Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa
File:                     3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          taR2PO9xYF/2YfQ1M3QrhkhMJOByxm8xtfd0+hZHWQ4=
Subject key identifier:   A6:A1:14:89:CC:0B:5C:F3:29:BF:89:DC:6B:52:13:6C:CB:D5:DB:E6
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       1C52B5710CFACCBA73DF2105A680C6FBC4742933
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa
Signing time:             Thu 25 Jun 2026 07:05:14 +0000
ROA not before:           Thu 25 Jun 2026 07:00:14 +0000
ROA not after:            Thu 24 Jun 2027 07:05:14 +0000
asID:                     151263
IP address blocks:        103.255.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:52:b5:71:0c:fa:cc:ba:73:df:21:05:a6:80:c6:fb:c4:74:29:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:00:14 2026 GMT
            Not After : Jun 24 07:05:14 2027 GMT
        Subject: CN=A6A11489CC0B5CF329BF89DC6B52136CCBD5DBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:01:ce:a3:9d:bf:3c:bd:31:ec:07:ce:9e:
                    aa:35:a3:a7:e8:6e:39:ee:b4:25:27:fe:e2:db:39:
                    af:46:0d:92:ea:2a:c3:f3:df:c1:4f:d3:5a:27:fa:
                    5d:1f:87:f9:f1:d3:36:b7:79:5b:16:56:37:7f:37:
                    11:07:50:c6:03:87:13:18:b7:6d:00:af:a0:b3:b8:
                    87:a0:14:c6:23:e3:38:b6:a5:f5:f6:28:63:cc:2a:
                    d5:f2:0e:f8:9a:4a:4f:24:11:d5:5f:8b:aa:40:5c:
                    ff:f0:4e:fd:7a:ad:0a:02:66:0f:f6:dd:18:60:b0:
                    74:ba:2f:f2:04:7d:59:b8:61:f4:ea:03:9a:5b:a7:
                    f2:54:1e:c5:34:8c:ed:a4:47:71:bc:95:4a:43:12:
                    37:8c:9b:b9:8c:73:b6:14:cb:f4:f2:ca:2d:70:a4:
                    aa:54:2a:f0:39:5a:7e:cf:ca:90:36:32:ef:1c:24:
                    67:e1:b9:34:e3:2a:7f:41:57:6b:79:80:b2:9d:ce:
                    86:7f:46:4a:50:26:c0:b5:c3:c3:4d:25:eb:f7:48:
                    cc:48:60:47:ab:bc:53:d1:06:59:ff:52:e6:9d:e6:
                    e8:89:fc:5c:d3:e1:98:1a:ec:c3:04:d7:32:5f:bd:
                    dc:b5:10:60:8b:f9:99:71:d2:7e:ba:d4:d0:6f:c5:
                    b9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A1:14:89:CC:0B:5C:F3:29:BF:89:DC:6B:52:13:6C:CB:D5:DB:E6
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e36392e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:74:bd:db:d3:8d:4c:1a:58:39:58:36:36:94:9d:12:09:19:
         25:ae:74:0a:0b:4f:7a:6f:58:8c:bc:cb:ef:e6:b5:1c:44:9f:
         7b:bd:c2:e9:1a:01:f0:6a:83:29:94:d7:8a:d3:43:11:84:ff:
         45:12:1f:96:c2:9c:d9:8c:00:25:c3:bc:1a:41:9f:10:2e:75:
         e6:8b:52:34:1c:54:e1:13:f9:fe:d2:5e:66:af:ab:16:08:b2:
         73:03:4a:c2:91:55:6b:a1:e4:7c:d4:fa:48:58:2b:fc:66:26:
         d3:74:40:40:6f:94:af:d4:1a:ee:4c:71:67:73:22:73:9b:2d:
         4d:88:f0:62:e3:c4:f4:64:48:7c:0b:15:e0:38:b0:f2:f6:ed:
         42:d5:db:2c:e7:3a:25:b6:d6:5b:52:cb:46:5b:ae:7e:c9:d2:
         9b:b5:b0:44:b7:da:73:e6:4a:18:8b:90:b6:bd:9b:98:0f:1d:
         fb:f9:fa:b8:07:ef:ae:60:e3:a2:ea:c1:68:3c:d1:0c:33:fd:
         43:02:5f:11:32:50:eb:3b:de:5f:7b:c2:09:da:66:73:2c:70:
         91:d0:2b:c1:2a:bc:d9:d9:2f:ab:88:09:84:e1:34:96:4b:e7:
         6b:d1:4c:c8:00:06:13:63:20:09:89:be:82:7e:d8:6b:0c:e9:
         a1:c2:ce:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:54:04 2026 by rpki-client