Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39342e302f32342d3234203d3e20313337373938.roa
File:                     3130332e3131362e39342e302f32342d3234203d3e20313337373938.roa (raw, json)
Hash identifier:          CTEEIolxeEFxbcV2QU7eZmf13XfbhC8EVr+uwwVUjuY=
Subject key identifier:   28:FB:82:AF:62:4D:6F:1F:7D:30:88:F7:68:26:F3:70:4D:5D:CC:C4
Certificate issuer:       /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial:       642DB94D21DC34C559176FC2F0FC21FC1D632D88
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39342e302f32342d3234203d3e20313337373938.roa
Signing time:             Thu 16 Apr 2026 08:42:50 +0000
ROA not before:           Thu 16 Apr 2026 08:37:50 +0000
ROA not after:            Thu 15 Apr 2027 08:42:50 +0000
asID:                     137798
IP address blocks:        103.116.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2d:b9:4d:21:dc:34:c5:59:17:6f:c2:f0:fc:21:fc:1d:63:2d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
        Validity
            Not Before: Apr 16 08:37:50 2026 GMT
            Not After : Apr 15 08:42:50 2027 GMT
        Subject: CN=28FB82AF624D6F1F7D3088F76826F3704D5DCCC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:c6:6e:a4:19:df:bb:cf:1e:52:69:8a:5f:
                    91:5d:66:5f:e0:59:54:de:5b:18:24:a7:2b:90:ce:
                    4d:bb:29:a5:5f:e6:3c:b5:2b:a1:24:d0:22:90:fc:
                    5f:70:b3:d8:e0:cf:cf:7f:fc:4c:ea:48:75:57:a5:
                    e2:7b:fc:dc:d2:c7:e9:f8:33:15:ec:a8:fd:c1:2e:
                    ce:d8:9d:9a:3a:ce:74:35:77:a9:ff:75:ff:7a:62:
                    8e:75:fb:ec:d4:6b:25:91:37:fc:f0:bf:d7:64:5f:
                    f9:f7:0d:ef:0f:6f:8e:b3:b5:eb:b8:1e:91:74:0a:
                    9f:7c:c4:3a:3b:44:7b:c5:3e:14:4a:8d:47:41:6d:
                    38:4f:dd:e5:76:e9:88:31:bc:8f:7a:7b:b6:25:d6:
                    56:1b:e5:30:3e:a2:44:0b:55:76:17:e9:29:19:d0:
                    9b:65:04:61:4a:32:55:31:b1:c3:17:08:2f:14:13:
                    3f:2a:88:6b:80:5c:23:e5:ae:42:d4:6d:35:6b:a5:
                    b9:43:73:73:9a:db:8a:5a:9b:f6:f9:c6:6b:16:e2:
                    ad:d0:71:c2:67:de:36:50:77:09:6f:5f:bc:65:41:
                    8f:ea:25:ba:61:ba:85:86:f6:c5:38:a5:dd:da:6b:
                    d7:85:c8:e2:fc:94:48:b9:49:02:f8:46:a7:19:e7:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FB:82:AF:62:4D:6F:1F:7D:30:88:F7:68:26:F3:70:4D:5D:CC:C4
            X509v3 Authority Key Identifier:
                keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39342e302f32342d3234203d3e20313337373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ed:55:9d:21:2b:e7:e1:4e:87:aa:40:f6:f8:65:f1:fa:31:
         f1:b7:f1:3a:1b:20:ae:5d:94:75:eb:68:2f:5e:b9:d9:62:b4:
         15:a4:76:c2:64:77:7e:ef:ac:ca:2c:3d:a4:8b:6f:ec:01:9a:
         d5:8b:e8:64:f3:9b:07:69:65:76:c6:c7:b7:36:e1:c8:8a:22:
         fa:1e:4d:0b:44:2f:cb:a4:9e:36:53:63:f3:04:94:54:cf:31:
         5f:da:ba:11:bf:6a:2e:8c:cd:4d:42:49:83:0f:0b:25:4a:0f:
         7e:46:0f:11:fb:f8:15:cf:ac:cd:30:73:38:c6:21:ea:f3:63:
         a2:e3:33:9d:46:d1:b8:ee:1c:1a:fc:ca:8e:54:b5:d0:b3:6d:
         a1:e7:3a:ac:dc:d9:ae:1d:54:c8:9f:35:e7:fa:06:a2:b6:eb:
         6f:6c:68:37:a2:ae:1c:94:cd:09:56:80:d4:e0:17:a4:2f:30:
         b0:42:9d:fd:82:53:37:23:a3:74:cd:b7:8e:d4:03:32:5e:e0:
         3e:1c:d4:69:88:90:92:1a:8d:1d:bc:31:57:59:2f:54:8f:54:
         bb:0a:9e:fa:c9:64:24:1d:71:51:a8:3b:b1:89:aa:7a:39:9b:
         3c:87:c9:18:7f:11:82:41:9a:02:74:82:76:a4:dc:64:ce:66:
         eb:2c:8b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:20 2026 by rpki-client