Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa
File:                     3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=
Subject key identifier:   68:D8:BF:9C:07:84:70:43:02:DF:21:55:DC:42:4F:5C:CC:8C:79:33
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       1AC2F6D88DE84C085430FA7A073B6856BC962E39
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa
Signing time:             Wed 15 Apr 2026 07:22:57 +0000
ROA not before:           Wed 15 Apr 2026 07:17:57 +0000
ROA not after:            Wed 14 Apr 2027 07:22:57 +0000
asID:                     4837
IP address blocks:        103.192.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 01:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c2:f6:d8:8d:e8:4c:08:54:30:fa:7a:07:3b:68:56:bc:96:2e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Apr 15 07:17:57 2026 GMT
            Not After : Apr 14 07:22:57 2027 GMT
        Subject: CN=68D8BF9C0784704302DF2155DC424F5CCC8C7933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:dc:a6:9d:d2:8c:fa:ad:b3:24:79:7c:d2:
                    4b:7a:5e:18:39:cb:6d:83:ea:91:67:d0:0d:59:e3:
                    ae:0c:6a:00:1f:a8:27:d3:6e:98:56:5a:43:cb:1b:
                    7e:09:e5:a0:80:e6:75:02:7d:82:6f:51:5c:62:a7:
                    6b:40:23:b0:c6:d9:66:b2:e8:bb:92:c4:42:21:7a:
                    86:c7:57:84:b2:1e:ae:a1:f9:ab:78:cc:2e:33:82:
                    2e:0d:ca:0c:33:61:98:28:8c:b3:f0:57:61:39:ea:
                    68:18:fa:a1:b9:24:5f:7d:b5:88:7f:05:a7:03:ab:
                    bc:8e:5c:07:60:35:26:1b:e7:02:89:d3:b7:76:07:
                    3c:25:f1:d5:31:63:39:6d:87:ca:7b:80:12:ea:df:
                    fa:dc:21:61:91:41:78:43:ac:96:35:70:57:0b:46:
                    52:7d:d8:42:ab:81:6c:39:c6:6d:9f:b9:be:a8:6d:
                    1a:34:1d:1b:fa:6a:61:45:db:1a:ea:ed:61:58:b6:
                    a7:42:57:fe:18:06:f3:8e:b4:8e:71:37:b9:b8:9a:
                    24:f7:9c:6a:f8:37:21:b2:de:02:77:dd:55:2c:58:
                    26:b7:58:e3:f5:f0:19:2f:cc:2a:07:20:df:a7:fb:
                    53:48:f1:f5:04:f0:5a:d9:b4:6e:5f:21:14:12:6f:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D8:BF:9C:07:84:70:43:02:DF:21:55:DC:42:4F:5C:CC:8C:79:33
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:ce:e5:53:3e:d2:8b:63:e6:5c:4d:79:17:38:80:50:b1:62:
         85:c5:68:57:14:75:5b:55:04:9a:b3:40:b2:6f:d7:fa:b0:83:
         1d:dc:e4:f2:b0:ba:54:c3:92:83:40:40:e0:6a:32:9d:be:1a:
         0e:0c:49:a9:a6:5b:6c:0c:32:45:d7:dd:95:1e:c3:4e:cd:0c:
         6f:4b:b5:0a:2f:e3:fd:3c:0a:7c:3a:31:fa:91:c2:09:d8:ac:
         a6:08:e7:01:45:84:13:55:b7:87:78:59:40:bd:7c:21:05:7f:
         b5:18:ae:3e:c0:ed:a7:bc:43:b3:ce:b8:dc:17:7f:c1:97:b4:
         55:47:fa:b0:73:ff:17:4f:14:fa:5c:9c:ed:79:d2:32:6c:fe:
         6b:52:a4:9d:a3:63:03:0c:6a:fd:ef:f9:24:fb:74:71:35:f0:
         91:38:eb:5b:50:29:34:8d:06:01:d2:da:7c:a7:95:70:9c:0d:
         d2:76:8d:56:67:f3:68:18:7e:ba:b6:6a:1d:16:5c:42:30:f5:
         1c:f2:34:5f:30:c6:13:8a:27:89:73:04:00:4e:2e:6f:f2:22:
         86:29:e7:77:5a:1a:36:eb:6f:5c:0a:27:2c:5d:30:11:6b:f8:
         f3:96:33:1a:8e:5d:e6:9c:3e:13:7f:e1:f6:f3:18:36:46:1e:
         9e:91:29:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:26 2026 by rpki-client