Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa
File:                     3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (raw, json)
Hash identifier:          +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=
Subject key identifier:   E6:75:36:B3:D1:16:54:EF:43:BA:45:DE:56:30:86:49:4F:B9:FB:87
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       292DEA667D308EFE5C68D2F114CFB98150042C5A
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa
Signing time:             Wed 15 Apr 2026 07:22:56 +0000
ROA not before:           Wed 15 Apr 2026 07:17:56 +0000
ROA not after:            Wed 14 Apr 2027 07:22:56 +0000
asID:                     55991
IP address blocks:        103.192.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 01:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2d:ea:66:7d:30:8e:fe:5c:68:d2:f1:14:cf:b9:81:50:04:2c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Apr 15 07:17:56 2026 GMT
            Not After : Apr 14 07:22:56 2027 GMT
        Subject: CN=E67536B3D11654EF43BA45DE563086494FB9FB87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:99:48:2b:9f:08:6f:a6:ee:16:d3:ba:3e:
                    3c:de:69:85:8f:ac:3b:2c:ef:b7:85:57:63:9c:a4:
                    3b:4c:bc:db:77:4f:ff:47:52:fa:d3:1f:fa:0c:07:
                    a7:41:3a:70:2b:16:20:46:f4:c2:6c:e8:89:ac:e1:
                    99:c0:e4:97:10:38:24:70:16:4c:25:bb:08:9c:8f:
                    b6:fd:a9:74:2f:56:09:fa:1f:29:98:39:20:29:99:
                    26:22:08:1b:43:3f:f6:a8:01:92:7c:4c:a9:2d:74:
                    ae:61:a1:97:50:7e:e4:5f:1c:a6:5f:62:04:6b:54:
                    12:cc:a4:1f:94:de:be:a4:2f:85:70:84:8a:56:f5:
                    11:5d:b3:7e:e4:06:f3:ab:f5:f3:8c:b8:d3:e7:6e:
                    3a:2f:5c:e4:e0:6d:cc:30:7b:be:22:e4:0c:a1:45:
                    a5:9d:70:cc:8e:e8:0b:08:d3:3b:03:82:d1:6b:15:
                    48:43:97:b5:e1:28:81:aa:94:e9:7f:71:1c:8f:05:
                    79:bc:fa:e8:fd:7f:98:43:aa:0f:61:01:90:55:4c:
                    00:ad:8d:57:cc:0d:51:03:c6:c9:ae:33:f1:da:d2:
                    43:ab:d6:10:33:71:7a:fd:50:0f:68:67:a6:cd:c5:
                    6f:51:aa:87:98:f4:8c:85:02:42:54:f3:18:39:f2:
                    56:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:75:36:B3:D1:16:54:EF:43:BA:45:DE:56:30:86:49:4F:B9:FB:87
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:d2:94:89:d4:9a:ee:37:3f:14:8c:ff:e4:d5:37:72:cc:04:
         56:f7:b6:75:4c:d1:c1:b4:d5:8c:00:f1:73:84:29:aa:08:17:
         1c:71:a2:88:d6:e8:8c:7d:71:ac:0a:96:7b:e9:dc:4a:2c:4b:
         35:76:da:e4:a3:5c:f4:d5:dc:7c:b6:47:d4:15:0c:08:6f:58:
         a5:e3:74:31:9c:74:ee:2b:fe:b8:49:52:1f:12:9b:27:71:63:
         df:28:e1:dc:25:7b:6a:d7:32:c6:33:5b:19:97:c3:dc:34:73:
         53:be:49:d6:8a:6b:cf:fa:47:b4:a9:84:61:25:33:be:17:41:
         68:90:a7:3e:9b:22:1a:fe:dd:d2:01:59:21:34:68:72:a3:38:
         ed:10:7a:e0:37:e7:29:c8:1c:ec:6e:ff:e6:58:d4:d6:6e:9a:
         0a:79:a7:7f:50:0c:ed:64:d8:b2:9b:d3:ec:16:d2:b4:4a:e6:
         21:e6:7c:6e:a4:38:17:f8:64:7d:71:a1:93:a4:dc:9e:0b:bd:
         27:f3:31:c1:13:a1:d9:ec:e4:af:d4:43:67:99:bb:30:5b:56:
         6f:77:87:dd:94:af:f7:c4:72:4a:01:80:00:34:dd:03:9c:25:
         88:72:a9:4c:2b:4b:3b:c2:1e:15:20:d5:84:3f:11:90:15:45:
         e4:6b:fb:7c
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUKS3qZn0wjv5caNLxFM+5gVAELFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC
QTcwMTlCQjAeFw0yNjA0MTUwNzE3NTZaFw0yNzA0MTQwNzIyNTZaMDMxMTAvBgNV
BAMTKEU2NzUzNkIzRDExNjU0RUY0M0JBNDVERTU2MzA4NjQ5NEZCOUZCODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmXJlIK58Ib6buFtO6PjzeaYWP
rDss77eFV2OcpDtMvNt3T/9HUvrTH/oMB6dBOnArFiBG9MJs6Ims4ZnA5JcQOCRw
Fkwluwicj7b9qXQvVgn6HymYOSApmSYiCBtDP/aoAZJ8TKktdK5hoZdQfuRfHKZf
YgRrVBLMpB+U3r6kL4VwhIpW9RFds37kBvOr9fOMuNPnbjovXOTgbcwwe74i5Ayh
RaWdcMyO6AsI0zsDgtFrFUhDl7XhKIGqlOl/cRyPBXm8+uj9f5hDqg9hAZBVTACt
jVfMDVEDxsmuM/Ha0kOr1hAzcXr9UA9oZ6bNxW9RqoeY9IyFAkJU8xg58lYLAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU5nU2s9EWVO9DukXeVjCGSU+5+4cwHwYDVR0j
BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD
QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC8zMTMwMzMyZTMx
MzkzMjJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNTM5MzkzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmfA0DANBgkqhkiG9w0BAQsFAAOCAQEAotKUidSa7jc/FIz/5NU3
cswEVve2dUzRwbTVjADxc4QpqggXHHGiiNbojH1xrAqWe+ncSixLNXba5KNc9NXc
fLZH1BUMCG9YpeN0MZx07iv+uElSHxKbJ3Fj3yjh3CV7atcyxjNbGZfD3DRzU75J
1oprz/pHtKmEYSUzvhdBaJCnPpsiGv7d0gFZITRocqM47RB64DfnKcgc7G7/5ljU
1m6aCnmnf1AM7WTYspvT7BbStErmIeZ8bqQ4F/hkfXGhk6Tcngu9J/MxwROh2ezk
r9RDZ5m7MFtWb3eH3ZSv98RySgGAADTdA5wliHKpTCtLO8IeFSDVhD8RkBVF5Gv7
fA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:41:19 2026 by rpki-client