Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4515.roa
File:                     AS4515.roa (raw, json)
Hash identifier:          ZaYffZhkzBHitK6L4Gql685Dxz+15/s2YPjwtddG4aE=
Subject key identifier:   C5:06:F8:7E:80:A4:F6:8E:9B:04:2B:B2:D2:2F:2D:A1:6F:D1:38:DF
Certificate issuer:       /CN=1FFF263C64163BC58514B539C10375CCB553D75E
Certificate serial:       18D5C7C2123614BCB07EDBD798181344F134B932
Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4515.roa
Signing time:             Thu 10 Sep 2026 02:30:36 +0000
ROA not before:           Thu 10 Sep 2026 02:25:36 +0000
ROA not after:            Thu 09 Sep 2027 02:30:36 +0000
asID:                     4515
IP address blocks:        59.153.172.0/24 maxlen: 24
                          103.5.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 12:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d5:c7:c2:12:36:14:bc:b0:7e:db:d7:98:18:13:44:f1:34:b9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E
        Validity
            Not Before: Sep 10 02:25:36 2026 GMT
            Not After : Sep  9 02:30:36 2027 GMT
        Subject: CN=C506F87E80A4F68E9B042BB2D22F2DA16FD138DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:c0:cb:a9:13:83:1a:b4:55:21:36:a6:e8:
                    4a:81:ac:a3:cc:c0:03:a6:25:00:d3:8a:98:e6:c6:
                    4f:4a:1a:76:fe:4c:74:69:13:7c:55:6e:da:fe:cf:
                    32:7b:b3:00:10:06:61:b3:2a:17:bb:42:7c:43:5d:
                    a6:52:44:00:d7:c8:59:b1:0a:c6:5e:c3:10:c6:eb:
                    0c:1a:9a:c3:78:8b:17:07:c1:06:74:9f:b6:51:31:
                    a7:6a:a7:33:ab:fc:70:ae:5e:ef:fe:66:fe:ad:46:
                    30:dd:04:b6:56:da:62:5f:dc:54:cb:ac:d9:44:1c:
                    5c:e1:07:67:d1:02:cc:6c:ee:76:70:6c:0e:4f:36:
                    fd:43:a3:35:dc:f4:2f:a8:59:a8:c5:f6:fc:fc:0c:
                    3a:03:f2:38:24:c1:10:8e:7d:0e:7c:c1:62:f0:27:
                    b4:ac:98:a7:53:5e:3b:e1:b8:ae:41:e1:28:05:99:
                    50:0f:73:96:e0:b2:b3:28:65:12:79:79:ab:9f:10:
                    1d:07:c0:41:70:1f:48:a7:0a:7c:16:c2:9a:31:1b:
                    b4:4a:85:ab:c1:b1:eb:a9:c5:49:06:20:74:0b:05:
                    f9:91:cb:0e:fc:13:c8:fe:94:7d:21:4e:6a:8d:07:
                    f3:a2:25:97:d3:b6:6b:ca:72:42:af:4a:b3:38:cc:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:06:F8:7E:80:A4:F6:8E:9B:04:2B:B2:D2:2F:2D:A1:6F:D1:38:DF
            X509v3 Authority Key Identifier:
                keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/AS4515.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.172.0/24
                  103.5.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:d7:74:48:5b:87:91:41:9f:ed:63:09:e9:11:ea:df:8c:
         56:0c:8f:be:6e:5c:ab:9e:91:a5:f9:cf:c1:b8:ea:f7:ba:9e:
         10:7c:34:7e:b1:7e:71:33:60:1c:2d:6d:46:bc:d4:14:a7:7e:
         fb:8d:66:a4:04:45:ba:45:18:83:b1:33:d0:7d:af:7f:e9:79:
         0d:8a:28:87:47:a3:82:1f:32:48:5b:be:b2:01:45:44:3b:74:
         75:47:5c:3f:24:4b:78:8d:26:48:3f:65:cd:1d:84:90:f5:7a:
         1b:06:2a:49:67:85:eb:16:e9:28:86:1c:68:04:6c:b3:f0:94:
         36:4c:e0:aa:0d:63:55:3b:45:c0:17:8b:1a:95:47:9d:8f:f6:
         a6:b0:df:3b:1d:c5:6d:d2:39:30:a6:8d:0a:ae:bb:2a:de:e0:
         a1:96:ff:4b:2c:29:47:0e:2f:cc:2a:04:6a:16:09:14:0a:25:
         d5:d1:fa:5b:11:74:fc:e7:c5:ea:e5:40:be:81:82:f7:af:f5:
         8f:a1:6c:0e:0f:23:cb:3c:ab:f0:c5:a1:ae:02:5a:51:b8:bc:
         0f:cd:f9:3d:ed:d3:0e:10:55:06:0f:15:01:0a:26:32:f7:98:
         a4:b0:cd:af:71:14:4f:9b:c9:4d:0e:fc:db:ff:77:8e:f8:5a:
         18:c5:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:31:05 2026 by rpki-client