Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32322d3234203d3e203535393936.roa
File:                     3130332e36312e3138382e302f32322d3234203d3e203535393936.roa (raw, json)
Hash identifier:          jNhjtNHh3p/1fhDtEn5OByokRFjvQRlgQ5Eh7vHh6Vo=
Subject key identifier:   77:4E:0E:46:79:8C:DB:CD:D9:0D:CE:6A:F1:1E:B3:7D:D9:07:6D:F9
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       0CE6139AC57D319F99DFD2FB0721586D0474CC4A
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32322d3234203d3e203535393936.roa
Signing time:             Fri 17 Apr 2026 02:16:04 +0000
ROA not before:           Fri 17 Apr 2026 02:11:04 +0000
ROA not after:            Fri 16 Apr 2027 02:16:04 +0000
asID:                     55996
IP address blocks:        103.61.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 04:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e6:13:9a:c5:7d:31:9f:99:df:d2:fb:07:21:58:6d:04:74:cc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: Apr 17 02:11:04 2026 GMT
            Not After : Apr 16 02:16:04 2027 GMT
        Subject: CN=774E0E46798CDBCDD90DCE6AF11EB37DD9076DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:55:72:18:28:f7:5f:19:3b:45:63:87:5e:
                    0d:fd:55:e5:ac:7c:c2:e4:9a:70:1b:fd:4f:c1:b8:
                    fe:0d:a6:f9:3c:d6:ab:5c:32:1c:72:35:80:ea:67:
                    d0:88:e7:7c:9c:40:d6:89:2a:83:23:9f:2f:ee:15:
                    91:2e:dd:f1:ca:ba:96:c9:40:93:5b:b7:62:ae:c0:
                    f7:2c:a7:39:09:04:58:a6:12:e9:40:0c:98:f9:b4:
                    ad:1d:80:33:a3:53:42:14:5d:ae:4d:37:46:2e:29:
                    11:7d:38:bf:c6:a4:13:7d:e9:ba:0f:a7:aa:89:51:
                    b2:dc:d0:c0:31:22:1f:db:c0:85:7d:64:2f:32:46:
                    f4:8b:04:d6:4b:72:2b:dd:5e:65:b5:52:d6:14:3e:
                    ea:ab:b3:d2:ba:f6:9c:13:b2:c1:69:1e:71:46:50:
                    49:2b:3a:af:97:d9:9d:82:95:e5:e5:1f:75:db:f3:
                    c2:05:8c:e0:82:40:01:f6:5e:ab:49:5a:dd:44:91:
                    63:13:a8:2e:69:6c:ed:72:e2:70:2e:29:8e:5f:86:
                    0c:d1:98:0c:25:f8:1d:37:2f:9a:7b:19:49:c3:58:
                    37:e7:3c:67:fe:e2:f4:61:ec:1a:ed:08:00:ac:8a:
                    c2:dc:f5:32:69:af:5f:79:9f:20:9e:ad:b0:36:df:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4E:0E:46:79:8C:DB:CD:D9:0D:CE:6A:F1:1E:B3:7D:D9:07:6D:F9
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32322d3234203d3e203535393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:f1:09:aa:df:22:1a:3d:61:b7:19:6d:ef:69:24:a9:83:b5:
         96:39:6e:d9:a5:fa:1f:f8:c2:74:64:e6:d8:c5:20:78:a7:71:
         82:fa:3d:5b:fd:3f:e6:38:29:86:5e:e5:da:93:6a:d4:51:c9:
         88:cf:4c:e7:bd:ea:8d:da:66:2e:f9:f9:a2:b9:8f:ce:69:23:
         ee:c9:c7:d1:b5:8c:1b:0b:61:7a:64:ff:05:b7:0c:f4:37:2a:
         15:57:45:f5:59:1f:3a:e4:1a:b0:00:a3:9f:ba:3c:dd:90:53:
         5d:ca:30:a5:55:27:bf:2b:c5:6d:23:16:af:00:83:cd:f2:73:
         b3:14:c7:86:81:84:20:01:2d:cb:e1:90:a1:e5:f9:6d:f3:a2:
         5c:d0:4f:3f:72:68:ae:50:a2:46:89:15:35:16:5f:2f:4f:86:
         35:9f:d1:c2:23:33:3a:c9:1c:a6:19:ce:e8:d5:b0:e5:3f:7a:
         1e:e6:e8:e4:dd:23:87:76:87:d1:e2:00:77:01:ce:eb:f0:e5:
         e6:11:67:86:3b:4c:6a:6a:1d:84:25:f9:68:66:89:a1:76:40:
         96:12:0f:9c:e9:d2:85:b7:70:c0:4c:d7:5f:df:0d:84:df:ec:
         87:56:d7:99:4f:9f:51:a5:03:e6:40:88:a5:c5:0f:16:1c:a9:
         6b:7a:03:05
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUDOYTmsV9MZ+Z39L7ByFYbQR0zEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4
M0FCMjMzOTAeFw0yNjA0MTcwMjExMDRaFw0yNzA0MTYwMjE2MDRaMDMxMTAvBgNV
BAMTKDc3NEUwRTQ2Nzk4Q0RCQ0REOTBEQ0U2QUYxMUVCMzdERDkwNzZERjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtslVyGCj3Xxk7RWOHXg39VeWs
fMLkmnAb/U/BuP4Npvk81qtcMhxyNYDqZ9CI53ycQNaJKoMjny/uFZEu3fHKupbJ
QJNbt2KuwPcspzkJBFimEulADJj5tK0dgDOjU0IUXa5NN0YuKRF9OL/GpBN96boP
p6qJUbLc0MAxIh/bwIV9ZC8yRvSLBNZLcivdXmW1UtYUPuqrs9K69pwTssFpHnFG
UEkrOq+X2Z2CleXlH3Xb88IFjOCCQAH2XqtJWt1EkWMTqC5pbO1y4nAuKY5fhgzR
mAwl+B03L5p7GUnDWDfnPGf+4vRh7BrtCACsisLc9TJpr195nyCerbA23y+3AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUd04ORnmM283ZDc5q8R6zfdkHbfkwHwYDVR0j
BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND
RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8wLzMxMzAzMzJlMzYz
MTJlMzEzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmc9vDANBgkqhkiG9w0BAQsFAAOCAQEAFPEJqt8iGj1htxlt72kkqYO1
ljlu2aX6H/jCdGTm2MUgeKdxgvo9W/0/5jgphl7l2pNq1FHJiM9M573qjdpmLvn5
ormPzmkj7snH0bWMGwthemT/BbcM9DcqFVdF9VkfOuQasACjn7o83ZBTXcowpVUn
vyvFbSMWrwCDzfJzsxTHhoGEIAEty+GQoeX5bfOiXNBPP3JorlCiRokVNRZfL0+G
NZ/RwiMzOskcphnO6NWw5T96Hubo5N0jh3aH0eIAdwHO6/Dl5hFnhjtMamodhCX5
aGaJoXZAlhIPnOnShbdwwEzXX98NhN/sh1bXmU+fUaUD5kCIpcUPFhypa3oDBQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:41 2026 by rpki-client