Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa
File:                     3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa (raw, json)
Hash identifier:          6OtEuNz2GVGLvEPnp1uI15Y+vgwMkKwikkqR/oRSa24=
Subject key identifier:   9F:15:8A:5B:09:03:82:DA:65:B8:61:A6:9A:05:8E:CC:FA:FD:13:CE
Certificate issuer:       /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
Certificate serial:       0ED7854B421DDACAF199266E026022C4A15E274C
Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa
Signing time:             Mon 27 Apr 2026 01:23:31 +0000
ROA not before:           Mon 27 Apr 2026 01:18:31 +0000
ROA not after:            Mon 26 Apr 2027 01:23:31 +0000
asID:                     63654
IP address blocks:        103.116.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d7:85:4b:42:1d:da:ca:f1:99:26:6e:02:60:22:c4:a1:5e:27:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9
        Validity
            Not Before: Apr 27 01:18:31 2026 GMT
            Not After : Apr 26 01:23:31 2027 GMT
        Subject: CN=9F158A5B090382DA65B861A69A058ECCFAFD13CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:37:d5:f2:39:96:60:f8:04:8d:41:ac:18:4a:
                    ec:7c:31:7e:61:49:ac:7f:54:40:f1:09:83:6a:92:
                    d1:94:1b:ba:c4:1b:ac:71:d2:42:43:9c:73:38:2d:
                    8f:ee:b1:b3:ee:d9:ca:d1:89:7c:0e:c0:1a:8b:12:
                    64:a8:b8:a2:5d:80:14:2e:4a:62:2b:7a:13:ad:09:
                    33:ce:09:ba:05:86:93:ab:31:5a:d3:df:9d:9a:07:
                    e0:e0:33:0e:d7:29:08:1c:45:6b:8e:15:37:32:1c:
                    84:76:51:fb:d4:81:3c:b2:02:8e:2d:e2:1d:a6:a6:
                    b3:73:d7:e8:fd:a4:51:13:d5:07:22:5a:b7:9b:90:
                    d1:35:0b:0c:b4:7c:fe:4c:ba:ec:02:05:39:50:14:
                    97:8e:53:b0:e7:f2:9b:90:cc:ba:cd:85:f1:5d:76:
                    80:05:c0:5e:6f:35:e1:19:6c:8e:4b:0b:eb:3f:4e:
                    ca:2d:ef:0c:60:bd:26:35:b5:9c:e8:22:38:a3:26:
                    07:6e:55:6b:ef:31:10:f5:39:7a:ac:b2:9a:de:db:
                    08:33:1d:6e:e7:14:43:fc:09:38:b1:5e:a6:3f:b6:
                    88:2b:f3:9a:45:76:fd:66:81:a9:c3:05:f5:53:1b:
                    a8:de:ed:8f:03:99:b8:1d:5c:f6:34:03:85:24:4e:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:15:8A:5B:09:03:82:DA:65:B8:61:A6:9A:05:8E:CC:FA:FD:13:CE
            X509v3 Authority Key Identifier:
                keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132332e302f32342d3234203d3e203633363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:22:3e:3b:76:51:bb:a5:a0:bf:6e:2c:8f:d8:c7:85:97:8f:
         f0:90:74:a9:46:94:64:5e:f3:16:f3:b9:f1:97:9b:54:b3:b0:
         4e:4c:b5:1d:c5:27:f2:17:fe:76:6d:aa:bf:5e:11:5c:48:05:
         bc:e9:73:2e:e9:e2:57:b3:0b:79:f3:57:47:7d:f3:c9:56:6f:
         a9:d4:c0:9d:40:bc:c3:1b:60:fe:04:34:fd:fa:de:4f:26:aa:
         a8:39:40:45:3d:78:e6:bb:ba:37:40:58:c2:91:07:0b:85:fb:
         44:30:fb:95:f4:fa:09:23:f6:99:d9:c2:05:37:cf:a8:78:76:
         93:33:af:17:70:2d:4f:96:16:ac:01:fc:5c:28:2d:3c:2a:3e:
         aa:0e:24:87:7d:7f:d2:05:2f:19:33:cf:83:06:3e:97:5b:b3:
         59:82:cc:12:75:a5:39:0c:9a:51:6f:c8:1c:08:56:6f:6b:b0:
         63:fe:58:a7:ce:56:b8:db:09:d4:1a:3d:49:ca:ff:1d:f0:68:
         74:63:43:b6:d6:34:8f:d3:ac:0c:85:45:40:e3:6c:49:7b:a3:
         11:eb:f9:25:37:43:cc:1f:71:39:95:1c:4a:49:54:e0:e9:8a:
         d9:16:3c:93:4c:bb:2b:84:4d:48:1f:3a:d1:a4:68:67:ee:1d:
         e3:5e:57:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:38:21 2026 by rpki-client