Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39352e302f32342d3234203d3e20313337373938.roa
File:                     3130332e3131362e39352e302f32342d3234203d3e20313337373938.roa (raw, json)
Hash identifier:          P2ZxBmtPFWEBt4Pwk93uVEQqXj9pm4PzwGuM9glx5xY=
Subject key identifier:   1E:BD:A6:EB:24:E8:AF:75:42:DF:D5:C6:28:D6:8B:43:49:6E:2B:29
Certificate issuer:       /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
Certificate serial:       5D60B5D4B9BF628A9255C09815AF216364114E6D
Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39352e302f32342d3234203d3e20313337373938.roa
Signing time:             Thu 16 Apr 2026 08:42:50 +0000
ROA not before:           Thu 16 Apr 2026 08:37:50 +0000
ROA not after:            Thu 15 Apr 2027 08:42:50 +0000
asID:                     137798
IP address blocks:        103.116.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:60:b5:d4:b9:bf:62:8a:92:55:c0:98:15:af:21:63:64:11:4e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6
        Validity
            Not Before: Apr 16 08:37:50 2026 GMT
            Not After : Apr 15 08:42:50 2027 GMT
        Subject: CN=1EBDA6EB24E8AF7542DFD5C628D68B43496E2B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:8a:9e:96:64:c6:bd:99:80:21:41:1d:31:
                    ee:13:48:2b:18:61:70:88:0e:8b:7b:51:f5:05:c6:
                    a7:cd:72:f5:8e:6e:e2:cd:bf:34:ab:6a:9e:c7:82:
                    ee:ae:6c:b1:0e:9d:8d:e4:eb:44:3b:3b:12:97:a1:
                    db:9f:66:ef:a0:bd:13:71:f5:0c:bc:57:11:38:ef:
                    8b:12:98:4b:c8:37:c1:9b:3e:3c:42:23:95:ef:4f:
                    d3:a2:c3:86:91:73:89:b7:2c:53:28:a3:3e:c1:c8:
                    08:40:57:1b:29:df:ea:37:65:17:90:b4:db:35:c9:
                    0f:c5:60:56:af:a6:3b:95:c3:61:4c:55:fd:39:6b:
                    ed:e2:d4:32:7c:6d:8a:09:ba:cb:d0:37:c4:53:14:
                    c9:64:5c:e5:12:48:49:f7:4b:55:27:53:54:f8:f2:
                    0c:ef:8f:82:64:57:dd:17:89:e2:da:46:02:ec:37:
                    b1:73:f5:6b:89:c3:3b:60:97:0b:81:17:21:af:d9:
                    1c:16:0d:24:da:34:12:f3:19:db:f7:4c:48:ed:b9:
                    03:87:ab:af:2a:9c:76:c1:4d:d7:70:02:6f:c9:1a:
                    8e:2f:af:59:c3:58:cc:70:42:5a:a4:0c:a4:45:2d:
                    7d:75:cb:64:3a:9c:07:c8:89:5b:e8:f8:77:24:c7:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BD:A6:EB:24:E8:AF:75:42:DF:D5:C6:28:D6:8B:43:49:6E:2B:29
            X509v3 Authority Key Identifier:
                keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/3130332e3131362e39352e302f32342d3234203d3e20313337373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:6d:da:35:38:71:a9:be:07:88:83:76:ff:94:16:99:c0:32:
         43:9a:36:e8:85:9f:aa:f0:5e:f8:c8:a0:4b:21:5e:b0:57:00:
         8c:a3:d2:af:e2:4a:7e:ba:25:fb:88:f7:d3:69:73:2a:4c:38:
         54:60:4f:ae:7b:d0:38:a0:8e:84:91:a3:05:73:99:f7:d5:9c:
         b6:58:f6:99:2d:41:46:3b:24:b7:87:3e:e9:64:66:cf:f2:99:
         13:c9:c8:93:8a:61:57:c2:29:40:be:b7:01:70:7c:e9:2f:c2:
         fb:4d:41:88:bf:b2:56:59:37:aa:e0:21:56:08:b5:dd:4d:df:
         8d:b4:1c:e6:19:fb:e0:11:23:3c:35:44:45:01:80:e5:df:d1:
         10:01:8a:5e:a0:6c:43:a4:8f:49:7d:93:55:8d:40:ca:c0:46:
         21:06:df:bf:c6:fb:c8:6e:02:73:4a:10:3d:c4:22:81:f2:0f:
         0c:6d:d9:39:86:d0:5a:a5:5a:b0:3a:0c:dd:bd:b8:1f:fa:d0:
         d1:ee:28:47:9e:1a:98:e9:d0:3d:56:26:bd:bc:c8:c5:73:fb:
         6e:09:2c:92:ed:da:1b:5d:70:00:98:28:65:06:c7:df:1a:5b:
         2e:71:6e:c0:fe:31:36:99:dd:0b:dc:b2:87:f3:8d:68:d7:c9:
         00:24:74:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:16 2026 by rpki-client