Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203633353637.roa
File:                     3130332e34352e3136302e302f32322d3234203d3e203633353637.roa (raw, json)
Hash identifier:          kKDagzxUBWBS6wwiUbACYjfec79yDbyk3F1rHw6zKLM=
Subject key identifier:   23:7B:30:03:74:D6:17:4E:A7:EE:5A:B9:DE:23:15:05:48:D5:0B:A5
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       7196261BCEC2CE8CDB82B63F6987CC9224A8F89D
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203633353637.roa
Signing time:             Fri 17 Apr 2026 01:42:17 +0000
ROA not before:           Fri 17 Apr 2026 01:37:17 +0000
ROA not after:            Fri 16 Apr 2027 01:42:17 +0000
asID:                     63567
IP address blocks:        103.45.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 02:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:96:26:1b:ce:c2:ce:8c:db:82:b6:3f:69:87:cc:92:24:a8:f8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 17 01:37:17 2026 GMT
            Not After : Apr 16 01:42:17 2027 GMT
        Subject: CN=237B300374D6174EA7EE5AB9DE23150548D50BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:e2:84:52:6b:95:0b:ca:10:29:2f:0a:82:
                    40:e6:49:33:ff:7a:00:96:ad:78:39:38:e4:be:d7:
                    a7:e1:27:3e:b2:35:69:a2:fb:80:db:ef:5a:b1:c6:
                    ce:58:b4:0d:44:e4:5e:04:66:45:24:c1:93:8f:a7:
                    a3:48:e9:df:28:fd:46:46:34:56:9f:59:24:93:23:
                    e1:0a:6e:60:47:9b:5b:78:08:ab:33:df:b7:d3:bb:
                    f4:e7:2d:4f:90:71:6d:af:ea:78:93:9a:db:4f:a9:
                    c3:6b:5e:14:3c:23:e1:fb:42:58:08:ad:65:55:45:
                    9d:0d:8a:f5:9b:1e:a4:6b:a2:c2:1c:db:3c:7a:01:
                    a3:54:70:d0:26:d9:e5:40:43:0e:10:7a:27:21:74:
                    4a:48:7c:0a:7e:84:06:74:38:6e:ce:dc:16:8c:0b:
                    a4:c4:d2:cd:94:bd:d5:2f:f7:0c:b3:78:50:a0:53:
                    e7:3b:44:99:b7:0c:92:d6:a7:8e:3b:39:42:2e:8e:
                    5f:f9:06:12:1c:4b:da:98:62:33:e6:de:59:2a:c8:
                    c1:c1:ed:aa:6a:ad:3e:36:5d:27:18:22:f9:e7:d7:
                    6c:db:04:de:09:15:79:3d:67:06:fa:ab:b1:2e:33:
                    4e:a8:03:60:c1:7a:d0:1d:a0:b1:21:bc:09:f1:3e:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7B:30:03:74:D6:17:4E:A7:EE:5A:B9:DE:23:15:05:48:D5:0B:A5
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:fa:f7:15:7a:8d:2c:d3:e3:10:86:f0:9d:1d:f4:fa:93:7a:
         72:1e:f3:75:2a:b6:86:e1:9a:79:4f:9b:17:00:a9:7c:16:40:
         8d:11:4b:47:db:98:6b:1b:52:ea:6b:34:6b:5e:79:8f:88:dd:
         3a:07:04:97:9b:48:7a:ab:77:2e:23:6c:a6:1c:c5:de:cb:50:
         96:fe:51:0f:c6:32:95:a0:1f:00:54:0f:97:20:02:f0:27:45:
         f4:7b:0c:bb:aa:42:42:de:a8:ff:53:fb:79:55:b2:2f:92:9a:
         3e:93:dc:2c:da:87:67:9e:f2:d7:f4:b7:26:e5:1a:55:09:78:
         70:43:11:08:25:1b:2e:51:56:d3:32:99:09:9e:1a:b1:d7:2f:
         ad:f6:d9:a5:a2:dd:02:7c:11:9f:cb:59:38:77:d0:ec:67:ac:
         b1:ea:ea:ea:92:1f:4c:d3:e0:81:f6:36:e6:d1:9f:63:f1:64:
         c6:fb:1a:8b:12:00:15:48:2b:51:2e:4b:28:50:33:7b:bf:16:
         4d:69:53:dc:05:87:f6:75:8c:9d:09:c4:f3:85:be:a5:5d:88:
         c0:71:fb:01:2c:84:bc:0c:f8:a0:6b:5c:31:4d:66:9c:e1:b2:
         f2:fd:fb:23:bd:fd:57:89:d1:a9:87:42:e6:5b:e5:0d:f2:3f:
         ec:b0:b0:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:36 2026 by rpki-client