Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e35362e31382e302f32342d3234203d3e20313332383833.roa
File:                     3130332e35362e31382e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier:          IoAWP1pWwIIOw8P6s089HG6MEfk3dnUjqltYsSmtshM=
Subject key identifier:   06:DD:1F:A8:E7:23:F3:03:23:4D:C9:5C:A0:9C:72:66:C2:76:4C:20
Certificate issuer:       /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial:       44F7810681313F2CCE642E31D40EDDFD46A2E013
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e35362e31382e302f32342d3234203d3e20313332383833.roa
Signing time:             Wed 08 Apr 2026 05:59:10 +0000
ROA not before:           Wed 08 Apr 2026 05:54:10 +0000
ROA not after:            Wed 07 Apr 2027 05:59:10 +0000
asID:                     132883
IP address blocks:        103.56.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f7:81:06:81:31:3f:2c:ce:64:2e:31:d4:0e:dd:fd:46:a2:e0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
        Validity
            Not Before: Apr  8 05:54:10 2026 GMT
            Not After : Apr  7 05:59:10 2027 GMT
        Subject: CN=06DD1FA8E723F303234DC95CA09C7266C2764C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:cc:78:97:84:cb:ab:20:e7:2f:00:5a:e8:
                    d4:6b:0b:24:d5:66:dc:9c:e6:54:f8:59:b8:31:d2:
                    b9:cd:60:5a:78:a5:18:66:fb:77:09:59:67:f2:a2:
                    ce:f2:5f:9a:1d:5b:6a:38:03:51:9d:3d:11:68:72:
                    29:36:9d:7b:76:05:55:65:05:2e:6e:2c:d1:a1:ef:
                    ff:7f:66:47:4a:1a:b6:c3:c5:5d:61:d4:1e:71:47:
                    b1:05:4b:42:72:da:3c:23:f7:b1:02:04:fc:60:67:
                    7f:f8:8e:c7:9c:da:21:51:fc:ee:49:08:46:c9:7f:
                    d3:2f:31:26:ff:e1:5b:3e:37:da:7b:9e:4c:c5:48:
                    6f:44:4a:39:c0:21:34:46:95:b7:cb:e1:e4:5f:a4:
                    8e:32:49:01:05:2e:ad:ba:f2:79:ea:e4:30:40:dc:
                    2e:08:5d:0a:5d:91:c9:29:53:06:60:03:55:ca:00:
                    4e:f5:a2:27:49:31:7d:54:74:16:15:d1:2b:3a:00:
                    51:36:77:5d:68:63:ed:df:3c:2c:b8:4e:d8:24:a2:
                    9c:fd:29:9c:ab:5a:e0:3c:68:92:3d:b3:25:a6:17:
                    04:30:a6:ad:3b:2e:9b:a6:e2:d7:a8:ea:16:22:2e:
                    24:a5:a9:56:d7:45:e6:ba:d7:86:73:90:d1:47:5f:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DD:1F:A8:E7:23:F3:03:23:4D:C9:5C:A0:9C:72:66:C2:76:4C:20
            X509v3 Authority Key Identifier:
                keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/3130332e35362e31382e302f32342d3234203d3e20313332383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:61:3b:64:a4:e2:15:d3:ee:75:00:4d:c6:7b:6e:f8:29:99:
         8e:f8:c7:39:08:aa:8a:ef:7a:be:65:d7:67:fb:c3:76:95:9b:
         5e:55:cb:45:54:68:72:1e:07:5e:b6:b9:9b:43:0e:14:ed:d8:
         d4:e2:24:91:11:de:89:43:6c:f5:4f:a3:02:1c:cc:e7:7a:d8:
         31:f3:77:7e:93:c2:85:d9:00:f1:69:de:bf:02:64:45:b5:e2:
         c5:68:73:3d:97:8f:8c:19:67:aa:94:30:c8:3f:8f:25:e1:a8:
         ff:c1:00:32:f5:f4:2a:1b:da:fd:3c:20:92:91:77:22:a2:bb:
         53:e6:f4:7c:10:6b:36:22:85:ac:01:d7:17:13:aa:25:b7:32:
         04:9b:29:40:8c:45:d1:1b:80:50:fa:b7:a2:6f:7d:c4:fc:34:
         f3:3e:a7:d1:ab:6f:63:ae:36:51:43:52:76:95:67:7b:cc:83:
         33:12:67:64:7c:0b:0e:73:56:a6:40:34:8a:f8:f0:07:53:84:
         9f:2e:78:ae:57:13:8b:c4:c7:c1:98:ce:09:b1:e5:19:a3:8a:
         3f:47:ab:8f:40:fb:7a:75:74:bf:27:ae:a1:b1:a8:02:e6:6a:
         01:9f:21:1b:8e:21:af:ce:36:7a:90:f4:29:8a:88:82:be:a0:
         11:22:bc:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:03 2026 by rpki-client