Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa
File:                     3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa (raw, json)
Hash identifier:          nU2jzAeiN/92z2BG9zCpXjlNOqpVV/DCkixw34ocyuk=
Subject key identifier:   2F:B1:E7:CB:EF:97:3B:CE:76:70:75:54:B4:A6:37:16:B2:3A:82:35
Certificate issuer:       /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial:       190B265BEA5FD54905F286D9A105DD515BE79AC0
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa
Signing time:             Sat 06 Jun 2026 14:52:51 +0000
ROA not before:           Sat 06 Jun 2026 14:47:51 +0000
ROA not after:            Sat 05 Jun 2027 14:52:51 +0000
asID:                     63655
IP address blocks:        103.218.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0b:26:5b:ea:5f:d5:49:05:f2:86:d9:a1:05:dd:51:5b:e7:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
        Validity
            Not Before: Jun  6 14:47:51 2026 GMT
            Not After : Jun  5 14:52:51 2027 GMT
        Subject: CN=2FB1E7CBEF973BCE76707554B4A63716B23A8235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:07:fb:86:a3:e9:a3:78:64:f6:b9:99:58:
                    22:d3:74:67:e5:13:14:5b:23:ad:28:b8:a5:72:06:
                    7a:c6:31:9e:51:a7:3e:e2:e8:7c:1d:61:01:2e:7a:
                    44:dc:8e:98:40:e0:82:ca:b7:6d:70:87:2f:ef:6a:
                    42:0f:16:68:5a:07:e4:f3:51:ba:c5:c5:45:ec:0f:
                    f9:17:69:fa:e5:f4:be:32:90:22:71:4f:7a:39:bb:
                    79:a7:f7:db:3c:7c:82:4a:68:f3:21:2f:3e:a6:1e:
                    95:c4:ab:8b:ac:46:f9:93:0a:cb:5e:e2:4c:ca:fd:
                    9d:d5:52:c3:72:b9:68:21:c3:de:b6:fc:c1:c9:66:
                    78:3e:05:dd:43:3d:14:ed:44:9e:d5:92:9e:70:a0:
                    a2:39:56:b6:55:02:db:cf:3b:8d:d7:5e:29:69:f6:
                    e0:c5:ad:ab:f8:4c:06:0c:e3:1a:16:76:38:b4:49:
                    99:e6:20:bf:6a:cd:58:0e:a6:e0:28:79:0a:52:74:
                    67:9b:ab:ae:61:d9:00:fe:01:89:d3:83:81:b5:07:
                    e9:5f:f3:e2:59:30:ff:a2:8c:de:33:21:7c:52:2e:
                    b7:9a:8a:2f:a5:7e:1a:38:2d:19:69:70:ef:41:8b:
                    00:eb:ff:94:a3:43:d7:06:44:65:cb:4c:40:6f:81:
                    8b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B1:E7:CB:EF:97:3B:CE:76:70:75:54:B4:A6:37:16:B2:3A:82:35
            X509v3 Authority Key Identifier:
                keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:db:5d:cb:3e:09:b4:c5:b2:98:2c:9f:79:ef:b7:bf:25:b3:
         cb:c0:3f:40:2c:6c:a2:59:20:c8:b3:48:a2:62:32:bf:33:08:
         ad:e4:b4:8c:76:44:4e:da:e6:5d:3f:5c:71:fd:a3:6d:86:c3:
         24:c2:cf:0d:c2:fc:70:71:54:8b:42:66:65:f0:8d:61:05:9a:
         af:95:15:a2:99:45:1a:a9:93:de:37:4f:be:be:96:c1:50:2e:
         b4:be:5a:11:02:91:03:ae:d0:02:bc:84:71:f8:95:72:2a:29:
         bd:0b:21:0a:37:db:45:5f:34:0c:30:16:53:25:9d:69:f6:31:
         4d:0d:e4:56:1c:1a:ef:99:9f:32:1f:dc:78:3b:fc:c7:29:7f:
         89:21:9e:b5:61:73:58:51:f3:95:86:d8:f7:5d:a2:7a:e2:c4:
         48:38:8d:a8:5f:b9:bf:1e:b2:29:0b:f0:3a:79:fa:eb:59:3e:
         75:e3:dc:9e:20:ee:39:86:dc:14:00:ff:b4:dc:4b:4d:d6:31:
         e0:06:47:f8:fa:b2:ca:3b:c8:83:6c:c6:40:09:4e:27:de:c0:
         ff:87:91:03:72:ab:39:b4:c2:62:33:03:0c:64:dc:eb:18:88:
         fd:bb:d6:f9:9e:79:b0:5f:01:7a:1a:15:fb:24:da:e9:5c:04:
         a0:7d:fc:53
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUGQsmW+pf1UkF8obZoQXdUVvnmsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2
NDU5RjlGNjAeFw0yNjA2MDYxNDQ3NTFaFw0yNzA2MDUxNDUyNTFaMDMxMTAvBgNV
BAMTKDJGQjFFN0NCRUY5NzNCQ0U3NjcwNzU1NEI0QTYzNzE2QjIzQTgyMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROQf7hqPpo3hk9rmZWCLTdGfl
ExRbI60ouKVyBnrGMZ5Rpz7i6HwdYQEuekTcjphA4ILKt21why/vakIPFmhaB+Tz
UbrFxUXsD/kXafrl9L4ykCJxT3o5u3mn99s8fIJKaPMhLz6mHpXEq4usRvmTCste
4kzK/Z3VUsNyuWghw962/MHJZng+Bd1DPRTtRJ7Vkp5woKI5VrZVAtvPO43XXilp
9uDFrav4TAYM4xoWdji0SZnmIL9qzVgOpuAoeQpSdGebq65h2QD+AYnTg4G1B+lf
8+JZMP+ijN4zIXxSLreaii+lfho4LRlpcO9BiwDr/5SjQ9cGRGXLTEBvgYtvAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUL7Hny++XO852cHVUtKY3FrI6gjUwHwYDVR0j
BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy
NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTQxMTMwNDk5NjAxMjAzMzkvMC8zMTMwMzMyZTMy
MzEzODJlMzIzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzUzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGfa2zANBgkqhkiG9w0BAQsFAAOCAQEAWdtdyz4JtMWymCyfee+3
vyWzy8A/QCxsolkgyLNIomIyvzMIreS0jHZETtrmXT9ccf2jbYbDJMLPDcL8cHFU
i0JmZfCNYQWar5UVoplFGqmT3jdPvr6WwVAutL5aEQKRA67QAryEcfiVciopvQsh
CjfbRV80DDAWUyWdafYxTQ3kVhwa75mfMh/ceDv8xyl/iSGetWFzWFHzlYbY912i
euLESDiNqF+5vx6yKQvwOnn661k+dePcniDuOYbcFAD/tNxLTdYx4AZH+PqyyjvI
g2zGQAlOJ97A/4eRA3KrObTCYjMDDGTc6xiI/bvW+Z55sF8BehoV+yTa6VwEoH38
Uw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:19:09 2026 by rpki-client