Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1115095607497719833/0/3130332e31322e39392e302f32342d3234203d3e20313436383032.roa
File:                     3130332e31322e39392e302f32342d3234203d3e20313436383032.roa (raw, json)
Hash identifier:          tbUTFYMvu1gUlC2oFmjSZqAYOrU9u+JdPDJBttAzV/o=
Subject key identifier:   89:5A:BD:49:17:EA:DD:11:C9:41:CE:63:AC:B3:C2:55:9B:F7:63:5C
Certificate issuer:       /CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
Certificate serial:       51C0CFE8CED4F6A2F481AF7A52264FE2A998D2E1
Authority key identifier: 0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/3130332e31322e39392e302f32342d3234203d3e20313436383032.roa
Signing time:             Fri 05 Jun 2026 01:59:37 +0000
ROA not before:           Fri 05 Jun 2026 01:54:37 +0000
ROA not after:            Fri 04 Jun 2027 01:59:37 +0000
asID:                     146802
IP address blocks:        103.12.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c0:cf:e8:ce:d4:f6:a2:f4:81:af:7a:52:26:4f:e2:a9:98:d2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC
        Validity
            Not Before: Jun  5 01:54:37 2026 GMT
            Not After : Jun  4 01:59:37 2027 GMT
        Subject: CN=895ABD4917EADD11C941CE63ACB3C2559BF7635C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:5d:07:af:c6:dd:82:cc:52:f2:b6:a4:12:
                    2d:fc:b2:ef:b9:cb:f7:f1:1b:7a:f2:d5:01:31:15:
                    8d:59:47:f7:23:83:b7:c3:95:a1:32:f9:c1:c3:6d:
                    d1:e3:1f:01:fe:d4:10:e9:1e:96:20:78:f5:1f:f2:
                    22:6d:b6:02:d4:7b:26:14:3a:b5:56:4f:b0:b0:3c:
                    a4:9a:7e:44:4b:43:65:c6:dd:2a:f2:47:6f:95:d8:
                    25:37:69:5a:24:33:ec:c1:b7:bc:ef:8c:f7:ef:b2:
                    f2:af:3f:92:95:0b:85:bb:03:4c:92:82:6b:cc:1c:
                    d5:f0:c5:2b:b6:08:ca:b8:14:0c:36:bf:1a:33:0d:
                    02:fc:2e:9a:ef:93:d9:53:7e:ee:ee:c9:48:bf:8b:
                    38:71:c3:bc:25:50:75:ec:15:ea:4c:61:39:12:01:
                    b6:4b:69:d8:5d:f7:57:84:e1:3f:44:8b:b8:f2:84:
                    c2:61:18:9e:04:13:96:a3:07:b3:8d:af:c4:45:e7:
                    af:b8:37:0c:2a:2f:9f:73:07:60:e4:d8:9e:f4:cc:
                    08:b7:48:dc:87:7d:b8:27:80:a5:67:33:01:05:47:
                    b2:47:e7:c9:8a:4c:88:f6:d3:3d:72:06:db:28:25:
                    e5:5b:21:59:bf:65:e1:3c:44:c9:06:ff:8d:e4:2f:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5A:BD:49:17:EA:DD:11:C9:41:CE:63:AC:B3:C2:55:9B:F7:63:5C
            X509v3 Authority Key Identifier:
                keyid:0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/3130332e31322e39392e302f32342d3234203d3e20313436383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c7:49:41:84:ea:b5:58:bd:82:da:28:44:cc:90:21:1b:48:
         8f:09:d1:45:9a:3e:ca:30:45:10:dd:65:b9:a9:da:be:d9:63:
         16:4b:99:63:6c:fb:05:be:7d:45:ef:73:7c:8c:b4:e5:a5:bc:
         d5:21:14:38:e7:94:76:cb:7d:45:ec:01:bb:e2:6b:d7:07:d9:
         6a:d3:f6:02:3d:df:44:11:4c:86:b6:47:f6:f8:b2:03:0a:47:
         d4:57:61:58:cd:a1:c7:cf:83:ad:ce:53:22:6b:90:86:05:1d:
         41:d0:53:77:6b:83:3f:36:7b:db:ad:f3:dc:36:ec:81:b0:51:
         24:76:51:7f:c1:2d:7e:5f:aa:2a:89:f4:3b:50:e4:77:24:b3:
         65:a3:04:d9:83:85:1a:e1:a8:ef:fe:bd:37:8c:c5:34:84:41:
         5d:0f:c0:d3:92:4c:13:48:3d:7b:52:4d:0c:f8:dd:8a:5a:e4:
         41:68:9f:b6:a4:41:a0:e3:be:48:31:17:33:30:61:ce:2e:7e:
         d9:35:6d:1d:fc:12:5d:2a:6a:96:24:6d:5d:25:95:f0:eb:98:
         18:64:77:25:da:b7:e7:dd:2f:10:f4:0b:e5:d1:70:ae:ce:62:
         60:a1:7f:e5:16:0b:97:a9:ff:48:0d:ce:ff:08:61:9c:4d:9d:
         e2:4c:57:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:55 2026 by rpki-client