Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133342e302f32342d3234203d3e20313531323633.roa
File:                     3130332e34352e3133342e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          DQTwY0qfdZ8phN/XPNDg9X0RnR/1sxeaTZvjwhB5bhw=
Subject key identifier:   47:02:2E:12:09:B3:3D:DF:B9:92:48:5C:5F:5C:B7:F9:6F:DF:95:14
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       0CE759F0C2AD3B3A45B1B2E3DA7A8A205F0EAD8F
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133342e302f32342d3234203d3e20313531323633.roa
Signing time:             Thu 25 Jun 2026 07:09:55 +0000
ROA not before:           Thu 25 Jun 2026 07:04:55 +0000
ROA not after:            Thu 24 Jun 2027 07:09:55 +0000
asID:                     151263
IP address blocks:        103.45.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e7:59:f0:c2:ad:3b:3a:45:b1:b2:e3:da:7a:8a:20:5f:0e:ad:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:04:55 2026 GMT
            Not After : Jun 24 07:09:55 2027 GMT
        Subject: CN=47022E1209B33DDFB992485C5F5CB7F96FDF9514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:8a:b9:1a:fe:43:a6:11:33:be:1d:0b:07:
                    3a:1d:29:7e:68:e4:9f:e6:a5:7a:a2:de:92:c4:c9:
                    7a:80:b3:c0:e0:99:49:76:90:6d:9f:af:40:ac:76:
                    a6:34:84:bf:64:ad:23:82:05:00:4e:c2:10:75:d5:
                    36:24:ea:74:99:78:e5:5f:2c:0c:84:b1:4a:1f:f3:
                    b4:a0:e0:6a:93:4f:5d:54:56:32:d6:5c:3c:5f:1e:
                    20:f3:9b:14:0a:18:aa:22:ba:87:b1:3e:1c:63:96:
                    f0:06:66:18:01:db:49:af:0d:1a:32:38:0f:01:6d:
                    e2:23:42:9a:9b:26:03:ee:b9:23:f8:ac:0b:3f:dc:
                    d1:9d:7f:28:0e:1c:0d:e8:03:94:1a:67:ca:5b:96:
                    f7:61:5d:ed:bc:58:31:ed:b1:ea:35:b5:43:71:89:
                    1a:24:d1:b1:e4:a1:62:27:a1:4f:d1:38:83:e7:63:
                    33:87:5b:55:ad:5c:4e:15:88:72:12:5e:d8:32:69:
                    a3:2b:bc:0a:cc:5c:5a:07:0a:01:79:cc:54:ae:2c:
                    92:c0:e7:0c:71:6f:cd:eb:48:88:13:43:77:a7:c0:
                    15:28:37:2f:12:47:ae:a6:1b:e4:cf:45:b4:ff:23:
                    3e:b1:65:d5:00:ac:0e:b0:0f:c0:fe:4f:e4:b1:b1:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:02:2E:12:09:B3:3D:DF:B9:92:48:5C:5F:5C:B7:F9:6F:DF:95:14
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133342e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f4:4f:15:d6:f4:9c:e2:bc:4d:36:c2:d0:13:14:dc:3d:a7:df:
         54:b1:5d:df:c8:3a:6c:1d:09:0d:fd:ad:bf:f0:2e:e8:fa:32:
         a6:1a:90:39:84:85:61:40:e1:09:f8:c0:8b:7a:29:4d:7c:9c:
         77:1a:d2:58:f2:b0:39:e1:e7:c8:2c:7a:c1:d5:26:55:02:69:
         90:be:f2:7c:1e:0a:b6:87:84:8d:e8:ab:c1:80:4d:10:d1:39:
         ef:da:3d:87:c9:d3:61:7a:27:ff:79:91:6b:86:b0:ce:63:69:
         a8:c0:50:bf:32:03:fa:8f:ed:30:86:ea:0d:97:13:e6:a2:c0:
         7a:68:f6:f8:cb:70:e7:9c:be:b1:3d:96:56:3c:10:89:5e:aa:
         06:52:2e:ce:6b:a3:4e:3f:71:dc:c2:13:16:6a:b2:18:67:73:
         8c:1e:fc:d6:ae:dd:cc:54:e9:ce:37:51:d1:0f:0a:25:34:14:
         c0:51:14:f6:31:0e:40:a4:2d:03:95:93:e5:8b:79:98:51:6b:
         37:cc:3a:d1:42:b7:64:99:7d:28:01:3f:e7:98:2c:92:86:16:
         b3:1c:60:f1:0a:1c:63:54:45:b8:5c:3d:ab:d2:c5:2e:a1:7a:
         72:73:b8:e6:b9:f3:a3:1d:30:c7:e5:9b:5b:0c:36:78:66:e6:
         24:5e:5f:25
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUDOdZ8MKtOzpFsbLj2nqKIF8OrY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2
NjY4MDEzODAeFw0yNjA2MjUwNzA0NTVaFw0yNzA2MjQwNzA5NTVaMDMxMTAvBgNV
BAMTKDQ3MDIyRTEyMDlCMzNEREZCOTkyNDg1QzVGNUNCN0Y5NkZERjk1MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQ4q5Gv5DphEzvh0LBzodKX5o
5J/mpXqi3pLEyXqAs8DgmUl2kG2fr0CsdqY0hL9krSOCBQBOwhB11TYk6nSZeOVf
LAyEsUof87Sg4GqTT11UVjLWXDxfHiDzmxQKGKoiuoexPhxjlvAGZhgB20mvDRoy
OA8BbeIjQpqbJgPuuSP4rAs/3NGdfygOHA3oA5QaZ8pblvdhXe28WDHtseo1tUNx
iRok0bHkoWInoU/ROIPnYzOHW1WtXE4ViHISXtgyaaMrvArMXFoHCgF5zFSuLJLA
5wxxb83rSIgTQ3enwBUoNy8SR66mG+TPRbT/Iz6xZdUArA6wD8D+T+SxsSs/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQURwIuEgmzPd+5kkhcX1y3+W/flRQwHwYDVR0j
BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG
RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTM0
MzUyZTMxMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGcthjANBgkqhkiG9w0BAQsFAAOCAQEA9E8V1vSc4rxNNsLQExTc
PaffVLFd38g6bB0JDf2tv/Au6PoyphqQOYSFYUDhCfjAi3opTXycdxrSWPKwOeHn
yCx6wdUmVQJpkL7yfB4KtoeEjeirwYBNENE579o9h8nTYXon/3mRa4awzmNpqMBQ
vzID+o/tMIbqDZcT5qLAemj2+Mtw55y+sT2WVjwQiV6qBlIuzmujTj9x3MITFmqy
GGdzjB781q7dzFTpzjdR0Q8KJTQUwFEU9jEOQKQtA5WT5Yt5mFFrN8w60UK3ZJl9
KAE/55gskoYWsxxg8QocY1RFuFw9q9LFLqF6cnO45rnzox0wx+WbWww2eGbmJF5f
JQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:52:50 2026 by rpki-client