Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134342e302f32322d3232203d3e2030.roa
File:                     3130332e34342e3134342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          klFN41A0uvAJdjRg1oKMM4/qQe8qoMbFRL2E1I1JvbY=
Subject key identifier:   7F:E1:00:D6:82:9D:6E:B0:1E:42:3F:B8:15:3D:C9:A2:ED:91:C6:5A
Certificate issuer:       /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial:       0553750B28D299F10D2DFABC3B829AFC2CABD38B
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134342e302f32322d3232203d3e2030.roa
Signing time:             Wed 15 Apr 2026 09:15:43 +0000
ROA not before:           Wed 15 Apr 2026 09:10:43 +0000
ROA not after:            Wed 14 Apr 2027 09:15:43 +0000
asID:                     0
IP address blocks:        103.44.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:53:75:0b:28:d2:99:f1:0d:2d:fa:bc:3b:82:9a:fc:2c:ab:d3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
        Validity
            Not Before: Apr 15 09:10:43 2026 GMT
            Not After : Apr 14 09:15:43 2027 GMT
        Subject: CN=7FE100D6829D6EB01E423FB8153DC9A2ED91C65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:70:7f:73:8d:0d:c9:5e:62:86:96:a0:1e:
                    58:9c:6e:46:0e:99:c3:ed:18:0c:a1:a1:fd:d2:1c:
                    06:00:68:24:28:61:68:bd:8a:cf:08:c4:c1:52:c6:
                    e8:ee:54:63:04:a2:ef:a8:b4:0a:39:d0:7d:c6:2a:
                    d6:dc:9a:14:f7:4c:20:4e:18:14:c0:ab:3e:ea:d0:
                    65:ce:59:a0:01:2a:3a:93:ec:d1:2d:8a:77:06:6a:
                    79:37:2c:5b:65:72:2b:80:c0:5e:70:6c:ba:68:da:
                    b9:0b:24:da:f9:cc:72:96:0f:df:ea:57:69:51:16:
                    31:b2:9c:dd:98:f8:dd:e4:85:a6:e1:da:7b:4b:5c:
                    dd:e3:f8:61:bb:67:82:1c:83:02:b6:ff:9e:25:00:
                    d0:e9:24:c0:f0:b0:bc:1f:93:ac:63:86:0c:22:21:
                    48:c1:ca:23:0a:c7:dd:74:34:c3:4f:44:82:43:06:
                    70:1c:f9:3c:3e:5d:d3:71:8a:eb:46:d8:81:1c:68:
                    d5:04:a8:a6:ad:ac:8b:c7:ba:4d:20:68:44:18:06:
                    94:4d:f6:09:be:7c:d3:b0:1e:56:b5:15:40:77:a4:
                    9d:8a:84:22:fe:77:bd:1b:bf:ef:4d:26:b0:29:02:
                    50:31:ae:27:8b:32:14:d4:af:ed:3f:fd:33:4f:30:
                    e5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E1:00:D6:82:9D:6E:B0:1E:42:3F:B8:15:3D:C9:A2:ED:91:C6:5A
            X509v3 Authority Key Identifier:
                keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134342e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:cc:fa:55:43:93:34:7c:6d:52:3d:8d:e1:bc:5f:9f:8f:a4:
         62:83:8b:8e:35:2b:d4:0e:70:09:f0:96:74:ed:8a:5d:37:48:
         92:21:ee:dc:62:f0:b4:73:1f:b2:1e:fc:31:ba:99:ea:32:19:
         e6:fd:c3:46:43:f4:21:ba:3f:e0:c9:13:13:b9:5a:c9:92:b0:
         92:21:7c:d8:9e:d0:0b:ea:e7:98:0e:a0:f3:63:fb:89:9c:36:
         ce:36:be:20:60:10:08:05:c4:fc:7f:0c:cc:c1:9a:a9:24:0a:
         de:7d:ab:65:c1:7e:9b:bc:e2:fc:28:d6:49:06:09:b9:40:66:
         3a:f9:15:9e:8c:c7:c6:98:3c:e5:1f:d9:64:f0:30:96:f9:78:
         62:8c:6d:34:f7:ba:9d:8e:9c:43:e9:bd:57:68:e6:55:0d:56:
         28:dc:8b:99:0b:37:dd:44:fe:41:f2:64:4a:b0:c0:09:6e:e6:
         d4:4b:b5:7a:5e:15:8f:9a:79:c9:11:14:ac:5b:86:cd:0b:47:
         1f:a8:01:02:26:60:9a:72:65:0e:d3:d9:bf:8c:68:24:26:e8:
         54:57:81:f3:4b:a4:7a:2b:a1:b2:1a:48:26:55:f9:cc:89:bf:
         25:84:b2:76:f4:6a:4d:88:8a:5c:f4:04:9b:fd:dd:ff:79:57:
         25:1e:6e:49
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUBVN1CyjSmfENLfq8O4Ka/Cyr04swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD
NUQyMTA3NTAeFw0yNjA0MTUwOTEwNDNaFw0yNzA0MTQwOTE1NDNaMDMxMTAvBgNV
BAMTKDdGRTEwMEQ2ODI5RDZFQjAxRTQyM0ZCODE1M0RDOUEyRUQ5MUM2NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUTnB/c40NyV5ihpagHlicbkYO
mcPtGAyhof3SHAYAaCQoYWi9is8IxMFSxujuVGMEou+otAo50H3GKtbcmhT3TCBO
GBTAqz7q0GXOWaABKjqT7NEtincGank3LFtlciuAwF5wbLpo2rkLJNr5zHKWD9/q
V2lRFjGynN2Y+N3khabh2ntLXN3j+GG7Z4IcgwK2/54lANDpJMDwsLwfk6xjhgwi
IUjByiMKx910NMNPRIJDBnAc+Tw+XdNxiutG2IEcaNUEqKatrIvHuk0gaEQYBpRN
9gm+fNOwHla1FUB3pJ2KhCL+d70bv+9NJrApAlAxrieLMhTUr+0//TNPMOXLAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUf+EA1oKdbrAeQj+4FT3Jou2RxlowHwYDVR0j
BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF
MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NDAwMzIyLzAvMzEzMDMzMmUzNDM0
MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcs
kDANBgkqhkiG9w0BAQsFAAOCAQEAPMz6VUOTNHxtUj2N4bxfn4+kYoOLjjUr1A5w
CfCWdO2KXTdIkiHu3GLwtHMfsh78MbqZ6jIZ5v3DRkP0Ibo/4MkTE7layZKwkiF8
2J7QC+rnmA6g82P7iZw2zja+IGAQCAXE/H8MzMGaqSQK3n2rZcF+m7zi/CjWSQYJ
uUBmOvkVnozHxpg85R/ZZPAwlvl4YoxtNPe6nY6cQ+m9V2jmVQ1WKNyLmQs33UT+
QfJkSrDACW7m1Eu1el4Vj5p5yREUrFuGzQtHH6gBAiZgmnJlDtPZv4xoJCboVFeB
80ukeiuhshpIJlX5zIm/JYSydvRqTYiKXPQEm/3d/3lXJR5uSQ==
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:39 2026 by rpki-client