Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3234203d3e2034383132.roa
File:                     3130332e3234352e32332e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier:          5h9WITkSSeFvxeX0UNseRp5CvrfPtkhSN9QGPkwRyQU=
Subject key identifier:   42:87:F9:B7:AA:4E:90:23:A4:D7:9B:EF:7A:D4:17:F9:5E:4A:CC:FB
Certificate issuer:       /CN=A918C4250000/serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
Certificate serial:       5BCD99AC73DADC02761840518F979F8ACBA705B4
Authority key identifier: 2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3234203d3e2034383132.roa
Signing time:             Thu 12 Mar 2026 01:47:42 +0000
ROA not before:           Thu 12 Mar 2026 01:42:42 +0000
ROA not after:            Thu 11 Mar 2027 01:47:42 +0000
asID:                     4812
IP address blocks:        103.245.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 21:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cd:99:ac:73:da:dc:02:76:18:40:51:8f:97:9f:8a:cb:a7:05:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C4250000, serialNumber=2EE47E3C81874A0183A8DAF42DED9AD994C477CF
        Validity
            Not Before: Mar 12 01:42:42 2026 GMT
            Not After : Mar 11 01:47:42 2027 GMT
        Subject: CN=4287F9B7AA4E9023A4D79BEF7AD417F95E4ACCFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:44:0e:c4:d1:11:28:2f:f6:59:af:6b:1d:
                    a1:ab:8b:4d:1e:da:15:5e:97:01:3e:53:f8:b0:e2:
                    e4:df:3f:10:16:d6:1e:a3:db:9c:6c:a5:44:b4:f3:
                    e6:88:62:a6:0f:12:76:ad:20:4b:e1:45:f3:23:5a:
                    d2:a4:20:15:78:a6:25:18:4f:74:f6:c6:69:d5:a6:
                    f0:5a:76:e5:95:f5:e4:2c:8d:81:2d:65:37:fa:8c:
                    24:e3:0f:98:6a:57:08:78:97:f1:d9:18:ce:db:b1:
                    1d:88:c5:1f:9c:c2:34:ca:ac:97:76:da:b1:f8:ca:
                    d9:0a:9c:13:67:d6:ae:12:98:63:b5:38:e8:2f:1f:
                    3f:07:f9:d1:7a:fa:dc:1c:bb:ad:45:08:45:8a:92:
                    7d:82:b7:12:4a:b7:e4:64:68:3c:f0:11:d0:55:64:
                    d4:b9:e6:cc:4c:22:f9:85:90:15:61:93:65:b2:ee:
                    78:e0:40:2e:84:3d:14:5d:77:9f:9c:28:4f:0f:7f:
                    f2:6e:d9:e5:83:1d:cf:6a:92:d4:b2:26:4b:6e:7f:
                    e6:ee:37:c9:91:4b:71:e3:f5:e6:8f:dc:b0:2f:1e:
                    4c:33:43:26:e4:9e:6e:1a:ab:4b:77:f6:b8:33:ab:
                    bd:6c:92:45:cc:c4:ad:01:bd:63:f7:11:c7:76:c2:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:87:F9:B7:AA:4E:90:23:A4:D7:9B:EF:7A:D4:17:F9:5E:4A:CC:FB
            X509v3 Authority Key Identifier:
                keyid:2E:E4:7E:3C:81:87:4A:01:83:A8:DA:F4:2D:ED:9A:D9:94:C4:77:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/2EE47E3C81874A0183A8DAF42DED9AD994C477CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LuR-PIGHSgGDqNr0Le2a2ZTEd88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/3130332e3234352e32332e302f32342d3234203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:b3:51:f2:11:94:9f:58:35:c6:63:aa:ed:fb:38:8c:76:12:
         e3:34:88:87:b1:2f:ec:20:35:7b:10:6f:6d:8c:ff:cc:15:44:
         c0:a7:44:d9:46:ce:57:fc:fd:70:60:c2:53:33:ae:a1:20:21:
         d8:d0:30:53:af:45:99:ae:b4:93:b7:3f:c9:f6:cf:66:ff:3e:
         85:23:fc:68:6d:6b:d8:4c:23:3a:5a:c4:30:a3:1b:55:9b:00:
         04:1b:4d:31:8b:08:c7:ee:2c:da:45:cc:d4:54:22:4f:ce:a1:
         46:3e:11:4f:ac:d2:74:e4:66:18:5f:37:55:58:19:3c:76:37:
         13:77:61:20:8c:7f:70:45:ba:52:44:8c:8b:d1:05:5c:56:31:
         b7:7f:8f:15:8a:6b:4e:c7:6d:2a:74:3f:70:8c:ba:f9:b1:6b:
         44:1c:46:6f:ce:a0:fe:c5:3c:f6:6e:f6:e8:79:31:02:de:8a:
         fd:57:f1:c9:e5:2d:c6:ec:9c:f0:0c:ea:61:c4:2b:42:d5:c0:
         d9:56:d5:a4:da:3b:c6:b4:32:c8:e5:66:3b:77:ea:9c:df:f8:
         ad:41:f9:44:a7:f7:91:02:f3:04:64:79:20:a3:80:5f:e9:60:
         93:3c:5d:ad:38:c9:96:11:3e:a0:21:0a:3d:28:e4:87:29:df:
         36:f7:cf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:55:45 2026 by rpki-client