Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32322d3234203d3e20313331323734.roa
File:                     3130332e34352e3136382e302f32322d3234203d3e20313331323734.roa (raw, json)
Hash identifier:          vIksseSrPKkCjWYn7+CT7Cn4Zjoz56ZoLW71G+bdO8g=
Subject key identifier:   B0:AC:1C:A1:E1:D8:2B:D5:61:C0:6C:BC:F4:E8:45:9B:1E:CE:F4:38
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       51968862E4F65EA5CB9A77C29ED7D82469F19E53
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32322d3234203d3e20313331323734.roa
Signing time:             Fri 17 Apr 2026 01:56:27 +0000
ROA not before:           Fri 17 Apr 2026 01:51:27 +0000
ROA not after:            Fri 16 Apr 2027 01:56:27 +0000
asID:                     131274
IP address blocks:        103.45.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 04:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:96:88:62:e4:f6:5e:a5:cb:9a:77:c2:9e:d7:d8:24:69:f1:9e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: Apr 17 01:51:27 2026 GMT
            Not After : Apr 16 01:56:27 2027 GMT
        Subject: CN=B0AC1CA1E1D82BD561C06CBCF4E8459B1ECEF438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:eb:9e:be:01:16:2d:ab:f2:be:e1:21:ba:
                    1d:08:f5:b2:19:12:2e:38:64:25:c1:12:4b:d3:1d:
                    56:86:2a:5d:42:7f:21:da:f6:7e:59:30:d4:13:69:
                    bf:10:24:4b:bf:31:ed:5a:81:78:1b:6c:24:37:63:
                    8a:c8:42:02:ca:29:5b:0c:23:e1:95:d0:54:3b:65:
                    04:29:f7:c2:c1:c9:57:ba:04:ee:98:d3:47:14:dd:
                    98:a7:40:f3:0d:49:15:50:f7:10:f3:6d:7f:f9:f7:
                    bc:f6:cd:0e:56:2a:11:c2:fc:48:4b:72:42:eb:fc:
                    f7:2a:9d:52:6c:21:9f:38:ce:d0:78:66:a2:6a:5b:
                    8d:31:b8:d1:fd:66:08:2a:3d:85:01:5e:ae:a4:84:
                    df:6b:4a:6a:40:92:56:cd:ee:47:88:72:d2:d8:2a:
                    cc:0f:20:ca:6c:ec:7b:91:eb:9c:7a:a2:11:bb:35:
                    2f:3e:8b:80:c7:7c:87:39:2d:c8:30:8f:cc:ee:5a:
                    36:58:00:73:18:ee:cb:79:24:9d:ab:f3:3c:c1:9b:
                    75:cc:df:eb:10:c7:3b:b8:24:66:0b:73:e1:ba:48:
                    dc:36:85:57:08:75:a5:be:50:84:9b:cc:de:ec:2a:
                    a6:6f:77:91:bd:b4:05:73:40:69:6c:4c:7a:4a:f2:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AC:1C:A1:E1:D8:2B:D5:61:C0:6C:BC:F4:E8:45:9B:1E:CE:F4:38
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136382e302f32322d3234203d3e20313331323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:90:d2:97:7c:8f:22:85:fc:1f:08:dd:0a:1c:9f:6f:d3:e6:
         f8:83:a8:b6:ad:02:34:41:33:6a:d4:d4:e7:4a:c1:85:31:bd:
         22:03:7d:6b:37:cd:f1:96:da:cf:23:84:14:18:28:40:5b:65:
         a0:7d:e1:27:2b:d1:56:4c:20:7f:25:6e:0d:bc:5c:71:c2:ca:
         2c:5b:74:05:51:ff:ca:3e:f9:55:0f:e3:3d:e3:b3:b1:4f:2a:
         b1:9d:77:0c:48:ff:c3:47:b0:4d:be:f3:0f:09:5e:9e:44:85:
         1b:ce:9a:28:04:1e:1a:27:01:6b:3f:c4:a5:bf:fd:36:15:aa:
         9a:a6:7d:26:c3:3d:ad:a7:89:88:87:14:60:5b:29:b0:92:01:
         23:68:e9:6d:1b:76:dd:94:51:9d:b5:27:8a:e7:f1:ab:9c:93:
         7d:32:d8:19:6c:44:27:3d:17:5b:7c:28:f8:5f:5c:da:e8:85:
         4b:aa:5a:08:c2:7f:ce:42:b5:0f:87:35:e7:11:03:a7:3b:16:
         8f:89:57:9e:24:00:91:f8:9e:bb:a0:48:86:59:4e:90:14:65:
         f6:ab:b5:5b:9e:b8:5e:ab:11:32:49:05:cd:50:7c:f7:ea:a5:
         95:d4:f1:40:e7:2c:20:b0:b3:87:d0:f3:4b:21:a9:8e:d7:9e:
         64:ba:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:58 2026 by rpki-client