Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa
File:                     3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          Y2RcLQFb18CnjFCnAzsTkcgykGHRf54pkJISu/gd7vI=
Subject key identifier:   B8:0A:4F:75:4D:7C:9E:32:06:4F:F7:DA:45:F5:1D:3A:BD:5A:48:08
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       1E567987D00333552E8D7FAC3718BD471A513E65
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa
Signing time:             Sat 06 Jun 2026 14:52:51 +0000
ROA not before:           Sat 06 Jun 2026 14:47:51 +0000
ROA not after:            Sat 05 Jun 2027 14:52:51 +0000
asID:                     134543
IP address blocks:        103.218.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:56:79:87:d0:03:33:55:2e:8d:7f:ac:37:18:bd:47:1a:51:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 14:47:51 2026 GMT
            Not After : Jun  5 14:52:51 2027 GMT
        Subject: CN=B80A4F754D7C9E32064FF7DA45F51D3ABD5A4808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:81:2b:1b:4a:87:52:46:26:2a:06:c0:f5:
                    fc:bf:5f:46:8f:23:b0:7b:92:f7:45:c9:ff:45:90:
                    07:fc:0f:bc:65:cc:4a:81:f2:51:7e:ba:09:da:45:
                    18:00:bb:21:b5:99:67:a5:ef:0f:43:25:c6:49:3e:
                    c8:0d:d9:09:d6:a9:e4:43:68:a6:f6:69:d9:20:9d:
                    fe:cf:50:a2:2b:a7:2f:e5:15:7d:a9:b6:a1:a6:df:
                    38:ff:29:92:80:f9:17:e2:0b:da:15:fb:d7:93:c8:
                    b2:a1:22:0d:a9:db:35:7f:5f:0e:cb:5a:1e:60:29:
                    cb:98:4d:e3:39:60:ac:49:2f:8c:2c:88:ab:95:f1:
                    c3:4d:55:19:30:c9:46:f8:fc:51:50:03:05:0b:2b:
                    83:3e:10:a6:a8:7a:35:5e:f6:2b:6a:8e:38:84:4c:
                    a2:6d:c8:16:7e:14:49:b3:a0:ee:80:92:b7:f7:a8:
                    bc:5e:aa:c4:97:72:6c:54:2d:78:59:19:63:5b:e9:
                    9a:8e:11:74:d7:d1:fd:0f:2e:ba:15:b6:c1:f3:e7:
                    26:41:62:80:0d:ed:9b:d6:e5:fe:f2:46:22:3a:03:
                    ff:bb:a4:2d:b6:aa:93:3b:07:2c:71:25:e8:88:36:
                    0c:81:2b:b6:01:31:7e:37:ea:ce:fe:18:93:13:04:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0A:4F:75:4D:7C:9E:32:06:4F:F7:DA:45:F5:1D:3A:BD:5A:48:08
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:5a:f7:0a:a6:6c:98:e9:fa:94:e2:8e:ab:b3:d7:f4:b0:f5:
         8d:df:d1:54:57:d6:52:53:7b:ca:c4:46:51:8e:27:75:8a:50:
         8f:ef:73:60:28:cd:8f:5f:21:4a:d4:a0:e1:a4:90:21:4b:06:
         d9:38:68:3c:48:d0:2c:38:20:f0:9b:b2:57:29:1e:42:67:4f:
         12:47:27:38:91:5b:c6:31:31:08:c3:2e:2c:7f:84:f1:18:20:
         4c:8c:c2:b8:a0:54:40:c5:00:e4:01:7b:d8:7a:d3:f3:99:59:
         28:77:64:ff:bd:72:87:f0:66:cf:3b:1f:81:cf:c1:88:cd:e7:
         05:78:c2:ed:93:20:54:17:a7:d6:d6:10:1c:a6:94:77:07:bd:
         e6:e5:1d:4e:ac:2d:db:31:68:41:8f:a2:e7:46:e6:dc:96:47:
         09:7c:ae:fe:c2:f6:9b:8a:e2:0a:25:f1:75:e6:b5:a7:84:d2:
         62:ce:0c:15:58:26:5a:25:d0:25:89:c3:ae:7e:48:ce:c4:97:
         58:f6:74:a0:a8:97:65:7c:6c:6c:8e:a2:64:fd:ee:be:61:1d:
         42:6a:a2:be:c9:ea:18:52:6d:3a:23:8b:23:70:51:94:a2:c1:
         e4:05:f2:08:29:47:46:43:e6:3d:ac:85:59:00:ae:ad:99:b4:
         a4:2d:d1:b7
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUHlZ5h9ADM1UujX+sNxi9RxpRPmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2
NDU5RjlGNjAeFw0yNjA2MDYxNDQ3NTFaFw0yNzA2MDUxNDUyNTFaMDMxMTAvBgNV
BAMTKEI4MEE0Rjc1NEQ3QzlFMzIwNjRGRjdEQTQ1RjUxRDNBQkQ1QTQ4MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfL4ErG0qHUkYmKgbA9fy/X0aP
I7B7kvdFyf9FkAf8D7xlzEqB8lF+ugnaRRgAuyG1mWel7w9DJcZJPsgN2QnWqeRD
aKb2adkgnf7PUKIrpy/lFX2ptqGm3zj/KZKA+RfiC9oV+9eTyLKhIg2p2zV/Xw7L
Wh5gKcuYTeM5YKxJL4wsiKuV8cNNVRkwyUb4/FFQAwULK4M+EKaoejVe9itqjjiE
TKJtyBZ+FEmzoO6Akrf3qLxeqsSXcmxULXhZGWNb6ZqOEXTX0f0PLroVtsHz5yZB
YoAN7ZvW5f7yRiI6A/+7pC22qpM7ByxxJeiINgyBK7YBMX436s7+GJMTBKJBAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUuApPdU18njIGT/faRfUdOr1aSAgwHwYDVR0j
BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy
NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMTE0MTEzMDQ5OTYwMTIwMzM5LzAvMzEzMDMzMmUz
MjMxMzgyZTMyMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfa2jANBgkqhkiG9w0BAQsFAAOCAQEAH1r3CqZsmOn6lOKO
q7PX9LD1jd/RVFfWUlN7ysRGUY4ndYpQj+9zYCjNj18hStSg4aSQIUsG2ThoPEjQ
LDgg8JuyVykeQmdPEkcnOJFbxjExCMMuLH+E8RggTIzCuKBUQMUA5AF72HrT85lZ
KHdk/71yh/Bmzzsfgc/BiM3nBXjC7ZMgVBen1tYQHKaUdwe95uUdTqwt2zFoQY+i
50bm3JZHCXyu/sL2m4riCiXxdea1p4TSYs4MFVgmWiXQJYnDrn5IzsSXWPZ0oKiX
ZXxsbI6iZP3uvmEdQmqivsnqGFJtOiOLI3BRlKLB5AXyCClHRkPmPayFWQCurZm0
pC3Rtw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:07:21 2026 by rpki-client