Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa
File:                     3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          132KQY0hIZGzZXT+Y1rqiKxW6vJKn4uICuU2IbmuOaA=
Subject key identifier:   AC:30:57:89:BC:82:27:3E:E1:DF:13:97:1D:D9:5D:22:79:40:FD:B4
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       76C6A21BCD3FBAE8DB6C5F28B94EDBC0B9D06EFC
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa
Signing time:             Thu 25 Jun 2026 07:09:54 +0000
ROA not before:           Thu 25 Jun 2026 07:04:54 +0000
ROA not after:            Thu 24 Jun 2027 07:09:54 +0000
asID:                     151263
IP address blocks:        103.45.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c6:a2:1b:cd:3f:ba:e8:db:6c:5f:28:b9:4e:db:c0:b9:d0:6e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:04:54 2026 GMT
            Not After : Jun 24 07:09:54 2027 GMT
        Subject: CN=AC305789BC82273EE1DF13971DD95D227940FDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:9f:ec:ff:8e:fa:b4:c9:05:70:93:86:2c:
                    cc:f1:8a:bf:fb:dd:cb:77:68:fe:40:8b:e7:d3:8d:
                    94:bf:be:cf:ad:91:5e:8a:36:b7:e0:46:86:62:0f:
                    fc:d4:d4:b8:3e:0d:96:e3:de:26:73:89:28:1a:7f:
                    d7:ac:dd:2d:2b:9b:ff:35:40:73:11:08:8a:c2:21:
                    2a:34:ef:b0:94:e0:f7:27:48:d1:84:17:30:d1:0a:
                    84:d4:99:f0:4d:43:2a:bf:00:87:3a:af:07:d1:fb:
                    85:55:e2:5f:2f:ca:2d:c2:a7:4d:b7:ad:f9:80:35:
                    57:5e:83:76:95:98:ac:22:33:85:4c:13:c5:50:5a:
                    33:53:16:b1:34:7a:b9:09:c6:9a:42:8e:3a:8d:b7:
                    3c:95:93:d0:56:04:74:36:59:2f:ce:5b:d9:83:b0:
                    36:14:54:11:8a:e5:71:35:2b:af:37:7c:65:40:6d:
                    0b:95:62:28:13:33:a5:7c:ee:55:d8:5a:34:81:c9:
                    fb:c4:51:45:3a:3d:7f:15:2c:9c:fc:f7:67:04:e5:
                    7d:bc:f8:41:ae:60:7b:ee:35:6e:e4:6d:18:b6:12:
                    33:02:ae:79:d8:62:79:37:b3:bd:a7:87:03:e1:a4:
                    b1:f7:58:cf:8a:2c:d2:fc:42:1d:fd:f8:eb:6b:cd:
                    65:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:30:57:89:BC:82:27:3E:E1:DF:13:97:1D:D9:5D:22:79:40:FD:B4
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133332e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:42:ee:11:f1:e7:7f:07:5f:60:68:f9:f9:73:eb:bd:44:58:
         8d:4e:02:55:25:4a:f4:f5:1b:6c:45:87:35:2e:da:ec:0c:bf:
         10:57:a1:08:9e:bf:53:f9:17:07:bf:e8:5f:a6:89:77:1d:4e:
         26:77:a0:70:4f:c9:3b:8e:8f:8f:7e:e8:d3:93:08:7c:e6:08:
         2b:20:9d:41:c8:4f:42:0d:67:ac:0c:cc:f0:e3:63:ea:50:9a:
         94:49:79:e5:54:be:83:9d:f2:db:9f:e0:b5:82:0a:2b:59:f1:
         85:e5:b0:c4:0b:b7:a2:c3:87:0e:ca:bf:15:79:0f:98:a0:3b:
         11:03:46:45:82:c9:70:04:b9:64:8f:98:ea:88:f4:26:19:e0:
         9f:91:87:85:c4:35:ca:c4:bf:43:ef:94:23:f7:0e:c9:b0:5b:
         2d:7e:7b:2f:17:58:b6:90:59:03:d6:d1:9f:89:bd:37:9e:7c:
         ed:b4:4a:12:66:8a:6f:a4:bd:9a:f4:ec:58:84:26:4d:31:07:
         dd:fe:37:49:08:86:94:60:40:08:aa:ed:49:84:7f:11:3f:80:
         22:10:d1:db:03:4e:78:76:8b:4e:48:8f:e1:88:13:e9:1f:5c:
         6e:7a:3b:65:2e:8e:82:2c:52:ec:51:5a:fb:b9:5d:a8:fc:44:
         c8:6d:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:54:01 2026 by rpki-client