Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa
File:                     3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa (raw, json)
Hash identifier:          Tulzy2loSZQGgT5vI6JjBZGNxAzzMdSArmk0OaZXJyI=
Subject key identifier:   DC:B1:85:7B:38:FB:C3:53:CE:AE:E6:B4:1D:E8:F7:20:81:6B:97:5A
Certificate issuer:       /CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A
Certificate serial:       7A2BFD643BDBC7C3DBA0EBBAE22E245D78EAEFAD
Authority key identifier: 52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa
Signing time:             Mon 27 Jul 2026 16:50:33 +0000
ROA not before:           Mon 27 Jul 2026 16:45:33 +0000
ROA not after:            Mon 26 Jul 2027 16:50:33 +0000
asID:                     137571
IP address blocks:        103.126.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2b:fd:64:3b:db:c7:c3:db:a0:eb:ba:e2:2e:24:5d:78:ea:ef:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FBEC63231AAADF153ABC98E48B2A634CE07D2A
        Validity
            Not Before: Jul 27 16:45:33 2026 GMT
            Not After : Jul 26 16:50:33 2027 GMT
        Subject: CN=DCB1857B38FBC353CEAEE6B41DE8F720816B975A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:fa:67:2e:8f:12:2b:84:4f:95:0c:52:ae:
                    62:ae:fc:af:b9:68:95:82:3e:37:ca:e5:c5:9f:05:
                    8e:6a:b0:57:a6:64:76:b7:d6:6f:a6:de:ec:ef:28:
                    e2:ce:92:a5:8e:7b:67:b9:43:64:f8:9a:9e:78:8a:
                    78:fc:23:58:38:9c:1a:bf:72:47:5b:09:71:17:c2:
                    cd:dc:5b:e9:ec:9c:39:e2:2e:76:42:58:7f:a9:16:
                    e0:e8:fe:09:e4:c4:c7:ca:89:52:89:12:70:39:1a:
                    1e:24:83:dd:95:39:e9:ff:d3:54:29:ef:f2:23:e6:
                    a5:bc:22:1d:e8:f9:4b:ac:2e:64:85:c5:6c:a1:9c:
                    4b:01:26:9a:cb:c6:9d:66:6b:d9:e3:78:eb:0b:7b:
                    01:6f:83:18:50:96:e1:a4:6c:a3:75:59:f1:b3:a5:
                    e6:0c:c6:0e:38:d9:3c:0b:be:ad:23:ac:d1:ad:52:
                    55:0e:45:4c:32:e3:60:91:2b:ca:4a:f7:3e:d4:fb:
                    c8:bf:e9:12:f0:85:ea:3c:84:5e:06:c8:f0:5f:2d:
                    95:68:ec:84:23:bc:cc:fa:16:b0:a9:f0:ca:5a:7b:
                    10:c4:47:78:f7:a6:fb:34:7f:19:8b:08:62:47:86:
                    7c:8e:5f:7e:6f:26:21:01:39:2d:ca:1d:d3:b4:bf:
                    56:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B1:85:7B:38:FB:C3:53:CE:AE:E6:B4:1D:E8:F7:20:81:6B:97:5A
            X509v3 Authority Key Identifier:
                keyid:52:FB:EC:63:23:1A:AA:DF:15:3A:BC:98:E4:8B:2A:63:4C:E0:7D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/52FBEC63231AAADF153ABC98E48B2A634CE07D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721334785/0/3130332e3132362e3130302e302f32342d3234203d3e20313337353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ed:79:57:70:da:56:c8:42:6d:88:9f:7e:e7:dd:85:82:64:
         7a:49:f7:34:21:f7:b2:c8:a5:e4:19:03:46:77:54:be:6a:3e:
         17:68:ea:54:2f:20:e7:fb:fd:06:92:2a:7d:f5:d3:5c:10:eb:
         f5:ca:d0:0b:e9:6d:6b:3a:1a:db:43:a7:21:28:0d:52:d9:8a:
         07:b3:ec:38:78:b6:45:c6:ef:c7:69:0e:02:c2:1b:56:af:f0:
         83:6c:e9:1d:e1:0c:e7:47:86:e4:9c:e9:ac:fc:19:8d:81:f8:
         6b:1f:e9:61:30:4c:36:6b:d9:2e:4b:3d:2f:51:7b:88:9b:9b:
         ea:72:2f:59:2b:c9:bc:65:a1:b8:10:a3:d9:c2:f8:fa:7e:1a:
         2f:f7:03:f5:2d:51:32:34:13:4c:71:63:cb:dc:16:b1:4c:ad:
         49:38:3b:6b:d0:d9:97:e3:47:1b:fb:e7:a9:8f:cd:fd:21:af:
         ff:4f:87:92:e1:a9:df:70:ab:2f:61:73:5b:53:5f:66:93:8b:
         35:22:be:55:80:b4:5a:0f:8a:e2:ef:3e:ec:e5:62:ac:b1:cb:
         8d:71:b9:08:49:37:bf:ef:84:d3:1c:56:76:bb:7b:9b:c6:53:
         c7:53:44:12:d8:3d:ea:93:0f:16:97:67:14:97:5d:97:d3:ba:
         b7:6d:4d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:47 2026 by rpki-client