Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39332e302f32342d3234203d3e20313337373938.roa
File:                     3130332e3131362e39332e302f32342d3234203d3e20313337373938.roa (raw, json)
Hash identifier:          9d+lRc3syWnDz4wiGDHxChmXSaUYpnC0IvPfXA9lVX8=
Subject key identifier:   21:5E:F6:87:28:21:72:25:04:AA:15:82:C2:90:AA:22:EB:98:11:DB
Certificate issuer:       /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial:       16E8D674341728F269EACEE0DC4A727788A3CB0E
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39332e302f32342d3234203d3e20313337373938.roa
Signing time:             Thu 16 Apr 2026 08:42:50 +0000
ROA not before:           Thu 16 Apr 2026 08:37:50 +0000
ROA not after:            Thu 15 Apr 2027 08:42:50 +0000
asID:                     137798
IP address blocks:        103.116.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e8:d6:74:34:17:28:f2:69:ea:ce:e0:dc:4a:72:77:88:a3:cb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
        Validity
            Not Before: Apr 16 08:37:50 2026 GMT
            Not After : Apr 15 08:42:50 2027 GMT
        Subject: CN=215EF6872821722504AA1582C290AA22EB9811DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:45:ab:13:6b:00:90:f6:4b:f6:c0:c4:25:
                    6b:22:57:9a:25:b3:08:87:76:bd:27:0a:f6:79:5a:
                    7f:4b:94:75:1f:21:a0:51:a7:3f:06:1d:56:27:e1:
                    02:6e:33:ea:99:c4:a4:25:be:67:8c:0c:57:3a:5c:
                    28:69:80:67:75:40:1d:76:7f:21:be:ef:b6:0a:b8:
                    de:ca:66:7b:00:2d:14:c1:ea:38:12:4d:5d:61:bb:
                    54:13:b2:7a:40:ef:2e:d0:59:aa:c3:16:95:3d:fc:
                    29:14:9c:fc:a8:9c:b8:14:15:50:6b:84:71:06:1a:
                    b0:89:6c:19:a0:54:59:7c:6f:10:31:62:26:1b:6d:
                    a7:3d:f8:0b:5d:54:dc:23:d5:b5:10:ce:2e:5a:27:
                    4e:f4:be:df:dc:b7:a7:1a:38:ba:e8:1b:77:bf:6e:
                    d1:f8:9b:c1:a9:4a:33:96:83:0c:ba:08:64:56:de:
                    03:9a:8a:08:a7:be:73:4e:4a:ce:61:1b:2b:a4:96:
                    28:e5:63:56:b1:b7:34:6c:93:3a:4c:4c:d6:62:46:
                    4e:97:0b:a1:a5:90:a8:2e:38:4d:b6:ea:1e:0b:e5:
                    cf:16:18:31:60:99:ec:19:15:64:8d:16:e2:2e:2e:
                    cc:68:71:9d:14:8a:6c:e7:5f:9e:41:5d:9f:57:c5:
                    2e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5E:F6:87:28:21:72:25:04:AA:15:82:C2:90:AA:22:EB:98:11:DB
            X509v3 Authority Key Identifier:
                keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39332e302f32342d3234203d3e20313337373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:81:ec:7c:10:cd:e5:04:af:5d:10:4b:fc:73:b9:cd:9c:2d:
         e8:f1:3f:37:13:00:5f:d6:5d:b9:ad:e7:3c:47:4d:16:0f:d1:
         cf:96:dd:66:4b:42:13:aa:6c:2d:80:f8:d6:0d:b0:ac:15:85:
         0b:0f:2a:33:7c:75:06:8f:b6:08:b5:af:46:36:1b:1b:70:79:
         ea:53:6c:f3:84:53:a7:2a:9f:b1:57:37:f1:af:2e:57:fc:a6:
         f7:5c:4e:9a:3e:53:1e:dd:fa:db:e6:3f:37:a1:1c:01:a4:45:
         ae:0a:0c:4d:e7:3a:df:f2:f4:69:ed:3c:78:c3:ac:c3:61:9d:
         98:58:4e:ce:23:e5:a3:71:a2:92:15:76:05:82:f6:f1:58:e1:
         d1:84:5a:73:cf:c6:d9:55:18:4d:54:64:18:d4:b1:de:22:82:
         f6:9f:03:50:c0:e3:40:5e:af:56:a3:98:cf:0a:30:2c:bc:17:
         e7:b9:4e:b9:33:fe:eb:af:99:e5:62:5b:41:68:c0:7a:f8:ae:
         47:ca:e7:7c:10:80:01:ce:62:67:6c:e2:21:c6:fa:6c:f2:73:
         05:f4:a2:ae:12:98:a5:74:cb:59:54:7a:ff:7c:c0:1a:5b:82:
         c7:e9:f8:20:ab:ac:60:16:02:ca:6b:0e:d4:79:70:de:bb:08:
         36:bf:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:11 2026 by rpki-client