Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e2034383131.roa
File:                     3130332e34352e3136392e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier:          yWZKo1hp64v2PLkp3sSG/wUnGoPVcrhGEBsHbC21KKs=
Subject key identifier:   F9:3C:79:EB:0E:23:59:59:67:1F:20:58:C3:13:EC:7D:07:7C:DE:B6
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       33FB57297A683BD38BBDDA05FD1DCC44DFCEA5C0
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e2034383131.roa
Signing time:             Wed 16 Sep 2026 06:53:37 +0000
ROA not before:           Wed 16 Sep 2026 06:48:37 +0000
ROA not after:            Wed 15 Sep 2027 06:53:37 +0000
asID:                     4811
IP address blocks:        103.45.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fb:57:29:7a:68:3b:d3:8b:bd:da:05:fd:1d:cc:44:df:ce:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: Sep 16 06:48:37 2026 GMT
            Not After : Sep 15 06:53:37 2027 GMT
        Subject: CN=F93C79EB0E235959671F2058C313EC7D077CDEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:db:4a:11:ae:15:9b:51:ab:eb:34:ff:a3:
                    09:16:8c:d6:5a:a1:67:81:fe:f1:fd:a7:b6:90:9f:
                    5a:26:c1:c5:39:73:28:9c:bb:22:9e:3b:cc:5e:69:
                    31:f2:bf:10:29:50:c5:bf:f5:d2:a8:08:62:17:97:
                    2c:3e:15:80:14:b0:57:7c:36:58:c9:d3:09:0f:84:
                    91:d6:d5:9f:50:57:b2:21:c1:36:85:54:57:07:c1:
                    86:32:03:a9:70:86:74:4b:2c:e3:ff:96:24:44:90:
                    73:12:86:37:a7:17:44:bb:1a:3d:6c:2e:81:be:39:
                    4b:27:af:39:59:40:73:41:19:b7:4a:01:ed:bf:7e:
                    cc:5e:3f:34:40:f0:20:b6:43:09:ae:d3:60:c0:1e:
                    15:f6:49:9e:81:c7:6e:96:f2:56:46:c3:c0:dc:97:
                    56:1a:83:b9:fd:59:1a:13:f6:7a:48:7d:5e:ff:9b:
                    b9:cf:98:11:0d:9d:23:38:69:94:ae:e8:ab:99:d0:
                    13:6a:37:cf:03:ff:11:d1:2d:ce:ff:76:b1:f7:86:
                    5c:2c:84:20:20:1a:e6:4f:44:94:cc:9f:19:83:3e:
                    8b:8a:7b:e0:8c:fb:16:b3:e7:7c:9d:e3:54:16:c3:
                    93:8b:b0:0f:e3:41:5f:b9:fe:9c:54:df:69:62:27:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:79:EB:0E:23:59:59:67:1F:20:58:C3:13:EC:7D:07:7C:DE:B6
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e2034383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:59:f5:10:0e:3a:26:54:7b:05:ba:1f:8f:65:9b:d4:36:
         02:ac:f3:a8:a5:63:3b:b8:37:78:d6:62:a5:2c:ba:c8:fa:c2:
         16:59:88:cb:39:b3:68:f8:5b:bb:eb:e7:49:2a:eb:f2:33:af:
         fb:1d:df:3a:7e:d8:05:ec:13:ef:a4:1d:e7:25:66:5f:0a:8f:
         46:c3:61:2b:40:48:ae:2d:fe:91:4e:9d:ef:29:bc:c1:a7:eb:
         bf:06:c0:7d:87:63:f6:c5:29:e0:c5:a5:6b:f7:14:b2:e0:97:
         04:36:b2:c2:9c:39:f2:fd:ef:99:d3:fa:55:6b:14:b8:25:94:
         8a:12:3f:6d:f7:84:33:2b:98:8f:ec:36:3b:3f:68:e0:f5:c6:
         ae:30:e3:59:57:d3:49:96:9e:6f:45:67:e8:3f:b3:b2:8c:30:
         00:4d:d1:75:75:c7:3f:20:a8:b5:31:b7:4b:8a:24:4b:7b:5e:
         9a:74:75:89:99:37:e2:c0:9e:9f:00:ae:f1:86:0c:ea:28:47:
         8f:8d:06:1c:53:2c:10:e7:d1:ed:04:b5:ab:6f:d5:8c:a5:12:
         81:2a:3e:10:12:3c:22:92:c3:7e:23:0a:88:4f:ca:42:48:a2:
         6c:01:6b:54:59:b7:fa:36:d1:8d:83:6b:22:71:d2:ed:b9:f6:
         af:79:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:24:44 2026 by rpki-client