Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa
File:                     3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          t+s8cW3HPIKJCf9/nR81HoUAb+qDT9KrGZa7/yuD7V4=
Subject key identifier:   64:2E:DC:E0:30:2C:38:5D:A4:26:B3:2B:22:9E:9B:48:1B:F4:2A:31
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       272D903C9D46CAA2F5A550176AB188AAF1EDA9C9
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa
Signing time:             Sat 06 Jun 2026 14:52:51 +0000
ROA not before:           Sat 06 Jun 2026 14:47:51 +0000
ROA not after:            Sat 05 Jun 2027 14:52:51 +0000
asID:                     134543
IP address blocks:        103.218.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:2d:90:3c:9d:46:ca:a2:f5:a5:50:17:6a:b1:88:aa:f1:ed:a9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 14:47:51 2026 GMT
            Not After : Jun  5 14:52:51 2027 GMT
        Subject: CN=642EDCE0302C385DA426B32B229E9B481BF42A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3b:64:06:09:55:db:43:2d:d7:3a:a6:a2:21:
                    81:90:f0:5d:bc:cf:3b:ee:f3:8a:35:14:6f:a0:03:
                    dd:85:f5:6c:c5:51:df:cc:98:d1:53:44:96:20:dc:
                    43:67:db:e0:8f:a8:2d:16:04:dc:df:a7:ce:0c:25:
                    3d:b5:80:11:f0:6b:d5:7b:d8:24:a0:a0:62:d7:f1:
                    13:7a:90:c7:de:cb:bf:fd:78:11:4f:a5:c2:b3:3b:
                    44:ac:91:e9:18:2d:52:ac:47:56:ca:af:e7:05:a8:
                    85:3b:2d:f2:26:43:db:fe:de:d2:b8:9c:6b:30:91:
                    46:83:60:ca:cc:5a:a8:0e:49:3c:08:54:77:ba:ab:
                    97:a1:c7:0e:4f:15:36:40:60:e6:e9:73:81:19:10:
                    45:60:51:c9:ff:e9:2e:7e:a1:a2:0a:02:41:0f:50:
                    ac:b0:3e:6e:b2:64:62:0c:8c:62:6c:cb:83:5f:f7:
                    73:5a:77:b7:68:34:90:ed:8d:55:d8:7d:ed:40:0d:
                    5a:32:59:27:f7:a9:88:38:7c:25:ff:8e:0b:31:94:
                    7c:e7:00:1a:7f:02:e8:f0:20:2f:e3:98:fd:00:61:
                    cb:e8:7a:18:e9:b0:e4:8f:fd:97:f5:2f:12:bf:66:
                    7c:f5:fd:40:60:d9:2c:9e:fc:2f:41:7e:4d:f7:67:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2E:DC:E0:30:2C:38:5D:A4:26:B3:2B:22:9E:9B:48:1B:F4:2A:31
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:91:8e:b2:04:2d:84:a1:36:6b:e1:d1:b5:1f:dc:d6:a3:49:
         0a:bd:fe:3c:05:ae:aa:71:b4:57:38:4a:7e:f3:20:cb:7b:43:
         33:e0:c9:eb:39:0d:a6:6e:d7:4b:5e:de:0c:c9:a2:b3:67:15:
         0d:f2:c4:9c:bc:ff:fc:0e:ba:13:5c:7c:b5:b2:30:d5:bc:60:
         90:3a:45:75:77:95:31:0d:16:09:a9:4e:59:b2:05:f7:18:2a:
         3f:de:a4:bb:ae:98:3e:20:05:68:bd:a3:31:0b:da:7c:12:a9:
         29:0f:44:cf:2e:35:d6:32:88:c6:5c:f1:8c:6d:59:51:84:6f:
         99:76:b7:f2:a5:e6:19:8f:4b:58:04:da:5f:f6:1d:29:8d:36:
         a7:2a:dc:0e:68:3d:bb:ed:df:31:a5:51:50:c0:84:41:0f:09:
         05:6c:11:8e:d6:9c:aa:6f:c4:31:f4:40:c7:29:0a:8c:89:49:
         4c:34:6c:42:bd:05:74:04:08:21:32:e1:7a:8a:f1:7b:fc:74:
         ec:b4:e2:84:bf:61:de:43:24:3f:61:53:93:7c:7a:43:62:01:
         60:6f:d6:db:72:f4:ca:8f:6a:a8:57:47:93:e3:ce:87:f6:5f:
         e8:b5:55:7b:e5:dd:4e:eb:22:1b:62:f6:73:be:ac:d6:25:9e:
         0d:18:5b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:07:31 2026 by rpki-client