Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203233363530.roa
File:                     3130332e34352e3136302e302f32322d3234203d3e203233363530.roa (raw, json)
Hash identifier:          5vDH9oXyvZFVLta643HUjvAzH/iKOO6cTp5A9CH3zlk=
Subject key identifier:   24:1D:35:B1:04:CC:55:BB:57:C5:25:65:AD:A3:D8:67:9D:B7:4A:41
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       7BE0400CAC3096FF25E65162CE8D6C295131EA4A
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203233363530.roa
Signing time:             Mon 28 Sep 2026 01:00:34 +0000
ROA not before:           Mon 28 Sep 2026 00:55:34 +0000
ROA not after:            Mon 27 Sep 2027 01:00:34 +0000
asID:                     23650
IP address blocks:        103.45.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 11:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e0:40:0c:ac:30:96:ff:25:e6:51:62:ce:8d:6c:29:51:31:ea:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:34 2026 GMT
            Not After : Sep 27 01:00:34 2027 GMT
        Subject: CN=241D35B104CC55BB57C52565ADA3D8679DB74A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:90:dd:53:f5:f2:91:01:30:ae:36:54:b0:bf:
                    28:50:d1:7a:a3:6d:84:d2:04:b2:62:15:1e:a9:ae:
                    b5:92:70:d6:55:f4:61:88:e4:e9:e3:98:bb:2e:dd:
                    a4:90:a0:e5:41:d6:fe:a7:5d:a5:56:1f:47:60:8a:
                    95:72:1a:1c:b0:a2:90:7d:78:99:0d:ef:47:a9:cd:
                    a0:7e:f9:67:27:f0:3c:32:79:a2:60:a6:66:cf:9e:
                    7c:cd:66:ea:47:5f:6f:06:85:be:04:5e:a6:4c:4d:
                    8f:6c:95:06:95:e2:c1:81:a0:12:e7:8c:09:04:2e:
                    46:ac:e2:31:ac:7d:58:5c:6c:0f:28:f0:f3:ff:ea:
                    fb:ae:11:83:af:c1:2d:94:99:5b:ae:fe:99:03:4d:
                    20:a8:87:06:26:18:22:da:39:03:f8:65:9a:bb:c8:
                    8a:0c:85:2b:63:a5:7f:bf:7c:fb:af:33:bb:2f:52:
                    c0:d3:67:33:c7:32:cd:75:80:42:ce:e0:6b:73:2e:
                    9d:57:67:a2:ee:e2:0f:dc:19:10:08:8b:4f:02:1e:
                    c3:2b:a7:e9:10:5f:70:b5:75:c8:91:c5:84:a4:ab:
                    60:ac:3e:80:78:92:7b:c0:bb:9b:0e:c6:fe:ef:c3:
                    f7:23:76:56:df:74:72:66:67:eb:ab:c8:30:de:8a:
                    75:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1D:35:B1:04:CC:55:BB:57:C5:25:65:AD:A3:D8:67:9D:B7:4A:41
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:94:e8:1b:53:22:14:96:9b:c5:75:9b:e8:1a:8d:05:d6:92:
         b3:1e:24:ff:5a:31:12:32:b9:af:43:d1:60:57:c0:20:20:47:
         e0:ba:42:93:a3:43:40:87:57:ae:78:1c:93:c8:66:90:fa:ba:
         6c:06:cb:16:32:dd:67:43:aa:97:db:12:1e:25:c1:e7:c9:ea:
         a5:b2:19:e4:28:64:b5:d6:64:dc:7b:79:a8:b9:42:e0:e1:1e:
         c5:a8:da:c2:0c:37:0e:37:c4:be:5f:4b:86:0b:14:87:bf:1c:
         62:e2:fd:80:fb:3b:a5:56:05:0a:f1:6f:db:2f:55:a8:b8:cb:
         76:13:ed:4e:de:9c:18:e4:77:10:fa:02:40:72:a2:9b:b3:bc:
         8c:18:71:30:e5:27:89:8c:b1:af:ff:01:c2:82:92:65:d7:29:
         7b:91:ef:84:89:c7:c1:61:b6:12:25:4a:9d:ae:dc:72:0d:e7:
         c3:23:34:a1:dc:e9:c0:86:a8:48:b9:83:05:fb:58:e5:39:8d:
         db:27:ce:ba:26:34:2e:8f:d3:b2:56:81:27:49:a5:d9:c9:18:
         b4:2c:e4:93:e9:af:9a:8a:c6:32:12:f9:09:d6:fc:f4:0d:d8:
         c5:df:3b:4e:db:47:a0:cb:7c:d5:f1:a5:8e:c9:89:bb:08:d8:
         7a:c9:8f:13
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUe+BADKwwlv8l5lFizo1sKVEx6kowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD
MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzRaFw0yNzA5MjcwMTAwMzRaMDMxMTAvBgNV
BAMTKDI0MUQzNUIxMDRDQzU1QkI1N0M1MjU2NUFEQTNEODY3OURCNzRBNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJkN1T9fKRATCuNlSwvyhQ0Xqj
bYTSBLJiFR6prrWScNZV9GGI5OnjmLsu3aSQoOVB1v6nXaVWH0dgipVyGhywopB9
eJkN70epzaB++Wcn8DwyeaJgpmbPnnzNZupHX28Ghb4EXqZMTY9slQaV4sGBoBLn
jAkELkas4jGsfVhcbA8o8PP/6vuuEYOvwS2UmVuu/pkDTSCohwYmGCLaOQP4ZZq7
yIoMhStjpX+/fPuvM7svUsDTZzPHMs11gELO4GtzLp1XZ6Lu4g/cGRAIi08CHsMr
p+kQX3C1dciRxYSkq2CsPoB4knvAu5sOxv7vw/cjdlbfdHJmZ+uryDDeinWrAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUJB01sQTMVbtXxSVlraPYZ523SkEwHwYDVR0j
BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw
QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzMxMzAzMzJlMzQz
NTJlMzEzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAmctoDANBgkqhkiG9w0BAQsFAAOCAQEAnZToG1MiFJabxXWb6BqNBdaS
sx4k/1oxEjK5r0PRYFfAICBH4LpCk6NDQIdXrngck8hmkPq6bAbLFjLdZ0Oql9sS
HiXB58nqpbIZ5ChktdZk3Ht5qLlC4OEexajawgw3DjfEvl9LhgsUh78cYuL9gPs7
pVYFCvFv2y9VqLjLdhPtTt6cGOR3EPoCQHKim7O8jBhxMOUniYyxr/8BwoKSZdcp
e5HvhInHwWG2EiVKna7ccg3nwyM0odzpwIaoSLmDBftY5TmN2yfOuiY0Lo/TslaB
J0ml2ckYtCzkk+mvmorGMhL5Cdb89A3Yxd87TttHoMt81fGljsmJuwjYesmPEw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:42:37 2026 by rpki-client