Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3238203d3e203234343039.roa
File:                     3130332e3234352e32332e302f32342d3238203d3e203234343039.roa (raw, json)
Hash identifier:          duHWy89Z7iqgGUpExL4w6MQRvREJpv2Qr6dID4AHNSQ=
Subject key identifier:   7A:03:1D:DC:E3:F2:EE:15:DE:69:B7:62:2C:91:F5:21:7A:F8:E1:31
Certificate issuer:       /CN=A918C4250000/serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
Certificate serial:       2B17022BDE0A53C80F78937DF2BA68FC366BE5B0
Authority key identifier: 2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3238203d3e203234343039.roa
Signing time:             Thu 29 Jan 2026 09:30:05 +0000
ROA not before:           Thu 29 Jan 2026 09:25:05 +0000
ROA not after:            Thu 28 Jan 2027 09:30:05 +0000
asID:                     24409
IP address blocks:        103.245.23.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Feb 2026 10:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:17:02:2b:de:0a:53:c8:0f:78:93:7d:f2:ba:68:fc:36:6b:e5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C4250000, serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
        Validity
            Not Before: Jan 29 09:25:05 2026 GMT
            Not After : Jan 28 09:30:05 2027 GMT
        Subject: CN=7A031DDCE3F2EE15DE69B7622C91F5217AF8E131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:0e:43:b0:ed:46:c5:68:0d:c5:fd:84:8f:
                    8a:47:36:fd:70:33:6a:b2:c1:6f:a5:77:0a:d1:0a:
                    18:34:5e:be:fd:f9:84:69:15:c5:20:e8:84:ef:0e:
                    2b:22:52:5e:35:1c:2a:d2:77:6c:b4:2d:9d:83:d3:
                    bd:1c:97:f1:41:44:54:14:cd:d4:b4:62:7b:d2:8b:
                    5c:d2:4d:42:3d:86:29:5c:01:7e:1a:18:3a:7d:ad:
                    6b:5c:06:ef:55:b4:96:5c:8e:c6:50:e1:06:75:7b:
                    a0:f4:84:d5:e3:f3:c7:84:60:d8:e1:47:a4:a1:c1:
                    b7:5f:77:a3:1e:ad:c3:fa:c0:81:68:49:50:43:86:
                    b8:11:b9:d4:5a:a1:27:97:88:3a:93:d6:6b:96:2d:
                    ac:84:93:9c:0a:cf:8f:37:57:ad:da:88:40:bb:af:
                    99:19:6d:18:08:8e:57:92:76:a8:0e:7d:a6:04:2b:
                    be:3a:78:02:31:73:fc:bb:cb:a2:60:e2:f2:f4:d7:
                    be:ea:ae:42:85:cd:3c:50:5d:d1:bf:57:67:cc:05:
                    df:fb:4f:07:de:88:ee:77:26:4f:51:d8:0a:a2:50:
                    df:0a:25:d6:b2:ac:40:48:80:51:27:76:6f:eb:9d:
                    70:4d:b4:12:54:c6:8f:d7:74:9f:46:f3:42:55:8a:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:03:1D:DC:E3:F2:EE:15:DE:69:B7:62:2C:91:F5:21:7A:F8:E1:31
            X509v3 Authority Key Identifier:
                keyid:2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3238203d3e203234343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:85:44:32:32:d2:25:2e:5a:21:19:e5:af:c2:d0:8d:1b:29:
         34:8e:33:8e:af:c6:1d:64:78:5a:c9:f4:44:01:a2:00:79:db:
         bd:01:cf:2a:b8:eb:0b:23:b7:3d:8e:34:a1:8b:83:9c:72:0c:
         5e:25:c0:f1:26:cd:d0:88:fa:f7:79:6f:e8:fa:77:2b:cb:77:
         94:5a:18:41:42:e3:e9:d7:8a:18:96:68:8d:95:59:11:3b:7a:
         c9:96:2a:21:55:25:da:45:0d:38:5b:0b:86:b6:2b:69:33:28:
         63:a6:56:88:80:a8:11:8d:6b:45:56:ea:67:f7:6c:bc:45:6e:
         68:de:4d:dd:eb:f7:da:df:32:a1:3d:83:d9:4c:47:0a:6b:18:
         76:85:37:4d:69:3a:52:75:6a:61:04:55:23:75:0b:1f:c7:f3:
         30:ed:25:70:30:78:69:74:30:af:18:a6:27:1f:24:0f:30:c6:
         a3:27:4a:0d:54:d4:d7:9b:2f:d8:10:74:16:ed:4f:55:74:a8:
         46:d0:60:7a:93:d3:38:53:e2:0f:7b:61:83:99:a3:33:24:81:
         74:8c:33:6f:24:3d:28:50:28:5f:88:67:b7:94:de:8d:b0:3e:
         8d:15:f2:52:d3:71:d9:48:76:fd:72:5b:64:a5:5a:72:91:58:
         82:6d:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:43:08 2026 by rpki-client