Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132392e302f32342d3234203d3e20313531323332.roa
File:                     3130332e34352e3132392e302f32342d3234203d3e20313531323332.roa (raw, json)
Hash identifier:          OBrkWdRjgKEO3E4GhTiDJvxctDc2qqs8jrnUx+FlbGQ=
Subject key identifier:   A8:6E:7E:88:FB:E0:69:BF:AB:D7:24:A5:42:F8:96:26:53:14:C8:8A
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       7440A13E9584C776F484D822C9D8255862503354
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132392e302f32342d3234203d3e20313531323332.roa
Signing time:             Thu 25 Jun 2026 07:06:14 +0000
ROA not before:           Thu 25 Jun 2026 07:01:14 +0000
ROA not after:            Thu 24 Jun 2027 07:06:14 +0000
asID:                     151232
IP address blocks:        103.45.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:40:a1:3e:95:84:c7:76:f4:84:d8:22:c9:d8:25:58:62:50:33:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:01:14 2026 GMT
            Not After : Jun 24 07:06:14 2027 GMT
        Subject: CN=A86E7E88FBE069BFABD724A542F896265314C88A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:32:4a:81:a1:f9:2e:9d:9d:21:d5:70:5f:
                    5e:44:0e:e1:c8:e2:b4:1d:c9:21:50:f0:e0:62:ec:
                    29:45:f0:ab:c4:03:c6:a4:fd:10:4a:74:21:46:55:
                    e7:d0:51:48:f7:a4:70:e9:86:96:9d:b7:d7:0a:32:
                    e7:c1:5e:20:10:64:c6:24:59:b5:99:1e:18:27:57:
                    e1:79:8f:bf:ac:65:0f:31:7d:b7:8b:df:e8:33:9a:
                    ac:db:20:60:37:6d:36:01:f0:3a:19:58:05:36:50:
                    b1:39:04:73:d5:c5:8e:77:42:fa:15:27:6e:76:2a:
                    4a:10:3c:91:76:04:89:d7:74:9a:3a:05:3d:31:6e:
                    e2:36:75:5d:de:67:88:4e:7b:fe:7d:fe:21:03:be:
                    67:1e:5f:fa:41:94:da:81:10:06:7d:42:69:b5:df:
                    f5:c7:30:fd:e1:6c:18:8f:5e:ae:18:9a:3a:1d:e6:
                    fa:68:e3:2c:9a:ad:e0:7b:24:13:48:fb:08:ac:66:
                    63:50:05:59:b3:0b:95:a2:4e:da:e4:f2:fd:b3:43:
                    bc:dc:89:b9:3c:da:24:10:56:25:03:13:31:ff:d0:
                    b5:28:02:0c:cd:de:a5:b9:3b:1a:93:4a:51:0b:40:
                    d8:12:9c:c3:75:76:29:d6:65:87:4b:e1:9a:37:25:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6E:7E:88:FB:E0:69:BF:AB:D7:24:A5:42:F8:96:26:53:14:C8:8A
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132392e302f32342d3234203d3e20313531323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:1c:c5:b2:12:26:46:63:7f:44:48:0b:99:6a:ec:1f:32:
         15:9d:22:53:32:0a:27:d7:0e:f9:25:58:9a:c3:48:95:d8:8b:
         2f:29:9a:7f:c0:44:06:5b:bb:05:8e:7b:6d:98:4c:31:10:84:
         e3:ee:5b:ad:2e:17:1c:46:52:94:87:ab:05:db:ce:44:0a:9c:
         73:9e:f9:06:2c:c5:a8:22:02:9e:93:b4:65:32:5a:e9:f1:da:
         f7:5e:a6:dc:15:37:42:4f:45:2f:7a:66:66:28:56:df:f6:01:
         9d:10:10:58:a7:70:97:99:2c:08:1c:9a:80:ef:41:90:58:87:
         4e:d2:a7:ef:35:d8:98:6f:5b:3f:ea:b8:5b:ee:78:e4:0d:bb:
         16:7a:1f:db:17:97:58:57:02:f6:cf:66:93:1e:2c:8e:15:c2:
         14:9b:44:e9:52:31:ae:75:12:7a:98:d9:11:a2:c5:cf:fd:ef:
         54:1c:79:e5:59:eb:aa:9c:27:33:e1:5d:a6:1d:8c:4b:72:23:
         0a:d6:0c:0b:0f:bc:77:28:89:4b:bc:e1:80:eb:23:79:c3:dd:
         32:1a:b3:ab:12:f5:17:5f:43:42:a6:62:ef:92:41:b8:0a:87:
         89:dc:5f:33:07:40:67:49:97:40:50:af:f9:b7:b7:30:35:66:
         64:2c:95:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:36 2026 by rpki-client