Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37372e302f32342d3234203d3e203538343636.roa
File:                     3130332e35362e37372e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          chBgBk+jhYLzhqNLC9Wumx3OD/gmhPMrOo1fCvHxlng=
Subject key identifier:   88:1B:75:06:BD:D1:C1:BD:96:00:3D:3E:5A:FB:48:47:40:A0:20:DD
Certificate issuer:       /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial:       035F1663F0D9D2A0D7D0C09CF562F51FA8134DEF
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37372e302f32342d3234203d3e203538343636.roa
Signing time:             Mon 13 Apr 2026 02:27:54 +0000
ROA not before:           Mon 13 Apr 2026 02:22:54 +0000
ROA not after:            Mon 12 Apr 2027 02:27:54 +0000
asID:                     58466
IP address blocks:        103.56.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 09:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5f:16:63:f0:d9:d2:a0:d7:d0:c0:9c:f5:62:f5:1f:a8:13:4d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
        Validity
            Not Before: Apr 13 02:22:54 2026 GMT
            Not After : Apr 12 02:27:54 2027 GMT
        Subject: CN=881B7506BDD1C1BD96003D3E5AFB484740A020DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:9e:94:24:2a:de:fa:43:ad:05:ae:42:ea:
                    5d:a1:84:b0:24:47:10:d6:ff:aa:08:56:e4:c6:cb:
                    3f:f6:24:c5:46:ec:c7:cf:44:6e:03:03:9b:8b:0f:
                    e9:bb:43:bc:59:22:52:40:d2:c9:1e:2e:85:ba:21:
                    51:8b:23:c9:48:42:4a:0d:fd:ca:25:17:e1:71:80:
                    f4:19:46:1f:f0:79:74:02:c5:88:fb:c0:54:81:82:
                    4a:04:fc:ef:04:a7:a4:47:7c:f0:b8:75:58:e0:9b:
                    07:4d:fd:54:b2:ca:b5:4f:e1:d8:bc:88:0d:a8:a5:
                    3c:25:73:e1:9e:58:d0:ec:34:19:4c:ae:3e:b3:8e:
                    a4:25:5a:f3:2c:b9:47:4d:56:6b:98:e9:d8:4b:e6:
                    a2:0a:9e:b6:f4:35:8c:b4:3a:43:2c:0b:ba:ad:88:
                    1d:85:f0:08:e2:c6:c1:74:b8:8c:0c:62:c2:bc:71:
                    fd:81:41:81:63:81:44:d9:83:45:b3:e9:68:74:f6:
                    55:fa:10:f4:78:9e:da:24:08:b7:4c:fd:4f:35:ed:
                    af:ff:27:ac:fb:5c:8d:c5:28:2a:b2:bd:48:c7:d8:
                    28:6e:86:6a:61:ae:83:53:0b:0c:13:d2:2b:45:2f:
                    ac:cc:d6:f8:bc:8f:34:8b:98:0f:32:4f:da:5d:86:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1B:75:06:BD:D1:C1:BD:96:00:3D:3E:5A:FB:48:47:40:A0:20:DD
            X509v3 Authority Key Identifier:
                keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37372e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:de:00:d4:05:6b:77:3b:ba:c8:3b:15:75:7c:7f:83:68:3e:
         4e:1a:a4:4e:dc:7a:6b:eb:26:69:23:8a:5a:21:4b:b7:6e:b9:
         31:99:f3:d9:d3:dc:07:9a:7e:f0:4d:7f:6f:7e:b6:a8:3d:2b:
         8c:49:e0:98:c0:30:24:bf:56:7d:98:bb:97:1d:4c:58:c0:93:
         de:8a:a4:80:c8:b3:35:3a:1c:6a:90:e2:f9:d1:72:10:c8:08:
         3a:90:3c:88:34:54:6d:ab:91:63:19:fc:68:22:de:d0:3d:90:
         9e:85:6f:58:fd:5e:74:b9:bb:9a:ed:08:73:61:c1:4d:8e:f1:
         de:b6:70:d0:92:26:0a:eb:69:a2:54:95:8c:25:f2:35:ed:61:
         44:6d:63:f9:4e:80:e0:dd:72:5b:24:1f:b6:14:00:10:ab:6e:
         d7:07:10:8c:8b:b7:c2:b9:10:da:17:f7:a5:3e:f2:fc:c0:e1:
         12:11:23:aa:f3:6b:fc:4f:ee:5e:af:d1:79:0b:75:ee:52:67:
         ad:bc:96:07:be:23:66:ea:0f:59:8c:8e:52:f7:a0:cc:a7:15:
         e0:a8:dd:42:c0:df:4a:e1:ca:51:30:8c:60:63:36:c0:6c:9a:
         a6:02:96:ed:b1:04:63:03:c2:78:07:85:16:fe:32:6e:ad:f7:
         29:92:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:57 2026 by rpki-client