Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034313334.roa
File:                     3130332e36312e3138382e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier:          s9FbvJB5NVjFVCiY2IbPq8YlFW9adXZgqU9IFp6XyWE=
Subject key identifier:   4C:E0:A6:F4:CB:0B:02:86:6D:E9:E2:89:AA:C2:19:85:BA:2F:DF:A7
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       01D5F66F44B25C3D8792368103E21D74E09B5459
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034313334.roa
Signing time:             Fri 17 Apr 2026 02:16:05 +0000
ROA not before:           Fri 17 Apr 2026 02:11:05 +0000
ROA not after:            Fri 16 Apr 2027 02:16:05 +0000
asID:                     4134
IP address blocks:        103.61.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d5:f6:6f:44:b2:5c:3d:87:92:36:81:03:e2:1d:74:e0:9b:54:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: Apr 17 02:11:05 2026 GMT
            Not After : Apr 16 02:16:05 2027 GMT
        Subject: CN=4CE0A6F4CB0B02866DE9E289AAC21985BA2FDFA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b1:a1:2d:13:81:84:89:1f:c7:15:d4:77:1d:
                    69:5a:a8:aa:70:d4:cb:51:fd:77:0e:0e:6a:f3:58:
                    05:c5:3c:ac:9c:83:5f:52:05:2d:b7:16:5a:94:eb:
                    60:e1:12:22:c8:0b:f4:60:40:f6:09:37:0b:f2:7d:
                    4f:bb:63:44:fe:21:97:e9:36:c1:a8:c9:a0:95:2b:
                    e7:fc:b2:a7:bc:09:28:0c:95:13:7a:a8:fa:38:74:
                    d3:4d:2a:ce:29:ad:89:36:5c:ba:c8:06:20:f3:de:
                    3a:4f:b0:57:10:db:46:7a:de:17:d8:7e:2d:a5:05:
                    41:ea:76:d1:3b:3d:79:ea:9b:d7:36:ef:c3:58:73:
                    08:af:f5:93:dd:7d:8b:d5:43:38:00:01:b7:48:2a:
                    20:aa:90:07:12:98:bb:b1:d3:8f:64:ca:83:40:fb:
                    a4:8f:83:01:a0:ee:2f:8a:0f:12:b9:d7:e1:3e:ef:
                    7e:b1:df:dc:6a:08:65:fe:30:02:7b:12:0a:32:48:
                    be:f3:77:fb:55:56:a4:f7:f1:d5:ae:81:7c:9d:14:
                    ce:6d:1c:a0:23:35:38:66:d3:b1:23:27:f7:73:5b:
                    c5:c6:02:2f:62:15:19:4a:ce:df:b2:29:6a:73:e7:
                    e3:36:27:41:29:78:c1:da:71:3e:d7:4f:54:1d:43:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E0:A6:F4:CB:0B:02:86:6D:E9:E2:89:AA:C2:19:85:BA:2F:DF:A7
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32342d3234203d3e2034313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:21:9d:60:07:42:68:83:43:2b:03:c8:b6:0e:0b:82:8d:
         2e:38:25:c0:1c:59:0c:36:a7:10:21:06:55:19:35:ad:ac:df:
         34:d4:7c:1d:41:5b:2c:96:dc:27:72:6c:12:1c:b4:43:06:fa:
         79:ef:de:e4:8c:7d:51:86:ae:f0:ff:61:92:17:1c:b6:37:70:
         e2:7a:95:9b:fc:03:64:97:62:ce:14:cd:bb:72:4b:42:e1:d8:
         d1:8a:ec:8a:4d:33:a5:06:63:59:dd:f8:a5:52:6c:33:86:8f:
         37:42:52:0b:16:5d:80:d7:5e:6f:16:9d:85:51:1c:b0:0f:de:
         4d:c3:3d:76:ad:14:5c:5b:bc:eb:6a:1c:41:29:4c:e7:a0:40:
         13:41:7f:11:2b:9f:a9:01:9a:a5:6f:8a:6e:b1:cf:7d:21:0e:
         60:8c:61:10:4b:70:23:2a:80:e1:24:a5:19:3b:dc:ed:13:ca:
         b3:ec:b7:b5:2d:bb:31:92:eb:0a:cc:46:75:4a:d3:1c:94:70:
         56:99:78:e1:ea:ac:c9:19:fa:32:d8:02:74:ca:dc:76:b7:a2:
         da:e9:fa:1a:d0:84:15:4d:da:31:43:aa:c5:8c:20:72:a3:1e:
         87:7d:bc:8b:ad:ec:1e:79:92:f4:72:7a:17:1d:22:5b:52:67:
         73:dc:66:ad
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUAdX2b0SyXD2HkjaBA+IddOCbVFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4
M0FCMjMzOTAeFw0yNjA0MTcwMjExMDVaFw0yNzA0MTYwMjE2MDVaMDMxMTAvBgNV
BAMTKDRDRTBBNkY0Q0IwQjAyODY2REU5RTI4OUFBQzIxOTg1QkEyRkRGQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUsaEtE4GEiR/HFdR3HWlaqKpw
1MtR/XcODmrzWAXFPKycg19SBS23FlqU62DhEiLIC/RgQPYJNwvyfU+7Y0T+IZfp
NsGoyaCVK+f8sqe8CSgMlRN6qPo4dNNNKs4prYk2XLrIBiDz3jpPsFcQ20Z63hfY
fi2lBUHqdtE7PXnqm9c278NYcwiv9ZPdfYvVQzgAAbdIKiCqkAcSmLux049kyoNA
+6SPgwGg7i+KDxK51+E+736x39xqCGX+MAJ7EgoySL7zd/tVVqT38dWugXydFM5t
HKAjNThm07EjJ/dzW8XGAi9iFRlKzt+yKWpz5+M2J0EpeMHacT7XT1QdQ3anAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUTOCm9MsLAoZt6eKJqsIZhbov36cwHwYDVR0j
BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND
RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzEzMDMzMmUzNjMx
MmUzMTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMxMzMzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGc9vDANBgkqhkiG9w0BAQsFAAOCAQEAPtYhnWAHQmiDQysDyLYOC4KNLjgl
wBxZDDanECEGVRk1razfNNR8HUFbLJbcJ3JsEhy0Qwb6ee/e5Ix9UYau8P9hkhcc
tjdw4nqVm/wDZJdizhTNu3JLQuHY0Yrsik0zpQZjWd34pVJsM4aPN0JSCxZdgNde
bxadhVEcsA/eTcM9dq0UXFu862ocQSlM56BAE0F/ESufqQGapW+KbrHPfSEOYIxh
EEtwIyqA4SSlGTvc7RPKs+y3tS27MZLrCsxGdUrTHJRwVpl44eqsyRn6MtgCdMrc
drei2un6GtCEFU3aMUOqxYwgcqMeh328i63sHnmS9HJ6Fx0iW1Jnc9xmrQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:06 2026 by rpki-client