Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3135362e37382e302f32332d3234203d3e203231383539.roa
File:                     3130332e3135362e37382e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier:          Nc3wGfCMThvQd+bqUSNmuME0vCXe9XwNOalM21iiOq4=
Subject key identifier:   46:7C:EE:3B:74:16:23:39:01:BE:88:91:C8:4B:D6:2F:CF:2F:77:54
Certificate issuer:       /CN=E23C4800CA452B1A8E6214923C01540E30830232
Certificate serial:       757ED2D2025C04A44058762304E625988C15473A
Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3135362e37382e302f32332d3234203d3e203231383539.roa
Signing time:             Sun 15 Feb 2026 03:06:24 +0000
ROA not before:           Sun 15 Feb 2026 03:01:24 +0000
ROA not after:            Sun 14 Feb 2027 03:06:24 +0000
asID:                     21859
IP address blocks:        103.156.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 05:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7e:d2:d2:02:5c:04:a4:40:58:76:23:04:e6:25:98:8c:15:47:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232
        Validity
            Not Before: Feb 15 03:01:24 2026 GMT
            Not After : Feb 14 03:06:24 2027 GMT
        Subject: CN=467CEE3B7416233901BE8891C84BD62FCF2F7754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e6:fb:5b:01:e5:5a:a7:7a:93:f3:b8:01:a0:
                    62:40:d1:85:f5:4e:bc:a0:70:e1:50:8d:e2:43:b5:
                    f4:6e:24:c0:05:2a:67:31:b7:13:f1:98:ae:b7:13:
                    c9:46:46:ff:bc:80:ea:33:35:5d:6b:4b:de:7c:fe:
                    a7:dd:93:a0:b9:b6:76:20:d8:98:65:3b:23:fc:e1:
                    2b:6d:b9:38:9d:4f:88:f2:56:40:66:57:ee:26:be:
                    a8:a3:ba:ad:ba:8d:85:60:b0:fc:8c:67:5d:d9:fe:
                    32:cb:63:3c:09:8c:78:90:c1:a3:1b:7f:c8:4a:42:
                    2c:e2:a1:ae:95:54:47:f4:d8:0e:48:0f:ff:15:ee:
                    02:31:a9:8c:ec:99:39:42:25:75:74:9b:bc:ab:c7:
                    3e:e6:09:35:86:12:37:08:7e:0f:22:9a:74:f3:1c:
                    cb:75:d0:fa:4a:cb:94:f8:c7:16:a2:16:b6:40:fd:
                    e5:bb:be:c1:bf:23:f7:95:f8:ca:e2:f4:27:b5:91:
                    be:17:8b:c7:7f:27:28:aa:ea:17:65:e7:d6:60:60:
                    a0:e0:02:c1:bc:0c:ec:53:3b:af:bc:51:4c:f9:57:
                    28:dd:6d:71:ec:af:42:f3:c6:ae:8f:a3:db:94:31:
                    12:9b:a9:27:5a:26:2a:47:c1:3f:31:93:19:e6:99:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7C:EE:3B:74:16:23:39:01:BE:88:91:C8:4B:D6:2F:CF:2F:77:54
            X509v3 Authority Key Identifier:
                keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3135362e37382e302f32332d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:3f:2a:24:dc:06:ce:7e:7a:7a:88:5d:6d:07:b7:c0:7e:
         c0:2c:61:0b:84:94:90:6c:d2:d9:06:92:9f:25:64:99:79:f1:
         c1:26:a3:c1:1f:63:20:8f:b4:49:33:83:0a:29:ff:76:9e:c2:
         e1:e2:53:ee:39:a9:3f:68:00:a3:1a:9a:63:be:9d:11:22:d6:
         c3:38:84:2b:aa:b5:3c:d1:3f:e9:50:ef:d2:3d:63:fc:92:8c:
         aa:09:73:86:82:3e:b6:10:7c:02:46:3a:8d:d6:02:17:9a:ba:
         17:95:bf:23:40:c2:03:00:f4:48:df:78:67:ea:f6:15:04:7a:
         6c:84:d4:ad:d6:23:1d:be:6e:93:4d:02:5f:5a:ef:e3:9f:08:
         61:8a:56:15:f6:73:2a:36:33:ee:a1:9e:9e:e0:a5:d4:09:c7:
         f9:9b:a2:be:a7:38:30:51:e7:4c:ac:f7:20:51:ed:3b:7d:49:
         5a:60:a5:0e:4c:77:d2:6e:2c:e3:f7:77:1d:f0:3b:2f:84:8b:
         d5:1d:0f:db:47:d9:13:93:7a:b7:e5:bf:f9:14:8f:50:51:f8:
         4a:46:5d:7c:fb:d4:51:47:60:7b:9b:66:c2:1b:8b:75:17:a1:
         b4:9b:ce:1a:02:22:49:c1:c4:c4:43:7e:5c:00:10:b3:0e:26:
         c6:9f:a8:94
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdX7S0gJcBKRAWHYjBOYlmIwVRzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz
MDgzMDIzMjAeFw0yNjAyMTUwMzAxMjRaFw0yNzAyMTQwMzA2MjRaMDMxMTAvBgNV
BAMTKDQ2N0NFRTNCNzQxNjIzMzkwMUJFODg5MUM4NEJENjJGQ0YyRjc3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ5vtbAeVap3qT87gBoGJA0YX1
TrygcOFQjeJDtfRuJMAFKmcxtxPxmK63E8lGRv+8gOozNV1rS958/qfdk6C5tnYg
2JhlOyP84SttuTidT4jyVkBmV+4mvqijuq26jYVgsPyMZ13Z/jLLYzwJjHiQwaMb
f8hKQizioa6VVEf02A5ID/8V7gIxqYzsmTlCJXV0m7yrxz7mCTWGEjcIfg8imnTz
HMt10PpKy5T4xxaiFrZA/eW7vsG/I/eV+Mri9Ce1kb4Xi8d/Jyiq6hdl59ZgYKDg
AsG8DOxTO6+8UUz5VyjdbXHsr0Lzxq6Po9uUMRKbqSdaJipHwT8xkxnmmcAVAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQURnzuO3QWIzkBvoiRyEvWL88vd1QwHwYDVR0j
BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1
NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0NzM4ODkyOS8wLzMxMzAzMzJlMzEz
NTM2MmUzNzM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMTM4MzUzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWecTjANBgkqhkiG9w0BAQsFAAOCAQEAl30/KiTcBs5+enqIXW0Ht8B+
wCxhC4SUkGzS2QaSnyVkmXnxwSajwR9jII+0STODCin/dp7C4eJT7jmpP2gAoxqa
Y76dESLWwziEK6q1PNE/6VDv0j1j/JKMqglzhoI+thB8AkY6jdYCF5q6F5W/I0DC
AwD0SN94Z+r2FQR6bITUrdYjHb5uk00CX1rv458IYYpWFfZzKjYz7qGenuCl1AnH
+Zuivqc4MFHnTKz3IFHtO31JWmClDkx30m4s4/d3HfA7L4SL1R0P20fZE5N6t+W/
+RSPUFH4SkZdfPvUUUdge5tmwhuLdRehtJvOGgIiScHExEN+XAAQsw4mxp+olA==
-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:12 2026 by rpki-client