Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e203137363231.roa
File:                     3130332e34352e3136392e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          xT+YP3S7N8VZd77vEndeOnWv8pnG4u+pSGtfirA7Ank=
Subject key identifier:   19:3F:8D:52:ED:D0:81:BF:D0:9A:CE:34:8D:16:20:39:C9:65:82:D9
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       7880ED74474D778E8E5F19EDD78E984230E3538D
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e203137363231.roa
Signing time:             Fri 17 Apr 2026 01:56:27 +0000
ROA not before:           Fri 17 Apr 2026 01:51:27 +0000
ROA not after:            Fri 16 Apr 2027 01:56:27 +0000
asID:                     17621
IP address blocks:        103.45.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:80:ed:74:47:4d:77:8e:8e:5f:19:ed:d7:8e:98:42:30:e3:53:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: Apr 17 01:51:27 2026 GMT
            Not After : Apr 16 01:56:27 2027 GMT
        Subject: CN=193F8D52EDD081BFD09ACE348D162039C96582D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:61:aa:b2:ad:f2:a7:21:26:fa:04:c1:8c:
                    ec:e9:35:ac:a7:63:a6:e0:2d:7c:6a:8a:89:7c:ec:
                    27:ee:2f:8c:01:58:a3:c8:b6:56:92:6e:0d:3c:1f:
                    a2:9a:c1:23:e3:68:4d:4d:2a:a8:f6:70:38:b9:b0:
                    b6:51:e4:3a:37:5c:04:75:ec:4b:ee:32:36:47:73:
                    3b:b5:3f:de:c1:82:bc:b9:96:1d:1d:85:84:a1:8e:
                    80:b5:90:15:50:3a:90:b3:54:84:2e:66:96:6a:b0:
                    69:b2:18:9c:2a:49:0a:95:db:9f:10:84:e6:21:53:
                    78:dd:f3:69:09:e2:f0:8a:4c:06:58:a9:06:0a:71:
                    a9:a6:27:b9:e6:13:cb:5c:b7:39:92:99:94:2b:24:
                    b5:b1:04:07:ac:67:f0:22:92:fb:62:05:18:30:e8:
                    d1:7f:a9:3d:36:75:0a:e6:8a:62:64:9c:99:c9:7f:
                    5d:40:e8:f8:be:ce:4e:5d:25:ad:c5:66:19:34:38:
                    52:a0:13:2e:83:78:91:f9:1c:9e:70:77:cd:4d:53:
                    49:c4:37:94:20:0e:f0:0d:d3:28:9f:7c:92:00:68:
                    95:6f:dd:5f:1f:3e:90:e7:4f:4f:0b:8a:2d:0d:83:
                    5c:87:22:46:76:20:e1:67:38:56:09:50:34:ff:34:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3F:8D:52:ED:D0:81:BF:D0:9A:CE:34:8D:16:20:39:C9:65:82:D9
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:89:48:52:4e:f2:04:ba:b6:23:54:3c:3e:68:d3:d3:35:ba:
         bc:f7:ae:83:02:ac:0f:32:91:4c:58:06:9b:05:7a:ab:6f:7c:
         ae:9a:ed:79:c2:1f:29:6f:96:ba:7b:67:dd:64:d4:b3:02:0a:
         d1:2a:44:93:c2:02:27:8f:bb:f2:95:51:8b:a1:c3:c6:93:58:
         e1:c7:aa:43:ce:dd:e7:a0:c4:b8:ce:aa:1d:53:43:27:b3:19:
         63:04:90:ee:ca:c7:87:44:be:37:9c:7f:0c:77:ee:ac:ec:1e:
         29:3b:25:44:f6:c6:57:84:c4:c3:2e:05:93:92:9e:1f:a0:e8:
         42:da:bc:23:c8:82:e4:95:57:d9:cb:1a:f4:77:4e:a7:a1:dd:
         5e:4d:42:4d:b0:8f:26:cc:66:f3:a4:f4:4b:85:05:c9:51:6f:
         96:55:e8:37:dc:37:3f:87:bc:65:e8:05:a6:78:dc:70:ad:6e:
         14:00:28:09:9d:03:57:aa:cf:b0:5d:cb:03:43:d5:a9:7d:b0:
         8f:99:95:09:c1:6c:53:01:6f:56:31:40:e8:bd:ba:6b:c2:93:
         ca:56:fc:12:11:88:8e:f7:08:9b:7a:b6:a1:b5:36:85:e8:69:
         06:b7:d4:7b:bc:c0:ab:2d:a5:b4:c0:c9:2b:c8:4a:19:6e:aa:
         36:27:29:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:42 2026 by rpki-client