Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39322e302f32322d3232203d3e20313337373938.roa
File:                     3130332e3131362e39322e302f32322d3232203d3e20313337373938.roa (raw, json)
Hash identifier:          muZm4Lu17G/ZM+qKMSL130v9+JH9hDOCY3KgSGZHoow=
Subject key identifier:   8D:43:26:3B:5E:5E:51:5E:99:BB:DB:73:42:42:0D:CC:59:06:60:30
Certificate issuer:       /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial:       7417708E7894AA7AB876BE9E6362B5054845CA23
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39322e302f32322d3232203d3e20313337373938.roa
Signing time:             Thu 16 Apr 2026 08:42:50 +0000
ROA not before:           Thu 16 Apr 2026 08:37:50 +0000
ROA not after:            Thu 15 Apr 2027 08:42:50 +0000
asID:                     137798
IP address blocks:        103.116.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:17:70:8e:78:94:aa:7a:b8:76:be:9e:63:62:b5:05:48:45:ca:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
        Validity
            Not Before: Apr 16 08:37:50 2026 GMT
            Not After : Apr 15 08:42:50 2027 GMT
        Subject: CN=8D43263B5E5E515E99BBDB7342420DCC59066030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2c:e6:47:e0:bc:c2:1e:c5:cc:99:ae:a0:64:
                    eb:4f:11:dc:dc:b3:f4:87:3e:bf:9d:7f:9b:df:0f:
                    52:68:cf:ab:ce:57:f3:de:40:31:2c:a7:38:08:e9:
                    0d:a8:69:95:de:45:c3:5c:71:20:b4:76:4c:6e:89:
                    d6:b9:98:61:5a:93:66:f6:69:7c:6d:cb:63:a8:07:
                    9d:27:5b:aa:c8:83:32:a4:2b:11:12:6d:a0:26:8d:
                    82:c9:cc:21:d2:9e:45:ce:93:18:0a:e4:4a:ff:38:
                    53:1f:61:a0:1c:57:f8:c0:1e:c8:e7:bd:33:45:7c:
                    b9:52:8d:3a:3d:26:6b:fa:e4:77:2d:2f:f5:be:a1:
                    d9:84:19:21:26:60:ec:f2:09:39:6b:43:d5:64:28:
                    93:0b:b4:29:30:e3:ec:85:a6:be:db:e8:a2:22:15:
                    d6:bf:b7:b9:78:fb:47:28:10:da:55:a9:c7:bb:8b:
                    7e:34:56:3c:53:5d:b7:97:2e:10:dd:dd:32:5b:61:
                    0a:8a:74:73:d2:c1:5c:37:9f:a2:25:74:31:29:91:
                    58:77:5f:cf:5f:2f:e4:b9:34:40:52:08:b6:21:8e:
                    17:78:8f:e9:d1:22:da:6d:fe:b7:f9:11:f3:5d:b9:
                    de:aa:a3:ee:41:60:c1:67:7e:7d:43:36:b9:75:0a:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:43:26:3B:5E:5E:51:5E:99:BB:DB:73:42:42:0D:CC:59:06:60:30
            X509v3 Authority Key Identifier:
                keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39322e302f32322d3232203d3e20313337373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:7c:ac:db:25:94:87:37:86:d2:36:b9:0d:ed:a1:0a:cc:40:
         d8:b0:38:36:89:1d:9c:aa:5c:4b:f4:ab:46:9a:ac:4d:4d:93:
         60:0c:8a:b6:7a:65:1b:65:62:e4:0f:d8:40:d4:1f:7c:6b:58:
         64:bb:15:23:f1:a7:39:1f:e9:1d:08:28:80:73:ca:bf:c4:ae:
         e7:8a:be:2f:34:6a:75:94:79:e5:66:98:f8:e7:b4:08:6d:42:
         21:ba:de:fe:6a:f7:88:32:2d:83:44:90:06:3c:ba:94:e9:83:
         25:7f:6f:04:29:f3:2d:7a:0a:a1:18:70:a2:c0:b1:1c:c4:8e:
         19:a5:ef:51:89:5a:80:68:94:6c:46:a6:07:cb:75:17:1b:d1:
         c0:8a:74:c0:81:4f:c9:6a:94:89:08:1c:5e:b0:c2:04:12:a4:
         a8:e4:6e:ea:a7:01:fa:1f:1e:b1:81:cb:0c:40:1c:21:19:69:
         f8:3b:78:e4:7e:de:0c:e8:28:6b:92:0e:b4:2f:41:ea:af:48:
         0d:62:23:df:56:39:aa:71:1f:a6:72:76:a1:a7:b6:dc:a1:8d:
         aa:31:f7:81:41:12:99:a5:b0:31:73:4e:05:54:ac:17:08:94:
         6e:0f:f4:d3:79:56:47:a8:89:1f:d9:d1:af:f6:59:da:46:57:
         59:b4:95:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:09 2026 by rpki-client