Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38322e302f32342d3234203d3e20313531393531.roa
File:                     3130332e3134322e38322e302f32342d3234203d3e20313531393531.roa (raw, json)
Hash identifier:          NBrKkaX/GBDhP2RLztQmFEQ01TUbwHomfuOqxwCWC7w=
Subject key identifier:   5E:35:DA:D3:4B:9B:EF:4C:EB:F5:22:10:80:AD:E4:35:C5:60:52:56
Certificate issuer:       /CN=6F899B29F801AD1C8A8515E6EF9709910311F668
Certificate serial:       17D70063DF13076B226FB883ECED9D72EB7A1015
Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38322e302f32342d3234203d3e20313531393531.roa
Signing time:             Thu 21 May 2026 03:32:04 +0000
ROA not before:           Thu 21 May 2026 03:27:04 +0000
ROA not after:            Thu 20 May 2027 03:32:04 +0000
asID:                     151951
IP address blocks:        103.142.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 07:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:00:63:df:13:07:6b:22:6f:b8:83:ec:ed:9d:72:eb:7a:10:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668
        Validity
            Not Before: May 21 03:27:04 2026 GMT
            Not After : May 20 03:32:04 2027 GMT
        Subject: CN=5E35DAD34B9BEF4CEBF5221080ADE435C5605256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:41:9f:3b:a8:1a:3c:28:5e:7e:f4:1a:84:de:
                    d3:88:f4:d5:c3:d9:ea:cf:73:f1:b8:0f:fc:00:fd:
                    39:a9:a2:f1:cf:55:94:c7:60:fb:62:04:fd:9d:cd:
                    a1:a7:c9:70:20:ac:7b:66:30:ec:95:17:8f:37:93:
                    54:07:ee:2b:5c:42:3c:22:8d:bc:ce:9f:f0:ac:7c:
                    d7:66:59:53:fc:3d:da:bd:95:19:c9:35:24:53:79:
                    f3:da:89:d1:f5:b6:ac:91:cd:42:90:99:52:bf:0a:
                    0a:da:ab:21:33:54:48:3b:b3:df:33:88:38:3e:1b:
                    ba:6f:9e:1b:53:4b:b7:64:3d:58:ee:ff:76:10:c3:
                    da:d0:56:31:2a:08:26:64:d1:14:0f:01:d8:6b:16:
                    f5:65:80:86:d6:66:9e:d0:02:51:a5:43:76:82:97:
                    76:d9:3e:55:a2:bc:07:60:97:84:b4:8a:58:68:2f:
                    dc:57:c7:e6:08:ee:da:e0:f5:74:1c:43:df:08:77:
                    97:2c:1d:f0:4e:73:e4:50:bf:dd:4c:30:d1:9f:4a:
                    b9:e8:31:96:6e:b8:df:1c:c7:17:a9:8b:7c:d2:ce:
                    d0:88:78:5e:a9:5b:03:18:5b:d1:d4:35:ee:26:a3:
                    37:51:ea:2c:f2:79:b9:96:ca:43:ca:85:f8:3f:bf:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:35:DA:D3:4B:9B:EF:4C:EB:F5:22:10:80:AD:E4:35:C5:60:52:56
            X509v3 Authority Key Identifier:
                keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38322e302f32342d3234203d3e20313531393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:32:4e:2b:b3:de:32:9f:47:28:42:28:1d:c2:a4:dc:0d:15:
         e6:74:5a:78:be:48:15:3c:a0:00:ea:70:6b:78:1a:36:37:04:
         18:61:53:f9:09:7d:5e:8b:01:45:b1:ce:9a:3c:b9:f0:10:c7:
         57:78:c2:9c:7a:ef:5c:66:3e:88:3c:1d:6e:be:82:62:35:67:
         0d:65:e7:67:5b:2f:07:6a:dd:f3:ec:ed:c0:ab:44:e1:0d:c8:
         0c:d6:bf:f5:1b:df:11:1b:83:9c:25:ba:9b:7b:a6:17:ed:c2:
         64:ee:ae:37:0a:d0:0d:e2:c4:c1:80:d5:9b:ac:88:ca:62:66:
         c8:e3:c0:90:b2:68:e0:df:a8:97:89:cd:3c:19:ed:e8:4b:9d:
         e3:be:18:43:ce:2e:8b:d1:a2:0c:d7:70:d5:1b:88:34:20:f2:
         7b:15:67:87:cb:f4:90:10:11:ad:eb:b6:45:42:12:60:5f:61:
         52:e6:2a:ed:d5:f1:d2:0c:0c:86:3a:93:49:6f:a4:1b:65:41:
         41:78:88:f2:f2:f8:dc:4f:a5:ea:ff:d7:e8:20:40:81:d8:07:
         03:d8:e6:94:6f:1b:2b:28:05:c8:b6:48:3e:50:57:09:9d:31:
         19:9a:45:d4:4c:f6:cc:bd:23:fb:f3:4a:8e:22:6a:a3:18:fe:
         48:3d:fb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:48:54 2026 by rpki-client