Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa
File:                     3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa (raw, json)
Hash identifier:          NOCAwtWZsIhBry+SBX5iaq88IXE9NM5A/dmXDriT5aI=
Subject key identifier:   4E:8C:DE:CE:41:F1:51:80:69:BA:95:4E:BA:6F:52:90:30:0B:DF:08
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       209365CDD708A6CCB36D2201A98BB04EFDD904B8
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa
Signing time:             Sat 06 Jun 2026 14:52:51 +0000
ROA not before:           Sat 06 Jun 2026 14:47:51 +0000
ROA not after:            Sat 05 Jun 2027 14:52:51 +0000
asID:                     63655
IP address blocks:        103.218.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:93:65:cd:d7:08:a6:cc:b3:6d:22:01:a9:8b:b0:4e:fd:d9:04:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 14:47:51 2026 GMT
            Not After : Jun  5 14:52:51 2027 GMT
        Subject: CN=4E8CDECE41F1518069BA954EBA6F5290300BDF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:d6:c5:be:5c:1a:5a:7f:7a:25:8b:71:80:
                    e4:d5:b6:87:ae:96:fb:d2:7b:e3:11:1c:44:b5:f7:
                    4f:72:39:80:bb:e9:d2:c1:c9:37:88:b3:b8:ff:62:
                    88:d3:6d:4e:dc:b2:b9:43:d4:04:95:fd:39:24:6b:
                    e9:e4:b0:22:bc:01:e8:c1:5d:af:5f:67:85:cf:c2:
                    53:9c:52:11:c7:92:2b:1a:3c:4c:7d:e7:f6:2f:a2:
                    b2:23:3c:bf:c6:22:f1:23:33:4e:ea:54:10:d6:ee:
                    bc:bd:4b:93:80:1e:7d:6b:f2:0c:18:32:a9:3a:54:
                    06:10:1d:05:b2:75:ac:72:eb:28:6a:2e:7e:8a:ba:
                    1b:df:2f:03:87:6e:f1:98:b8:35:ec:9e:43:ac:2d:
                    da:6a:24:f3:cd:62:36:7c:cf:4a:bb:b6:84:7a:8e:
                    5c:74:ea:42:c5:8d:34:58:40:32:4d:5f:43:2c:80:
                    b4:91:05:c6:dc:d9:b5:4f:00:81:aa:e8:c2:93:a4:
                    8b:30:95:06:6d:97:9a:0c:4a:d6:c3:61:46:04:e2:
                    b3:9a:61:d8:c1:92:c8:5b:43:49:90:b3:e6:df:af:
                    69:ec:69:1f:25:0b:98:03:54:d7:18:e0:c9:e8:ec:
                    94:77:e0:ac:34:86:c8:49:be:b5:d0:ee:de:88:b4:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8C:DE:CE:41:F1:51:80:69:BA:95:4E:BA:6F:52:90:30:0B:DF:08
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:b8:20:06:e4:fb:de:01:ae:44:76:c0:1a:b0:4e:76:cd:b9:
         ca:1f:cc:b7:ad:64:da:85:9f:e0:f9:93:e1:93:25:a6:66:0b:
         cb:ae:2a:94:ff:a3:d1:f8:f4:55:14:37:75:39:98:c8:ba:b3:
         03:41:a5:37:03:30:66:35:8f:b3:dd:bc:a1:5a:96:a8:e1:df:
         cf:fc:a0:37:a1:62:3e:8b:94:cc:49:d2:8f:14:9f:e7:27:4f:
         a8:33:22:31:43:3d:6a:33:f7:5d:a2:e0:16:84:a8:90:0f:51:
         db:de:81:42:eb:d7:5d:e3:4b:f3:e2:eb:33:d4:b2:95:98:cb:
         21:46:db:7d:25:c6:1f:e0:a2:71:77:08:1f:52:5a:09:aa:67:
         91:0f:e1:9b:c7:4e:a3:a2:e5:58:46:ce:d7:21:ec:00:21:d0:
         f3:22:51:91:69:15:31:9c:ea:b9:f7:ad:65:d0:dc:5c:d6:00:
         ce:16:fa:44:c0:2f:b6:7b:86:2b:7f:d9:b2:a1:cb:99:7d:b4:
         ea:9a:3a:c7:cc:61:08:4e:97:8a:d1:eb:1e:9f:f3:c9:fb:d1:
         f5:0a:a2:cc:26:05:c7:3d:36:bc:fa:5b:b6:1c:bb:c3:87:83:
         e9:ed:7e:64:59:dc:60:26:68:3e:87:d0:e4:0d:22:28:d1:cb:
         e5:67:c3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:19:19 2026 by rpki-client