Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31392e302f32342d3234203d3e20313332383833.roa
File:                     3130332e34332e31392e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier:          8Eq0oLTh31AxDX0nHXIbnNmbdSMznta0FdMSV4iVE/g=
Subject key identifier:   E8:28:B1:AD:1F:CD:E1:73:87:09:AE:5C:AD:02:4C:FC:30:D7:E9:3E
Certificate issuer:       /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial:       016B3CB2E3CCC91F23A6153D65B88BB4AFC35576
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31392e302f32342d3234203d3e20313332383833.roa
Signing time:             Wed 08 Apr 2026 05:59:10 +0000
ROA not before:           Wed 08 Apr 2026 05:54:10 +0000
ROA not after:            Wed 07 Apr 2027 05:59:10 +0000
asID:                     132883
IP address blocks:        103.43.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6b:3c:b2:e3:cc:c9:1f:23:a6:15:3d:65:b8:8b:b4:af:c3:55:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
        Validity
            Not Before: Apr  8 05:54:10 2026 GMT
            Not After : Apr  7 05:59:10 2027 GMT
        Subject: CN=E828B1AD1FCDE1738709AE5CAD024CFC30D7E93E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:50:70:8d:fa:5e:83:d1:66:02:81:3d:7e:
                    d6:0a:fb:2d:5f:9c:47:c9:09:ae:4b:7f:14:05:2f:
                    aa:2f:36:4f:ef:5c:73:85:eb:ac:9e:69:fd:77:ba:
                    3b:6b:04:7a:c7:95:98:8a:75:92:00:07:8f:46:69:
                    2c:27:e2:ef:80:ab:12:a0:77:3b:13:07:f9:00:54:
                    44:d5:08:89:d7:82:12:30:b9:a3:13:18:52:48:c2:
                    63:3d:f1:04:72:ee:77:b4:ee:1d:9b:e0:37:e1:66:
                    ae:69:ad:7a:8f:30:20:3a:4e:d0:4c:fb:0d:5a:24:
                    67:85:a3:8d:dc:ea:3e:0b:6e:1c:90:af:c5:d5:94:
                    4e:40:33:98:5e:79:58:a1:f7:7c:f4:d6:0d:ed:03:
                    77:42:f6:50:ff:5f:2f:33:a0:f0:c6:35:b0:2f:75:
                    6d:26:52:86:47:3a:4a:dd:10:2c:45:a6:30:e6:fb:
                    01:13:f7:51:a6:3d:dd:6c:6a:ee:2e:78:a5:75:1c:
                    2d:06:90:f9:54:ce:20:e5:30:dc:10:60:a0:5d:fd:
                    1d:f9:66:7b:6b:8c:63:8b:3b:b2:8f:85:08:de:a0:
                    10:2e:67:c4:28:28:e7:db:e6:2a:78:f9:69:63:4e:
                    57:75:f0:69:a0:b2:8b:95:93:f4:ca:32:35:3b:34:
                    15:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:28:B1:AD:1F:CD:E1:73:87:09:AE:5C:AD:02:4C:FC:30:D7:E9:3E
            X509v3 Authority Key Identifier:
                keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e34332e31392e302f32342d3234203d3e20313332383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:19:a1:55:f4:94:14:63:65:d2:74:fb:b7:6e:a0:51:70:
         ec:85:12:dd:51:f7:4c:89:34:b9:79:a6:ed:b8:d4:44:bd:a3:
         12:0f:f6:cb:6d:99:a3:7c:02:ba:f9:b5:a6:47:5e:ba:24:8d:
         e7:39:de:ba:cb:2e:46:fd:2d:ca:43:99:b5:2d:b7:fa:b9:a5:
         ec:1e:e4:e6:3b:91:33:a7:a9:35:a4:b4:c3:a0:66:65:6d:a4:
         31:f8:6e:06:f1:61:32:f6:b5:fd:a9:5f:4c:f6:68:62:9d:a8:
         d2:85:19:00:f7:7e:53:a0:d1:24:34:2f:73:19:e8:48:66:32:
         00:f9:54:b4:0d:f0:e8:5a:f3:16:9b:97:1c:bb:de:f4:06:e4:
         0f:a1:bd:d6:7e:9d:ef:69:9d:cd:4a:5f:c1:21:04:df:51:60:
         11:c9:34:ee:f5:c0:40:d9:42:b8:a4:7b:a6:6d:17:d6:cb:11:
         25:57:52:c4:5b:f1:e1:c8:78:36:e2:7a:ed:82:6a:af:2b:27:
         a7:5a:67:02:7d:04:93:ba:49:b6:09:1f:de:cd:0d:3e:19:fa:
         a6:34:e9:a3:7c:e7:6a:15:89:c6:57:21:56:b1:00:28:4c:a5:
         46:4e:09:44:bd:75:bd:d5:26:d1:c2:ef:7a:7e:d9:31:71:b3:
         ac:1f:3c:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:07 2026 by rpki-client