Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32342d3234203d3e203137363231.roa
File:                     3130332e36312e3139302e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier:          D8vAMsYHz9QyfNzBwYL5rop21dJJJmq2XMDyEt9KEx8=
Subject key identifier:   BB:10:68:9C:83:D5:7A:DA:86:5E:EA:1C:D9:7C:A9:FD:8C:18:E0:90
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       50F279F22F8F754832CA19958E44A1B5457FE916
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32342d3234203d3e203137363231.roa
Signing time:             Fri 17 Apr 2026 02:16:04 +0000
ROA not before:           Fri 17 Apr 2026 02:11:04 +0000
ROA not after:            Fri 16 Apr 2027 02:16:04 +0000
asID:                     17621
IP address blocks:        103.61.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f2:79:f2:2f:8f:75:48:32:ca:19:95:8e:44:a1:b5:45:7f:e9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: Apr 17 02:11:04 2026 GMT
            Not After : Apr 16 02:16:04 2027 GMT
        Subject: CN=BB10689C83D57ADA865EEA1CD97CA9FD8C18E090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:8c:ac:08:7c:52:d8:69:72:8b:43:e9:4d:
                    3b:24:54:5b:5c:84:04:c0:7a:48:2e:ef:1c:aa:d1:
                    b7:40:be:85:a8:06:22:f5:c5:fc:36:e0:d3:f1:3f:
                    c3:d4:4f:ef:ac:b6:de:b8:4f:e0:24:54:97:37:62:
                    da:8d:b1:29:2e:47:97:e6:c1:d9:7a:71:eb:94:7b:
                    af:6e:af:a0:4c:10:0f:97:f9:14:8d:6d:5a:43:70:
                    f8:8f:cb:d8:97:87:18:e2:ae:27:13:b4:89:d2:23:
                    85:27:dc:14:0c:6e:37:12:ff:44:6a:b9:af:53:db:
                    e6:a9:fe:35:18:67:ff:cf:3f:69:96:41:25:48:9a:
                    dc:51:de:f1:76:0a:e7:66:e8:35:7a:e7:0e:d7:e8:
                    a0:6c:8e:7a:39:d0:dc:04:58:b4:41:07:12:5e:12:
                    c1:9f:95:7b:8e:15:62:c9:86:d7:c2:a6:b2:84:6d:
                    56:f5:00:e4:01:45:5b:46:38:9d:df:3c:31:f7:a4:
                    af:17:cc:f5:a6:51:f9:2e:a0:bc:63:b1:53:6b:68:
                    b6:79:0d:5e:e1:b7:4b:cc:a9:4d:78:e1:cb:2d:ec:
                    7e:c7:5c:79:d4:60:3a:6e:c2:10:f1:97:24:5d:75:
                    d8:f1:93:f7:96:d6:b6:e7:45:ff:6c:3f:14:3d:d4:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:10:68:9C:83:D5:7A:DA:86:5E:EA:1C:D9:7C:A9:FD:8C:18:E0:90
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139302e302f32342d3234203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:e9:1a:e9:89:ec:56:95:b5:af:03:80:13:9e:4f:83:c7:db:
         d5:b7:d2:de:69:cc:ae:bf:db:6f:b9:97:5f:64:0f:c0:15:95:
         1d:be:4d:6d:a3:00:a3:0a:a5:25:1b:29:92:2d:7c:03:27:18:
         8a:6a:5b:fb:b4:54:cd:52:f3:d4:92:2f:96:c4:84:cd:72:bd:
         16:64:15:cf:f4:96:78:8c:53:a4:0d:06:48:20:da:92:69:2e:
         26:ba:24:93:38:16:3b:a5:ca:ed:62:cc:1f:4e:ae:d2:78:d4:
         04:94:15:da:96:e2:5d:00:07:e4:12:25:e3:90:9d:36:04:bc:
         25:ef:d4:84:01:05:82:35:a3:29:7a:8d:59:af:97:94:36:ec:
         9a:1f:cd:ad:e5:94:34:21:71:fd:25:74:22:95:4b:10:ce:cf:
         18:0d:29:00:7e:39:ea:6c:78:8b:d5:5a:ce:4e:c8:3d:08:92:
         59:9d:a7:de:ad:f8:c7:c8:32:4b:21:1c:cd:e8:bb:c6:cd:49:
         f9:d7:f3:67:06:1c:a8:ea:61:bf:49:23:13:c7:1c:af:e4:01:
         39:ee:76:e9:02:4d:75:46:e8:87:ec:21:d5:73:5d:69:86:65:
         5a:7a:4d:45:58:9c:36:bf:bc:6b:e4:ba:95:04:4f:f2:cf:e4:
         29:31:14:4a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUUPJ58i+PdUgyyhmVjkShtUV/6RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4
M0FCMjMzOTAeFw0yNjA0MTcwMjExMDRaFw0yNzA0MTYwMjE2MDRaMDMxMTAvBgNV
BAMTKEJCMTA2ODlDODNENTdBREE4NjVFRUExQ0Q5N0NBOUZEOEMxOEUwOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVR4ysCHxS2Glyi0PpTTskVFtc
hATAekgu7xyq0bdAvoWoBiL1xfw24NPxP8PUT++stt64T+AkVJc3YtqNsSkuR5fm
wdl6ceuUe69ur6BMEA+X+RSNbVpDcPiPy9iXhxjiricTtInSI4Un3BQMbjcS/0Rq
ua9T2+ap/jUYZ//PP2mWQSVImtxR3vF2Cudm6DV65w7X6KBsjno50NwEWLRBBxJe
EsGflXuOFWLJhtfCprKEbVb1AOQBRVtGOJ3fPDH3pK8XzPWmUfkuoLxjsVNraLZ5
DV7ht0vMqU144cst7H7HXHnUYDpuwhDxlyRdddjxk/eW1rbnRf9sPxQ91HgTAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUuxBonIPVetqGXuoc2Xyp/YwY4JAwHwYDVR0j
BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND
RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8wLzMxMzAzMzJlMzYz
MTJlMzEzOTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGc9vjANBgkqhkiG9w0BAQsFAAOCAQEAV+ka6YnsVpW1rwOAE55Pg8fb
1bfS3mnMrr/bb7mXX2QPwBWVHb5NbaMAowqlJRspki18AycYimpb+7RUzVLz1JIv
lsSEzXK9FmQVz/SWeIxTpA0GSCDakmkuJrokkzgWO6XK7WLMH06u0njUBJQV2pbi
XQAH5BIl45CdNgS8Je/UhAEFgjWjKXqNWa+XlDbsmh/NreWUNCFx/SV0IpVLEM7P
GA0pAH456mx4i9Vazk7IPQiSWZ2n3q34x8gySyEczei7xs1J+dfzZwYcqOphv0kj
E8ccr+QBOe526QJNdUboh+wh1XNdaYZlWnpNRVicNr+8a+S6lQRP8s/kKTEUSg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:09 2026 by rpki-client