Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313430383639.roa
File:                     3130332e3131382e3231322e302f32322d3234203d3e20313430383639.roa (raw, json)
Hash identifier:          3UtyIu+TFf758tcz+c+VxjAz3N1l02ndykw3MZOcBug=
Subject key identifier:   72:37:6D:82:DE:89:D7:0A:D5:BD:17:85:6C:32:63:65:88:65:85:44
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       1E4C31784BE4BA576BD70564C4FBA98820E53D98
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313430383639.roa
Signing time:             Mon 02 Feb 2026 10:13:58 +0000
ROA not before:           Mon 02 Feb 2026 10:08:58 +0000
ROA not after:            Mon 01 Feb 2027 10:13:58 +0000
asID:                     140869
IP address blocks:        103.118.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4c:31:78:4b:e4:ba:57:6b:d7:05:64:c4:fb:a9:88:20:e5:3d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: Feb  2 10:08:58 2026 GMT
            Not After : Feb  1 10:13:58 2027 GMT
        Subject: CN=72376D82DE89D70AD5BD17856C32636588658544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:94:d5:a3:fd:4e:0d:fc:d4:4c:54:a9:e5:
                    88:d4:86:fc:d8:e6:a6:fb:76:48:6b:8e:19:ad:bd:
                    ea:65:95:87:56:67:84:d4:31:bb:e6:53:de:3e:1a:
                    f3:b9:46:56:9f:7d:21:b1:57:b2:2d:87:5d:08:3f:
                    91:ff:07:60:2a:44:0b:41:da:66:f1:02:20:39:6f:
                    30:b9:42:04:ee:ac:94:6b:a3:14:d7:f1:48:8f:77:
                    33:79:4f:9d:aa:c6:16:54:f9:c1:a1:66:58:a5:1d:
                    2f:1c:66:e5:9a:7e:fe:09:ca:7f:1c:08:2d:dc:0e:
                    6b:6c:78:52:9a:3d:8b:6a:2a:a2:14:3e:b0:8f:4f:
                    02:52:28:d6:e4:45:f4:3e:07:29:bf:75:a3:bd:9b:
                    2c:c9:56:48:8b:64:94:c3:d5:f2:e3:f5:25:9e:89:
                    e0:1e:41:b0:0f:05:2a:07:55:37:83:bc:4f:91:67:
                    e7:2a:00:6e:14:31:8f:4e:01:97:55:91:b0:0f:69:
                    fd:f4:99:de:4c:ef:dc:dc:55:ac:19:6e:7e:6c:04:
                    c3:b4:7b:63:33:30:f1:7e:0e:15:ed:89:ab:19:25:
                    1d:ae:15:85:16:4a:d8:29:88:d1:a0:81:51:b8:54:
                    e5:20:2f:b2:64:82:66:dc:41:c0:f5:70:aa:79:49:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:37:6D:82:DE:89:D7:0A:D5:BD:17:85:6C:32:63:65:88:65:85:44
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/3130332e3131382e3231322e302f32322d3234203d3e20313430383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:fb:33:ef:19:fe:bd:ee:f9:d6:9e:4c:9b:d7:ab:86:cb:d1:
         08:db:45:b9:94:ab:97:50:81:7c:c6:0d:cf:1a:53:23:da:9f:
         be:57:24:48:d7:5f:a4:07:7b:eb:10:2f:14:df:44:77:33:14:
         4a:3e:23:a0:cc:e8:8e:95:70:fa:0b:31:29:03:2b:fa:ae:ba:
         f6:24:d1:2e:a3:f0:9f:cc:11:af:5f:c6:89:a3:e3:e9:c0:a6:
         0f:b8:0d:b0:ca:7e:4b:b2:8b:a4:d8:2f:ae:c5:70:51:aa:8e:
         27:af:65:dc:a5:b1:51:f4:fc:60:fb:00:2c:ea:16:ea:b0:6a:
         11:31:8e:fe:05:a5:aa:2d:84:aa:03:4a:61:01:c1:bd:e4:78:
         3a:71:dc:df:5f:9d:d3:6b:e5:ce:1f:88:27:27:68:1d:0e:2e:
         66:b0:f3:dd:5b:8c:9e:85:55:b7:15:89:21:a1:63:08:17:94:
         3d:f1:a7:97:51:ca:90:57:6f:71:5f:7c:33:50:01:54:dd:1a:
         50:da:11:40:59:54:02:94:6f:1e:5c:5f:68:01:f6:fb:08:7e:
         07:6a:9e:65:73:6c:1a:2e:bc:bb:42:09:58:61:47:68:9c:fa:
         4a:62:5f:f8:9b:9e:c5:95:1b:82:5d:c5:fd:52:da:80:72:a1:
         44:e0:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:57:52 2026 by rpki-client