Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa
File:                     3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa (raw, json)
Hash identifier:          5wmK/uIuxQ0abi5TfiuORpuZfYiXyqRFjvRirnqi+Sg=
Subject key identifier:   D1:E8:CE:EE:42:90:9A:B3:2B:71:87:D5:52:6B:80:4C:69:2A:4D:BE
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       2F365358C80A2BF113A544B716553D265938A2CF
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa
Signing time:             Sat 06 Jun 2026 14:52:51 +0000
ROA not before:           Sat 06 Jun 2026 14:47:51 +0000
ROA not after:            Sat 05 Jun 2027 14:52:51 +0000
asID:                     63655
IP address blocks:        103.218.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:53:58:c8:0a:2b:f1:13:a5:44:b7:16:55:3d:26:59:38:a2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 14:47:51 2026 GMT
            Not After : Jun  5 14:52:51 2027 GMT
        Subject: CN=D1E8CEEE42909AB32B7187D5526B804C692A4DBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:46:ef:e3:48:f2:03:3d:e3:2f:3e:16:88:41:
                    38:7c:4e:f6:bd:88:f2:af:f4:b8:a4:ba:ac:f3:71:
                    58:d0:52:df:e4:0d:f1:48:06:1e:ab:3b:43:92:e5:
                    00:43:9d:6d:80:4d:c1:1d:22:cc:14:6f:bf:d3:a1:
                    ed:10:df:18:1b:28:66:d5:16:61:e3:64:6a:da:97:
                    2c:47:85:c5:ff:e7:6c:d8:7f:cf:49:9f:39:82:ee:
                    ba:70:58:16:88:af:a8:d2:72:76:93:4e:e7:e4:d1:
                    10:4c:8a:df:7c:ed:70:1f:4f:4b:67:d4:85:19:03:
                    47:12:a6:ec:c7:6b:ee:fb:de:4c:87:02:29:27:61:
                    c3:a6:6d:ac:72:73:bd:7e:31:6e:90:c4:d7:39:68:
                    c3:fe:b1:73:53:7e:9b:e5:28:bf:4d:9f:d3:11:ec:
                    16:e2:34:78:5f:3e:01:90:5b:cc:b5:d4:bb:4c:90:
                    02:d2:01:b6:a2:c6:1f:c2:3b:e4:72:f4:ad:5d:93:
                    e7:7b:67:4b:ee:f6:69:9b:a5:00:b2:6c:77:e2:ed:
                    8e:43:24:d4:00:0d:f7:65:b3:84:42:72:db:20:4f:
                    77:29:39:cf:54:cd:e7:54:0c:03:61:b1:05:05:15:
                    38:4a:8b:e9:d3:a1:d9:7a:a3:62:2b:ed:1b:09:5f:
                    b9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E8:CE:EE:42:90:9A:B3:2B:71:87:D5:52:6B:80:4C:69:2A:4D:BE
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:40:f8:f6:1e:27:9a:82:70:85:07:02:ef:f2:8d:31:55:
         9a:9b:c7:34:0a:ec:86:d0:c3:ea:14:c7:53:65:09:7c:f9:32:
         8e:12:32:93:54:74:8f:c2:cf:1a:b4:ae:fc:36:8a:e3:64:09:
         53:62:cf:cb:3a:dc:3b:6d:86:0b:a7:60:e2:e9:ff:a8:fa:6e:
         22:24:12:72:d4:9e:ea:97:5b:ae:f5:55:c3:23:71:6e:46:f5:
         22:9a:f0:33:30:f3:ef:1f:0d:63:81:ad:c4:0b:8c:3b:44:17:
         52:ca:94:b9:23:11:3c:05:68:f3:55:29:2b:24:04:9a:ac:a6:
         ae:bb:18:cd:06:11:cd:7e:01:d2:c8:a6:57:ce:1a:ed:45:47:
         4b:5d:c8:1b:b0:4c:86:a4:3e:f5:2a:d2:ad:c6:0a:51:a4:1c:
         6d:28:d9:f4:47:df:10:8a:7e:87:7b:7c:c0:63:23:d1:6a:93:
         18:6c:c7:26:d0:ed:91:5e:28:4f:80:b2:30:01:a7:15:47:dc:
         c2:fb:22:78:7c:e0:fb:e2:ab:76:3f:c5:63:a7:72:9d:9d:b7:
         ea:3a:6a:c2:63:21:a9:8c:4e:86:84:11:de:71:7a:f6:25:31:
         7a:88:02:6a:6a:71:db:3f:e1:56:2f:6b:27:ab:25:6a:dc:9c:
         ed:1d:ae:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:12:06 2026 by rpki-client