Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134362e302f32332d3233203d3e203539303337.roa
File:                     3130332e34342e3134362e302f32332d3233203d3e203539303337.roa (raw, json)
Hash identifier:          rHQ7i67QVbv7UeG4FistERhMrrRQTHI8KoVozQIGVrM=
Subject key identifier:   4F:72:6B:4D:81:AA:68:A7:97:8E:4E:EF:DE:61:E3:C8:73:79:62:57
Certificate issuer:       /CN=1133679B2C104A0446FA0C3764EEE246C5D21075
Certificate serial:       4DF37239F5D4DB3667B6DEEB2E17979CD6B0B42D
Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134362e302f32332d3233203d3e203539303337.roa
Signing time:             Wed 03 Jun 2026 00:54:18 +0000
ROA not before:           Wed 03 Jun 2026 00:49:18 +0000
ROA not after:            Wed 02 Jun 2027 00:54:18 +0000
asID:                     59037
IP address blocks:        103.44.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f3:72:39:f5:d4:db:36:67:b6:de:eb:2e:17:97:9c:d6:b0:b4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075
        Validity
            Not Before: Jun  3 00:49:18 2026 GMT
            Not After : Jun  2 00:54:18 2027 GMT
        Subject: CN=4F726B4D81AA68A7978E4EEFDE61E3C873796257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:32:e4:c2:53:da:82:9c:df:c2:19:24:0e:
                    35:cf:90:c8:8b:af:7c:79:b6:4a:d4:fe:60:ce:91:
                    46:a3:27:a4:53:88:b5:0f:b0:49:1f:82:9c:d0:6d:
                    72:00:14:0d:d7:a2:66:ac:11:c4:59:f0:59:c0:00:
                    27:07:93:d6:b2:d5:3d:ff:ea:48:09:db:4d:b0:94:
                    fc:26:0a:72:52:7c:cc:15:1a:d5:da:bf:49:58:66:
                    e8:ac:5e:37:51:42:a4:7c:a8:70:61:32:e1:cf:50:
                    2f:90:2b:70:21:1b:ce:34:49:24:ba:aa:c4:fe:66:
                    4b:df:aa:e9:08:9c:54:e7:b5:aa:60:24:3f:3d:d7:
                    3a:5b:39:d7:b1:9d:72:b5:fb:0b:f0:09:3b:90:86:
                    d2:32:1d:4f:4b:b4:ab:62:65:1b:d3:fe:6e:9d:99:
                    d1:44:b2:2f:48:69:c5:54:e4:f7:2b:75:70:79:cb:
                    5d:22:16:49:aa:a5:7e:27:70:6f:2d:ee:08:eb:d3:
                    c6:8f:7e:52:51:f9:0b:dc:e2:bd:05:9f:c4:88:27:
                    40:d2:94:24:8d:64:5c:9c:6f:d6:94:3e:93:61:fe:
                    df:30:9e:ef:cb:38:12:50:a1:8c:30:5e:99:0c:06:
                    25:6b:96:cc:95:ec:ca:0e:4f:b6:99:9c:52:55:8a:
                    f3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:72:6B:4D:81:AA:68:A7:97:8E:4E:EF:DE:61:E3:C8:73:79:62:57
            X509v3 Authority Key Identifier:
                keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134362e302f32332d3233203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:a6:36:d3:78:d7:6c:53:df:15:82:48:bc:2d:73:ee:7b:27:
         b9:62:9a:48:c5:e6:34:d7:88:47:14:1c:d9:86:1c:26:8c:88:
         b9:bc:9a:6b:d3:52:8c:1b:6c:ed:07:bc:f8:79:b0:e0:b1:a6:
         bb:be:df:10:36:b0:74:56:2a:7f:f6:5d:d8:6c:4b:f4:13:b7:
         09:da:f1:c3:cd:2f:6c:11:85:12:12:c5:29:80:c0:a8:cf:d8:
         fe:8e:de:89:e0:f8:af:e6:cd:66:65:ab:28:a9:6c:94:8f:ce:
         8a:8f:00:5f:55:d6:10:6b:ba:fa:29:8f:40:9a:cf:9f:4c:41:
         7f:53:1a:4f:64:1f:b1:d0:d0:59:ea:16:f1:3a:9d:e6:b1:10:
         10:a3:64:b7:2d:62:37:d2:52:5d:e2:39:59:c7:f3:b6:f1:94:
         15:74:39:b5:9e:79:a6:7a:78:1e:15:e6:ad:7a:09:84:fe:d0:
         4d:26:7c:f3:9e:62:48:c1:bc:30:79:4b:c9:58:dd:44:27:9e:
         50:04:39:80:c2:7d:95:a3:0a:65:50:1e:f6:af:4d:ba:b5:c5:
         68:32:93:6e:c8:ee:63:68:6c:f8:92:17:1e:34:20:ad:eb:ca:
         78:e6:ad:2c:e3:49:fb:fc:da:be:e6:11:1f:d7:16:98:d0:b7:
         38:5c:5a:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 14:07:05 2026 by rpki-client