Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139312e302f32342d3234203d3e203137363233.roa
File:                     3130332e36312e3139312e302f32342d3234203d3e203137363233.roa (raw, json)
Hash identifier:          TG2Rni8hDMJ66+ukpLDwcHRE6AgiUbP7TQZE0LKvZyU=
Subject key identifier:   76:1F:1B:BC:36:5E:12:B5:F5:9B:45:22:D5:63:3D:32:A6:6B:D2:C1
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       56D8B0E8C1B0E6312351FE7D4CCE1F18D4FD3DBE
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139312e302f32342d3234203d3e203137363233.roa
Signing time:             Fri 17 Apr 2026 02:16:05 +0000
ROA not before:           Fri 17 Apr 2026 02:11:05 +0000
ROA not after:            Fri 16 Apr 2027 02:16:05 +0000
asID:                     17623
IP address blocks:        103.61.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d8:b0:e8:c1:b0:e6:31:23:51:fe:7d:4c:ce:1f:18:d4:fd:3d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: Apr 17 02:11:05 2026 GMT
            Not After : Apr 16 02:16:05 2027 GMT
        Subject: CN=761F1BBC365E12B5F59B4522D5633D32A66BD2C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:9f:c6:95:ad:ae:17:6c:35:a1:a0:13:11:
                    4f:47:44:d5:c8:38:e7:df:0b:a1:b6:b9:68:df:27:
                    9c:93:91:3f:88:a5:de:7c:b7:c2:1c:23:a7:f1:a0:
                    cc:38:ea:5c:34:e0:b7:63:79:2b:3c:67:30:09:47:
                    3d:9c:11:9c:1b:8a:f0:b6:70:5c:89:66:b3:4a:4e:
                    41:0d:24:1c:44:62:73:a6:b6:41:e4:a8:b0:e9:55:
                    f6:e3:f9:16:5a:98:72:08:a1:18:0e:66:b7:14:4b:
                    c4:b9:d6:e3:83:37:65:0f:c5:2c:1c:32:39:db:3d:
                    38:9e:75:ce:4c:e9:d9:4b:bb:f8:cc:78:90:9a:c9:
                    59:b6:6e:d1:c9:ba:30:1b:09:19:67:a4:d3:62:62:
                    24:e9:86:11:c3:7b:b1:ab:a8:d4:de:ec:16:07:e1:
                    04:0b:67:39:1d:17:06:05:04:8d:aa:7f:56:b8:61:
                    9d:b0:00:46:9e:cc:aa:5b:3d:23:92:b5:98:a6:a3:
                    8d:89:9e:74:61:41:b5:29:e2:c2:b8:49:92:d9:9c:
                    0d:7c:51:35:f5:25:7e:1a:d3:1d:1c:01:41:9c:af:
                    35:ae:e3:0a:ce:6a:a7:99:91:37:39:86:4d:72:53:
                    e8:d0:94:a1:96:f8:67:e0:c4:6c:66:db:6f:58:1f:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:1F:1B:BC:36:5E:12:B5:F5:9B:45:22:D5:63:3D:32:A6:6B:D2:C1
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3139312e302f32342d3234203d3e203137363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:81:95:7d:2c:ba:e0:23:5e:ec:a5:14:81:d8:b6:cf:d0:01:
         8d:a5:6e:13:15:80:5d:80:9e:e2:7d:a9:a1:46:1a:ff:9d:05:
         8d:99:5a:8d:f9:9a:97:55:55:42:67:db:d3:c8:eb:4d:8a:c8:
         ff:d1:57:db:47:4b:b7:36:83:5c:05:a6:91:c9:1a:e3:4f:cf:
         12:50:5b:e4:b9:c9:f1:51:ae:7b:8a:0b:ef:f9:fb:ad:0c:ab:
         08:be:d7:0b:91:80:fd:cd:16:91:ba:21:29:67:45:eb:0f:14:
         ae:ed:97:90:ea:3c:10:b7:b0:c5:ec:2d:88:03:f8:d6:e3:a1:
         a1:31:88:2a:06:64:12:33:03:48:9c:54:3c:28:b1:00:de:27:
         69:c9:a5:de:2c:00:fc:45:ef:5b:cc:a5:e8:88:07:41:11:00:
         7e:b1:21:0e:6b:e3:28:23:6a:aa:ba:89:95:4f:09:5e:bf:ce:
         e2:f4:ff:5b:ee:8a:dc:de:1b:1e:f1:25:3f:ab:19:e2:0f:64:
         a2:f8:58:5b:43:c2:be:7a:28:37:00:d5:b3:9d:80:33:68:a3:
         23:90:1d:ca:2f:27:9c:76:39:15:9b:d2:3a:5f:73:a0:ea:d7:
         29:0c:02:fc:01:0c:6c:56:b1:1d:99:a0:f6:68:2b:68:49:93:
         ae:7b:ed:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:59 2026 by rpki-client