Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31372e302f32342d3234203d3e20313332383833.roa
File:                     3130332e34332e31372e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier:          Y4bLyzOvB8vpCyqmm35FxBPPUZj7MRs9fRKs/nZam7U=
Subject key identifier:   2D:53:31:1F:58:38:61:89:25:56:A8:70:DF:A3:4D:0B:B2:69:11:C8
Certificate issuer:       /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial:       493D7C85F187F83DEB80B25B65C5C8BE6DD45233
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31372e302f32342d3234203d3e20313332383833.roa
Signing time:             Wed 08 Apr 2026 05:59:10 +0000
ROA not before:           Wed 08 Apr 2026 05:54:10 +0000
ROA not after:            Wed 07 Apr 2027 05:59:10 +0000
asID:                     132883
IP address blocks:        103.43.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3d:7c:85:f1:87:f8:3d:eb:80:b2:5b:65:c5:c8:be:6d:d4:52:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
        Validity
            Not Before: Apr  8 05:54:10 2026 GMT
            Not After : Apr  7 05:59:10 2027 GMT
        Subject: CN=2D53311F583861892556A870DFA34D0BB26911C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:85:66:6a:b6:b8:38:94:eb:4b:fc:d7:39:
                    e4:13:12:51:a0:33:1a:78:c3:38:75:2c:05:8e:8c:
                    c3:ae:54:e5:43:a8:73:00:5a:c8:60:1b:bd:bf:e3:
                    1a:e2:34:42:11:cb:2c:bf:6c:ad:47:0a:b6:68:e6:
                    44:d7:bb:59:5d:ff:74:12:e4:35:dd:15:81:4a:2f:
                    80:cf:f5:37:8c:8b:81:48:86:82:85:06:c6:0b:70:
                    5c:75:b6:c6:f6:30:12:b6:fc:94:bb:d4:91:6c:17:
                    5b:19:b8:a4:ed:69:39:b3:64:8a:e4:1a:ad:4d:ad:
                    71:6f:fa:88:23:54:06:3e:09:5c:f6:c3:ba:8f:fd:
                    ba:dc:f9:ba:0c:1e:8a:d6:f1:18:a0:0e:49:08:04:
                    f2:36:bb:b5:f4:e8:46:27:1d:93:06:80:83:4d:64:
                    b6:4d:56:e4:87:b0:44:53:33:ca:45:4f:50:9a:d7:
                    b9:24:0a:87:10:b5:16:10:29:b6:bb:08:74:de:cd:
                    4f:5b:30:c7:b7:51:22:80:c9:f7:bf:b5:cc:63:0a:
                    d2:09:a1:ec:62:83:87:64:0d:5c:87:8d:17:fa:13:
                    0b:07:57:36:47:7a:52:79:1d:f3:b5:de:cd:e3:35:
                    83:c3:9e:88:46:4d:93:82:16:4a:45:4a:2f:ce:88:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:53:31:1F:58:38:61:89:25:56:A8:70:DF:A3:4D:0B:B2:69:11:C8
            X509v3 Authority Key Identifier:
                keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31372e302f32342d3234203d3e20313332383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:71:df:5d:ff:75:4b:e0:f0:b0:0e:06:66:6c:c4:1d:1a:31:
         26:9d:ae:ad:ae:e9:d5:2d:18:4b:49:99:bd:97:9a:87:a5:43:
         24:53:a3:31:ab:88:30:56:66:8c:1d:80:a8:b4:29:fb:fd:8e:
         9b:bf:69:ac:5d:98:21:26:40:bf:1b:63:b0:38:45:92:e0:ff:
         1f:e0:2f:d2:dd:5f:8d:85:ae:01:d8:ea:8f:cb:70:3c:88:15:
         04:2f:b9:c5:3c:cb:cc:aa:18:ba:ef:ae:00:03:8b:79:21:5c:
         ef:8f:68:18:f8:82:22:86:34:7e:af:87:78:7e:ac:76:13:99:
         f3:a9:67:23:bb:68:95:28:93:2f:54:0b:90:c1:0a:4c:e0:ff:
         aa:1b:aa:9b:b3:64:d4:c8:09:46:09:dc:96:0e:9a:79:21:e9:
         68:ce:74:96:b1:fc:9f:c1:99:83:df:98:19:9a:7e:81:3c:88:
         aa:5f:ea:50:1f:4f:70:d3:4b:4b:2e:15:c0:4a:8d:0e:bc:07:
         fb:45:0e:2d:38:82:3c:fa:e2:96:7b:88:aa:c9:88:b9:18:e7:
         50:7c:20:74:22:b5:76:0c:f9:02:7c:3b:dd:8b:ae:4d:b6:f5:
         b1:95:6a:b8:96:e4:ec:36:c1:c7:52:43:32:be:d7:3c:3a:f3:
         d9:39:ec:e5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:50 2026 by rpki-client