Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3232342e302f32322d3234203d3e203535393936.roa
File:                     3130332e34352e3232342e302f32322d3234203d3e203535393936.roa (raw, json)
Hash identifier:          bp/JCvjiGiWpK/2NGOEiOHhB3v5TdAMtyDY1+SEohGw=
Subject key identifier:   E7:41:7F:F1:9D:8B:E4:AA:90:C7:E3:B0:D0:66:C6:47:15:17:6D:17
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       2608AA6ECCE2354F72F7E99F0DEDA7FBF0AA3F03
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3232342e302f32322d3234203d3e203535393936.roa
Signing time:             Fri 17 Apr 2026 01:52:51 +0000
ROA not before:           Fri 17 Apr 2026 01:47:51 +0000
ROA not after:            Fri 16 Apr 2027 01:52:51 +0000
asID:                     55996
IP address blocks:        103.45.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 04:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:08:aa:6e:cc:e2:35:4f:72:f7:e9:9f:0d:ed:a7:fb:f0:aa:3f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: Apr 17 01:47:51 2026 GMT
            Not After : Apr 16 01:52:51 2027 GMT
        Subject: CN=E7417FF19D8BE4AA90C7E3B0D066C64715176D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:10:13:a4:30:d9:22:fd:24:55:09:d0:0d:
                    0f:d0:65:70:14:a1:58:20:5a:5a:fd:cc:84:d9:54:
                    14:f9:6a:d5:d0:1e:0e:24:28:ec:ff:73:5f:32:0a:
                    11:73:af:c4:a2:d5:0e:29:b9:41:89:3b:7b:e7:01:
                    22:d2:97:20:86:68:08:50:63:95:54:45:6b:75:b6:
                    e7:3a:66:c9:b1:22:20:ed:71:fa:75:37:2b:d1:e4:
                    55:b9:fc:cc:46:23:52:d6:a5:81:68:b6:38:41:64:
                    7c:1e:ee:ec:ff:36:de:bc:d0:b6:0f:c2:8f:dc:db:
                    b4:93:82:da:6a:8e:c9:0f:b9:99:f3:32:f4:34:5a:
                    b1:56:cc:ef:0f:87:34:5d:20:44:96:ba:ec:7d:0d:
                    10:d1:d1:68:ba:a4:9a:57:e0:3e:8e:d8:8f:4a:92:
                    58:17:e1:37:e5:8f:a2:9d:24:7e:52:ea:a8:5d:d7:
                    92:34:89:63:7c:ea:52:ed:f7:8f:de:43:20:02:f9:
                    13:0c:9f:22:10:cf:c3:a3:45:a5:a2:f4:0a:8c:74:
                    e7:1a:6d:53:c1:7f:b0:c0:53:45:b4:f2:d3:dc:ee:
                    05:63:9f:9c:5e:63:02:18:cc:bc:04:61:ca:11:b4:
                    ba:49:79:1a:eb:b5:51:2a:ee:b6:b2:c7:bd:bc:21:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:41:7F:F1:9D:8B:E4:AA:90:C7:E3:B0:D0:66:C6:47:15:17:6D:17
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3232342e302f32322d3234203d3e203535393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:f7:89:84:ae:e6:e5:5a:66:cf:85:43:01:21:ed:96:ed:f2:
         a6:49:98:f7:39:80:7a:75:56:19:ca:7a:f4:7a:86:74:d3:c6:
         f6:1a:ed:f2:81:47:cf:f4:bf:ce:78:e6:a5:7c:87:a6:73:b2:
         d4:94:78:5b:03:ed:c5:92:b7:b4:3f:c0:f7:e4:0c:c7:7f:9f:
         94:ed:b8:78:e3:34:f6:80:de:d7:a5:38:ca:51:ad:d2:2e:28:
         cb:02:f1:86:0d:d2:17:12:df:8e:b4:61:8e:f9:9c:2e:ac:cf:
         54:36:33:ae:da:60:d4:64:61:42:63:d8:5d:06:2c:9d:0a:59:
         c6:74:d9:c2:16:c9:0a:6d:7e:9d:55:bd:01:93:9f:9b:a1:d9:
         4f:f8:c4:63:f5:23:6e:ce:1b:00:5b:54:29:49:5c:8a:b0:43:
         8d:ba:61:6e:59:cd:55:01:83:20:4c:71:96:6c:6c:d9:86:18:
         19:21:35:86:b0:0d:4c:0d:5b:7b:34:d1:f6:c7:14:9d:e1:a7:
         95:66:71:cc:94:5c:47:d0:0b:fe:fa:85:58:ca:15:21:1e:26:
         e9:e6:6b:ec:0c:18:a2:0c:d4:4b:ef:19:52:fb:5b:fe:c4:3f:
         ce:5b:01:c8:8a:1e:9d:7d:f9:eb:91:55:31:17:0c:fc:49:23:
         9f:59:3e:47
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJgiqbsziNU9y9+mfDe2n+/CqPwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4
M0FCMjMzOTAeFw0yNjA0MTcwMTQ3NTFaFw0yNzA0MTYwMTUyNTFaMDMxMTAvBgNV
BAMTKEU3NDE3RkYxOUQ4QkU0QUE5MEM3RTNCMEQwNjZDNjQ3MTUxNzZEMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVthATpDDZIv0kVQnQDQ/QZXAU
oVggWlr9zITZVBT5atXQHg4kKOz/c18yChFzr8Si1Q4puUGJO3vnASLSlyCGaAhQ
Y5VURWt1tuc6ZsmxIiDtcfp1NyvR5FW5/MxGI1LWpYFotjhBZHwe7uz/Nt680LYP
wo/c27STgtpqjskPuZnzMvQ0WrFWzO8PhzRdIESWuux9DRDR0Wi6pJpX4D6O2I9K
klgX4Tflj6KdJH5S6qhd15I0iWN86lLt94/eQyAC+RMMnyIQz8OjRaWi9AqMdOca
bVPBf7DAU0W08tPc7gVjn5xeYwIYzLwEYcoRtLpJeRrrtVEq7rayx728IQNrAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU50F/8Z2L5KqQx+Ow0GbGRxUXbRcwHwYDVR0j
BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND
RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8wLzMxMzAzMzJlMzQz
NTJlMzIzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmct4DANBgkqhkiG9w0BAQsFAAOCAQEAxfeJhK7m5Vpmz4VDASHtlu3y
pkmY9zmAenVWGcp69HqGdNPG9hrt8oFHz/S/znjmpXyHpnOy1JR4WwPtxZK3tD/A
9+QMx3+flO24eOM09oDe16U4ylGt0i4oywLxhg3SFxLfjrRhjvmcLqzPVDYzrtpg
1GRhQmPYXQYsnQpZxnTZwhbJCm1+nVW9AZOfm6HZT/jEY/Ujbs4bAFtUKUlcirBD
jbphblnNVQGDIExxlmxs2YYYGSE1hrANTA1bezTR9scUneGnlWZxzJRcR9AL/vqF
WMoVIR4m6eZr7AwYogzUS+8ZUvtb/sQ/zlsByIoenX3565FVMRcM/Ekjn1k+Rw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:38 2026 by rpki-client