Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203233363530.roa
File:                     3130332e34352e3136302e302f32322d3234203d3e203233363530.roa (raw, json)
Hash identifier:          +jhx14tTvvinoV44EszvY5yS7+24N9TYVeHEGp6EPzg=
Subject key identifier:   C7:80:86:A5:90:80:B8:E0:90:8B:D4:A8:BC:E6:32:7F:AD:DB:34:7B
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       68BD8A44EF64B8D28A3A72E82F4C70657D8C219D
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203233363530.roa
Signing time:             Fri 17 Apr 2026 01:42:17 +0000
ROA not before:           Fri 17 Apr 2026 01:37:17 +0000
ROA not after:            Fri 16 Apr 2027 01:42:17 +0000
asID:                     23650
IP address blocks:        103.45.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bd:8a:44:ef:64:b8:d2:8a:3a:72:e8:2f:4c:70:65:7d:8c:21:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 17 01:37:17 2026 GMT
            Not After : Apr 16 01:42:17 2027 GMT
        Subject: CN=C78086A59080B8E0908BD4A8BCE6327FADDB347B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:45:9a:ff:24:26:ee:0a:8d:bb:aa:3f:82:
                    f9:42:47:d5:9d:63:26:64:21:c8:bf:69:a9:94:6d:
                    a2:36:04:e4:2d:02:35:d2:69:50:01:9b:b9:a6:8b:
                    08:fd:de:81:b1:04:7a:a7:a8:fd:e1:bf:90:b0:e4:
                    c2:32:03:12:e4:81:c0:3b:b1:e1:0c:bf:75:f9:77:
                    ac:e2:21:64:7b:fb:77:89:97:13:d6:c1:d7:c2:e9:
                    82:a1:c4:56:61:f6:5e:35:f5:06:00:2d:1a:e9:64:
                    de:a2:50:66:93:da:cc:b3:fd:49:e2:ea:59:1b:22:
                    e2:f5:10:64:82:9e:80:c4:54:69:fd:ee:76:56:d2:
                    c0:2f:19:e0:95:28:f5:f3:4e:1e:87:eb:86:8c:9a:
                    d9:b2:1d:a9:d6:8b:12:79:11:c6:76:b3:42:80:0c:
                    a8:c4:77:fa:16:bd:47:67:86:d5:a4:93:ff:5b:20:
                    ee:74:0c:31:a5:04:bf:75:a6:e5:7d:81:3f:ac:3f:
                    15:84:38:48:84:8d:71:90:66:2b:e2:c3:9e:cc:20:
                    7a:c8:41:17:73:10:04:b8:df:0a:dc:11:a4:bd:40:
                    f0:59:9a:fb:e6:89:b9:1d:d2:87:f7:c2:27:08:96:
                    e4:ac:4e:ff:5f:f9:cf:70:26:57:e2:67:40:7b:e9:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:80:86:A5:90:80:B8:E0:90:8B:D4:A8:BC:E6:32:7F:AD:DB:34:7B
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34352e3136302e302f32322d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:87:5b:3d:0e:5c:04:f7:4a:da:f8:0b:73:aa:db:6e:09:16:
         e2:9a:df:fa:27:d2:7d:5f:85:1c:4e:75:e4:2a:10:c4:aa:00:
         52:37:d0:ca:21:95:cc:1c:00:04:3f:b5:3c:3d:b4:39:f6:42:
         1d:7c:35:c8:99:55:aa:40:ec:96:a5:44:9b:34:63:16:3d:a6:
         08:56:be:cf:3f:88:35:d7:f1:42:94:8f:55:dd:15:ab:96:1c:
         1b:54:6b:4f:97:59:ec:59:17:6f:66:71:80:1e:47:78:0b:03:
         31:c9:f1:eb:fa:7d:d8:80:70:d7:d1:cb:3e:85:74:8b:21:80:
         26:4f:f7:4c:f0:77:4e:a1:49:75:37:5e:7b:dd:0e:5e:4b:e0:
         60:59:09:7c:4c:1a:d3:ca:ac:03:8f:83:59:73:ea:92:2a:61:
         bc:2e:85:e0:36:3c:c0:a9:2a:69:fc:53:5a:be:42:33:03:2c:
         bf:ca:7f:26:2d:4c:24:d4:a0:d6:5f:72:2b:9e:d9:e1:85:0e:
         0b:88:28:5f:14:f6:64:84:c7:47:fd:94:62:cb:bc:7a:b6:e4:
         61:45:6a:9e:db:03:37:0b:81:e0:0d:1d:96:96:b7:f8:71:a9:
         1c:73:7a:14:15:69:c1:44:85:8b:6c:cc:b8:73:ba:05:4a:00:
         06:9b:99:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:51:45 2026 by rpki-client