Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa
File:                     3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa (raw, json)
Hash identifier:          79Z+OEgq58IFIFUr3XZSZV6jT+sIs4BTv39+/fzGp6A=
Subject key identifier:   10:47:4E:D0:98:33:FA:90:7D:98:3E:EB:26:F9:EF:CD:9B:36:F3:D7
Certificate issuer:       /CN=6F899B29F801AD1C8A8515E6EF9709910311F668
Certificate serial:       07C3D13F5F2005375E8BC76C16ED8C9B23DE5354
Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa
Signing time:             Thu 21 May 2026 03:32:04 +0000
ROA not before:           Thu 21 May 2026 03:27:04 +0000
ROA not after:            Thu 20 May 2027 03:32:04 +0000
asID:                     151951
IP address blocks:        103.142.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c3:d1:3f:5f:20:05:37:5e:8b:c7:6c:16:ed:8c:9b:23:de:53:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668
        Validity
            Not Before: May 21 03:27:04 2026 GMT
            Not After : May 20 03:32:04 2027 GMT
        Subject: CN=10474ED09833FA907D983EEB26F9EFCD9B36F3D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:10:8b:c8:20:d9:99:1e:da:8f:d4:5a:66:
                    92:99:72:2d:b4:0c:4f:39:88:89:0d:0f:3d:e6:2f:
                    01:24:3c:4f:49:4a:19:19:e9:d7:e0:64:cd:10:84:
                    53:eb:c8:84:33:f1:c7:e7:de:97:a0:fc:d8:8c:d3:
                    77:c8:0d:94:19:9d:ab:8a:ae:0d:ba:63:d3:0f:36:
                    fa:7f:60:ce:05:f4:7f:e3:c7:ac:3a:17:54:25:50:
                    22:6e:ef:bc:0a:c9:24:a2:6c:1d:1e:8f:63:8f:13:
                    2a:c5:17:dd:8f:67:73:9a:01:66:dc:85:d8:ad:6b:
                    f8:01:b7:ec:89:2f:d8:19:27:16:00:1a:66:ae:39:
                    01:73:b5:ec:62:80:1e:f0:14:2f:af:33:a7:8f:bc:
                    50:9a:2a:42:f1:42:30:40:08:a5:fd:71:4b:5d:59:
                    eb:f3:86:0d:ae:ec:4b:90:c0:43:dd:ef:b5:67:38:
                    9d:ea:d8:93:f1:a2:85:a3:85:40:f5:04:c4:c3:8b:
                    f3:90:21:54:ec:76:f5:17:5c:88:ab:e1:9c:19:5e:
                    17:5b:51:ae:be:50:37:44:21:73:c5:35:38:e2:9a:
                    0f:23:fb:04:62:5b:5f:38:79:63:0f:ce:2e:17:f3:
                    df:39:3f:04:07:10:cc:3c:9d:1b:1c:43:3c:90:a1:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:47:4E:D0:98:33:FA:90:7D:98:3E:EB:26:F9:EF:CD:9B:36:F3:D7
            X509v3 Authority Key Identifier:
                keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:27:01:4c:54:b4:cb:44:32:84:d6:f7:58:37:b2:0d:f9:
         c2:5a:ae:b4:b0:ab:39:0f:15:8e:27:26:3a:58:a1:7c:6b:f5:
         7b:f4:30:52:20:e8:16:e4:3c:87:17:e5:1d:18:9a:a1:99:3d:
         10:43:c3:2f:0a:40:47:01:67:63:ef:81:0a:8e:50:ff:0e:f0:
         9e:b8:30:17:18:72:5c:95:aa:0f:db:12:9d:37:9a:3d:7f:30:
         37:7b:d3:fd:93:8c:d9:fe:94:e0:f8:2d:00:35:63:ff:ff:15:
         df:12:88:30:67:55:c7:c9:18:fa:45:b4:ac:62:0e:4f:f4:f1:
         02:96:a6:88:19:16:d1:f3:d5:d8:b6:18:49:2b:af:16:81:58:
         af:0a:11:43:43:68:4e:30:15:dc:20:be:d8:80:4b:d2:52:65:
         a1:af:da:67:93:27:e4:eb:46:5f:a9:62:b8:72:fb:a2:4e:94:
         5a:e3:6f:eb:02:7a:a2:c1:c9:0d:af:30:1d:1d:95:7f:b9:23:
         64:9d:fd:48:69:24:48:aa:f7:5d:07:91:d1:62:1b:dd:b8:c3:
         4a:a0:b4:bf:2f:93:b4:a5:b7:64:a9:91:5d:b6:97:63:7c:be:
         75:e1:02:85:07:2a:ae:9b:a8:c7:e5:44:e9:0c:59:48:b4:c0:
         c7:f5:84:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:37 2026 by rpki-client