:08:01
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:e1:6c:af:67:b7:82:b0:75:9f:59:29:9c:0f:5c:b2:41:d8:
         87:a4:47:61:cd:98:3f:61:5c:98:4b:43:d4:9f:2d:f9:60:b5:
         70:99:f4:76:bd:62:f3:6b:bd:c3:06:5c:21:15:5b:80:80:6a:
         6e:8f:00:42:e5:d9:ba:ec:1d:40:df:84:c4:e5:76:71:50:e0:
         4d:d2:ee:f4:75:7d:b2:11:df:01:57:dc:c1:30:31:72:55:8a:
         38:41:59:58:cb:ee:27:57:a3:71:c6:c7:56:92:1b:7c:b4:cd:
         14:5b:72:5d:5d:e8:49:63:0d:a9:85:7e:8d:69:18:a4:81:60:
         6f:86:a8:06:72:eb:8e:26:c5:55:f3:99:e8:d4:75:0b:9e:fa:
         29:21:e8:0c:eb:f1:7d:51:e0:e8:7b:87:12:64:4c:45:33:35:
         ee:9e:f7:89:51:ac:67:29:ba:d7:2a:40:08:40:d2:ea:a1:b1:
         c0:fe:3d:de:37:c3:d7:ee:5e:a6:e0:09:1e:97:17:78:dc:01:
         df:2d:8e:1e:e9:3a:96:fd:eb:83:7f:05:3f:93:e8:ca:e1:ea:
         ef:c9:6f:bb:62:94:01:46:e6:c2:8f:41:b7:c6:de:6f:b3:33:
         f6:06:87:ca:b3:5c:83:aa:2a:ac:47:68:a8:b3:aa:c0:e4:b4:
         60:b7:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:36:29 2026 by rpki-client