Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32322d3232203d3e203536303431.roa
File:                     3130332e34342e38302e302f32322d3232203d3e203536303431.roa (raw, json)
Hash identifier:          gLUlRdsRILWpZ5Z5eI6BGCSUb19IXQ/k9cM6fvcqJLQ=
Subject key identifier:   48:A9:59:CC:7E:F9:41:17:70:C0:19:4A:84:3E:C9:46:39:8C:D4:51
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       75195047D168F2F67DF8D2C603CA74FA8C8793BF
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32322d3232203d3e203536303431.roa
Signing time:             Wed 15 Apr 2026 09:33:03 +0000
ROA not before:           Wed 15 Apr 2026 09:28:03 +0000
ROA not after:            Wed 14 Apr 2027 09:33:03 +0000
asID:                     56041
IP address blocks:        103.44.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:19:50:47:d1:68:f2:f6:7d:f8:d2:c6:03:ca:74:fa:8c:87:93:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: Apr 15 09:28:03 2026 GMT
            Not After : Apr 14 09:33:03 2027 GMT
        Subject: CN=48A959CC7EF9411770C0194A843EC946398CD451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:c1:36:ff:a6:07:f0:f8:c5:13:ea:e9:ec:
                    cb:8a:28:16:47:9a:44:53:62:5c:a6:65:b1:a4:e5:
                    3e:14:32:34:f8:a1:6a:77:f8:7a:fb:9c:6c:86:11:
                    9e:d2:e8:3a:90:98:6a:40:b1:b4:0c:fa:ff:78:dc:
                    6e:e3:15:6d:f3:90:ca:3c:bd:e6:89:ef:1a:b8:04:
                    79:c8:1e:3d:3d:af:45:2e:82:ae:58:46:91:a9:4c:
                    91:f6:44:22:ce:e2:cd:67:db:fd:86:d8:68:10:79:
                    e7:2a:30:d5:46:f2:8d:71:87:a9:1d:8b:0d:b4:b7:
                    ba:6a:58:ae:ab:f0:96:e7:d9:56:eb:12:4b:9e:55:
                    2d:dc:49:4b:cd:28:f5:0c:6a:c5:a6:bb:0c:2d:ef:
                    ec:c2:d3:10:1d:1d:87:52:74:27:48:94:ad:e4:4f:
                    f3:b9:52:83:e8:ff:11:1c:6f:6d:8f:c0:7a:6b:20:
                    4e:10:82:2c:b4:54:6d:09:99:07:bf:89:55:6e:73:
                    71:b4:19:a0:04:23:0c:71:a2:27:66:62:7b:ac:3e:
                    59:99:b5:25:5c:30:20:09:b9:d7:84:da:b5:ef:f2:
                    47:aa:a5:f2:b6:82:30:0f:79:5c:ca:d4:fc:8a:00:
                    e0:11:6b:5b:10:32:0d:cc:07:d0:2e:95:84:53:a0:
                    e3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A9:59:CC:7E:F9:41:17:70:C0:19:4A:84:3E:C9:46:39:8C:D4:51
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32322d3232203d3e203536303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:78:0d:53:b2:7e:77:b9:33:3b:00:3a:3b:a6:b2:4f:bd:59:
         74:d5:90:e9:cd:59:50:1d:bb:d5:f1:48:6c:43:1b:c4:b3:a0:
         f1:e5:3d:24:e8:f9:e4:22:af:f5:86:89:aa:1a:64:a6:f6:03:
         51:a7:aa:bb:eb:62:78:7c:a9:4c:74:78:f7:9c:5a:ba:bc:7b:
         5b:09:c6:eb:29:4d:ad:71:8d:68:a4:82:42:76:db:c9:64:73:
         9a:2d:64:5e:6e:dc:d2:24:f3:34:32:83:d1:fc:3b:b4:a4:f9:
         86:71:9e:ff:48:9c:63:36:6b:13:0c:3a:e7:e0:51:93:7d:3d:
         b8:8b:b9:c5:36:bc:2d:03:6f:29:e3:7d:b2:9f:d5:cd:6a:81:
         56:88:79:d7:35:37:09:b6:ad:1d:17:91:03:75:fe:01:4c:15:
         d0:40:f5:56:69:dc:9c:3a:c4:94:d4:6b:04:69:5b:0c:e9:44:
         4f:9b:02:21:ac:4a:c9:e2:de:69:77:7d:14:ff:5e:b7:57:be:
         3c:03:7f:48:ef:a7:0b:e7:78:0f:60:45:9c:c2:79:7e:be:92:
         a2:3a:17:7c:d3:a1:c2:b4:4a:f9:e0:7d:ea:89:42:ee:d4:f1:
         c5:c5:43:e7:3f:08:13:8e:98:19:21:e0:26:3d:c1:43:34:1b:
         e9:16:48:89
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUdRlQR9Fo8vZ9+NLGA8p0+oyHk78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2
RUZERDAwRjAeFw0yNjA0MTUwOTI4MDNaFw0yNzA0MTQwOTMzMDNaMDMxMTAvBgNV
BAMTKDQ4QTk1OUNDN0VGOTQxMTc3MEMwMTk0QTg0M0VDOTQ2Mzk4Q0Q0NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy/cE2/6YH8PjFE+rp7MuKKBZH
mkRTYlymZbGk5T4UMjT4oWp3+Hr7nGyGEZ7S6DqQmGpAsbQM+v943G7jFW3zkMo8
veaJ7xq4BHnIHj09r0Uugq5YRpGpTJH2RCLO4s1n2/2G2GgQeecqMNVG8o1xh6kd
iw20t7pqWK6r8Jbn2VbrEkueVS3cSUvNKPUMasWmuwwt7+zC0xAdHYdSdCdIlK3k
T/O5UoPo/xEcb22PwHprIE4Qgiy0VG0JmQe/iVVuc3G0GaAEIwxxoidmYnusPlmZ
tSVcMCAJudeE2rXv8keqpfK2gjAPeVzK1PyKAOARa1sQMg3MB9AulYRToOOFAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUSKlZzH75QRdwwBlKhD7JRjmM1FEwHwYDVR0j
BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5
MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzI3NzUyMzUxOTQwNjA5LzAvMzEzMDMzMmUzNDM0
MmUzODMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcsUDANBgkqhkiG9w0BAQsFAAOCAQEAvXgNU7J+d7kzOwA6O6ayT71ZdNWQ
6c1ZUB271fFIbEMbxLOg8eU9JOj55CKv9YaJqhpkpvYDUaequ+tieHypTHR495xa
urx7WwnG6ylNrXGNaKSCQnbbyWRzmi1kXm7c0iTzNDKD0fw7tKT5hnGe/0icYzZr
Eww65+BRk309uIu5xTa8LQNvKeN9sp/VzWqBVoh51zU3CbatHReRA3X+AUwV0ED1
VmncnDrElNRrBGlbDOlET5sCIaxKyeLeaXd9FP9et1e+PAN/SO+nC+d4D2BFnMJ5
fr6SojoXfNOhwrRK+eB96olC7tTxxcVD5z8IE46YGSHgJj3BQzQb6RZIiQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:37:23 2026 by rpki-client