Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa
File:                     3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (raw, json)
Hash identifier:          d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=
Subject key identifier:   6B:04:0E:7B:11:23:B2:21:EC:44:7E:3C:51:7D:E6:54:58:AB:03:0A
Certificate issuer:       /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial:       0749920B3CA358A546CD39859094408A5E87E75A
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa
Signing time:             Wed 15 Apr 2026 07:22:57 +0000
ROA not before:           Wed 15 Apr 2026 07:17:57 +0000
ROA not after:            Wed 14 Apr 2027 07:22:57 +0000
asID:                     55991
IP address blocks:        103.192.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 01:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:49:92:0b:3c:a3:58:a5:46:cd:39:85:90:94:40:8a:5e:87:e7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
        Validity
            Not Before: Apr 15 07:17:57 2026 GMT
            Not After : Apr 14 07:22:57 2027 GMT
        Subject: CN=6B040E7B1123B221EC447E3C517DE65458AB030A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:21:60:92:ee:c8:d3:1c:92:d6:9a:bf:7b:
                    f6:8b:15:af:c2:46:94:38:ae:46:7d:2a:6e:42:bb:
                    dd:4c:bb:3c:1a:f0:9f:bb:92:4e:86:a2:93:1a:c9:
                    4b:3a:6b:81:4f:df:77:b0:50:e4:1a:db:29:34:e7:
                    77:60:a4:90:0d:e6:a8:33:24:8d:a3:89:da:43:48:
                    e7:1e:dc:11:05:89:72:19:98:96:75:fa:be:08:04:
                    79:7f:be:40:53:1e:97:12:d7:d0:22:7f:2a:6f:ed:
                    7b:5c:3f:8a:a9:41:85:bf:ab:86:72:19:e3:d6:6f:
                    6b:3a:ae:15:8d:db:84:6c:cf:c8:37:22:e7:5a:7d:
                    35:dc:55:d1:59:fa:8d:fa:b9:4d:99:2e:f2:ed:90:
                    cf:fe:cc:73:19:46:d1:b2:8b:70:90:60:2a:3b:ac:
                    9d:af:ea:83:97:f4:71:e4:b1:0d:b1:78:82:6a:7a:
                    22:47:57:8a:1c:e0:ab:44:ce:b3:41:32:e2:09:d9:
                    bc:aa:e0:2a:dd:cc:14:a9:13:81:24:e2:96:c0:c6:
                    79:db:76:9a:5c:6c:39:c4:dd:88:b9:1f:57:90:cf:
                    5e:d3:17:52:ee:cb:a7:3f:c6:64:35:5e:61:de:89:
                    04:c6:7e:26:11:f6:57:72:c3:2d:f9:a5:46:4b:43:
                    5b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:04:0E:7B:11:23:B2:21:EC:44:7E:3C:51:7D:E6:54:58:AB:03:0A
            X509v3 Authority Key Identifier:
                keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:29:51:94:53:c9:85:0e:cf:d2:87:8a:7a:53:c6:cd:4f:7b:
         b5:2b:7b:4b:e4:42:d3:9e:48:18:1f:97:54:d4:d1:7b:f4:1d:
         af:68:7a:b1:46:d5:e7:49:ea:d5:49:2a:58:a7:df:fb:17:bb:
         30:e6:b4:79:ab:84:e5:17:71:6c:90:5b:ef:04:72:bf:a4:5e:
         2e:77:07:bb:d2:8b:24:d4:ba:1f:d7:0f:3c:6f:20:0e:18:20:
         da:c7:c9:7e:7c:71:3e:12:ed:ae:52:55:db:92:af:c5:69:99:
         17:d0:9b:5a:f3:37:5e:3c:1d:1f:da:8e:e2:ba:63:13:4c:0f:
         55:f6:57:46:f8:ba:93:09:ac:4a:79:08:9b:6e:c6:10:46:e9:
         f2:18:3f:dc:80:0e:e5:c3:7f:22:b9:91:15:c3:11:62:a9:81:
         9b:9c:c0:44:76:ed:fb:e7:03:c8:df:24:c5:d4:bd:fc:b2:c9:
         df:3d:80:80:b6:15:c5:0b:97:9d:69:0f:60:de:c6:ca:23:0c:
         6e:a9:68:a6:97:83:d1:8b:86:ce:57:32:72:f2:e6:60:bc:90:
         da:2b:37:9f:89:e2:c7:44:b8:61:9d:ba:65:80:32:51:d3:ce:
         5d:c4:72:a2:8a:ae:24:fb:81:01:3e:82:8d:d9:b2:88:fe:6d:
         f3:85:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:29 2026 by rpki-client