Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e32332e3136312e302f32342d3234203d3e203435313130.roa
File:                     3130332e32332e3136312e302f32342d3234203d3e203435313130.roa (raw, json)
Hash identifier:          c9vEheG5N1+PEClCcbwGe6LLo4Bd5VfI0yAs8ZlivL4=
Subject key identifier:   2F:0B:B6:4C:08:2E:FF:DB:07:CB:31:FC:06:21:76:FC:31:42:DD:79
Certificate issuer:       /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
Certificate serial:       20D1E419E774B96587695F56BEA8F08803BC4D36
Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e32332e3136312e302f32342d3234203d3e203435313130.roa
Signing time:             Fri 17 Apr 2026 11:00:36 +0000
ROA not before:           Fri 17 Apr 2026 10:55:36 +0000
ROA not after:            Fri 16 Apr 2027 11:00:36 +0000
asID:                     45110
IP address blocks:        103.23.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d1:e4:19:e7:74:b9:65:87:69:5f:56:be:a8:f0:88:03:bc:4d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE
        Validity
            Not Before: Apr 17 10:55:36 2026 GMT
            Not After : Apr 16 11:00:36 2027 GMT
        Subject: CN=2F0BB64C082EFFDB07CB31FC062176FC3142DD79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:eb:3c:09:c7:fa:2b:86:c3:2f:3d:4b:b6:f6:
                    1a:90:2b:10:ea:50:4d:25:9a:41:e4:d7:c9:76:0a:
                    57:38:55:a6:a5:e6:a9:89:df:74:ce:15:19:96:09:
                    fe:a0:9a:52:13:8d:30:e8:50:97:a2:a8:04:52:41:
                    bd:5d:81:18:8a:1f:74:00:b5:35:4a:f6:8b:f2:5a:
                    f3:08:86:9d:f2:da:b1:11:76:9a:10:d8:38:69:93:
                    89:0b:ff:54:49:9e:a9:2d:96:c6:95:7b:90:86:84:
                    b2:57:1f:b6:0d:97:30:89:d5:13:01:94:87:7c:c6:
                    1b:b2:27:f9:2b:57:74:c9:63:f8:e0:44:c8:80:9c:
                    29:4e:1a:42:84:0f:b0:b1:9b:77:dc:5f:45:2e:31:
                    60:ae:4e:46:fd:31:bc:b8:80:4c:ee:d7:db:e0:d7:
                    ac:2e:f0:2d:d1:e9:9c:70:e5:94:97:3c:11:9e:a6:
                    48:dd:29:62:7d:a9:b7:b0:f3:ea:f3:e2:29:33:92:
                    a4:df:99:8d:a8:d3:54:e6:7b:f6:42:78:0d:ae:83:
                    e4:19:b6:c6:81:98:94:28:45:11:d9:9b:14:bf:c4:
                    81:20:a3:f9:f2:1c:56:f6:f7:63:01:b7:47:b7:9c:
                    a5:e0:fa:ea:93:be:d0:ef:c9:cd:7b:40:fa:fc:d9:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0B:B6:4C:08:2E:FF:DB:07:CB:31:FC:06:21:76:FC:31:42:DD:79
            X509v3 Authority Key Identifier:
                keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e32332e3136312e302f32342d3234203d3e203435313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:65:64:36:54:dc:be:08:a0:f5:55:f4:f5:e2:ec:8a:72:
         8a:98:73:6f:07:dd:97:91:0a:e1:15:ea:98:e6:39:2a:62:33:
         d0:65:cf:f6:61:f2:07:9c:13:10:a3:9c:f9:51:1c:28:19:22:
         46:7d:68:f5:68:6c:c1:68:4a:b5:34:d4:81:8d:15:7a:f3:84:
         73:c7:7d:aa:e7:73:2e:03:ec:e2:b2:0d:95:ae:7f:cc:58:d4:
         0c:3e:4f:cb:d5:39:e6:90:cb:ed:9b:43:ed:ea:fc:38:c9:95:
         ce:83:98:10:a4:94:94:82:30:ed:1b:d4:0d:f9:a2:94:00:80:
         a6:49:81:ad:bc:d2:66:ca:32:d2:d8:64:68:ab:2a:e8:55:4d:
         de:38:84:41:1a:67:81:7b:67:cf:00:a3:ce:fe:d4:a5:d8:df:
         c9:d3:85:6a:49:4c:d0:17:2a:f4:54:ae:76:30:b9:c1:8b:76:
         a6:a9:04:ec:a9:65:1d:02:a3:57:42:2c:65:93:15:e2:b5:54:
         24:9b:8b:75:79:38:d1:c9:73:27:b9:e4:80:27:64:df:65:b4:
         18:5c:72:58:d0:6a:17:c5:1b:c6:eb:fb:6c:0f:ed:51:46:a5:
         17:05:90:f6:91:76:a9:fc:ae:46:a6:0a:66:cc:db:9e:4c:60:
         56:48:82:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:22:20 2026 by rpki-client