Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa
File:                     3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          7TOVvQGtiRRN6gaq0unOb2RuIqJZlcWuilthQJPnJ6s=
Subject key identifier:   3B:D8:DE:BD:5A:BB:8D:37:0B:B7:A2:D2:4E:E2:54:E1:29:19:A0:52
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       0E64A5831E492B98DF514644E3EFF8670B74B63C
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa
Signing time:             Thu 25 Jun 2026 07:09:55 +0000
ROA not before:           Thu 25 Jun 2026 07:04:55 +0000
ROA not after:            Thu 24 Jun 2027 07:09:55 +0000
asID:                     151263
IP address blocks:        103.45.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:64:a5:83:1e:49:2b:98:df:51:46:44:e3:ef:f8:67:0b:74:b6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:04:55 2026 GMT
            Not After : Jun 24 07:09:55 2027 GMT
        Subject: CN=3BD8DEBD5ABB8D370BB7A2D24EE254E12919A052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:d1:a6:f9:0c:18:dd:d3:39:25:93:82:f1:
                    ac:35:ff:66:9c:aa:d9:82:a3:9b:64:cb:45:13:9a:
                    86:e9:ce:e0:aa:bb:e4:32:cb:16:9c:4c:8a:a3:68:
                    7f:e2:78:71:5e:c6:6d:4e:0b:66:16:f5:27:36:6f:
                    4b:53:a0:25:66:2a:76:79:91:a0:11:fe:c5:60:79:
                    44:ee:78:dc:5e:f7:b8:95:84:c5:aa:09:d2:7c:a6:
                    af:dd:48:33:bd:e7:be:82:e2:75:ee:15:86:c3:bc:
                    46:81:93:c2:e7:00:46:0d:71:59:5f:fe:a2:b8:a7:
                    85:e3:81:99:fc:64:ad:90:c5:7e:82:89:f2:62:83:
                    20:98:f9:11:37:7e:92:c8:b9:29:dd:8c:c0:0f:69:
                    79:7e:ba:d1:52:c6:87:db:10:2f:d9:ec:9d:11:b3:
                    a8:43:c8:e6:7b:19:b9:f3:ef:2c:5a:09:2f:e9:de:
                    2c:95:7e:0e:9a:9c:7d:c4:52:c8:12:aa:aa:d8:3a:
                    7a:45:04:f2:d1:3c:54:f6:29:cf:4a:c1:e4:8e:9d:
                    0a:eb:ba:50:d3:1f:8a:d7:08:41:f7:02:0b:c5:51:
                    05:8c:2f:7a:d9:e5:4a:b7:91:08:9f:6f:14:8d:27:
                    49:b5:fc:7b:60:eb:a7:f6:00:46:ed:4e:18:16:9c:
                    1d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D8:DE:BD:5A:BB:8D:37:0B:B7:A2:D2:4E:E2:54:E1:29:19:A0:52
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133352e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:67:2f:28:62:d1:9c:7b:09:70:5a:06:f7:a4:13:29:ba:21:
         8b:31:29:a4:c8:d3:58:1f:09:9a:b4:2d:b3:f4:f5:8a:b4:7f:
         cf:ee:ab:bd:33:35:52:38:ec:79:1b:9e:f1:48:ad:6c:43:f1:
         a8:a7:15:05:11:94:ed:a9:d7:79:c3:f6:e0:bb:26:bc:47:d1:
         a1:b4:65:00:e8:15:7d:ab:c1:0f:61:04:d9:7e:ec:9f:13:84:
         8b:35:e6:cd:dc:fb:2d:8c:1a:1d:69:9b:d0:ff:53:d4:ed:60:
         9c:75:b1:59:2f:5e:74:a8:19:d8:f9:5b:63:e3:1f:39:f5:c7:
         0d:79:87:79:2f:b7:2a:9f:ec:ed:dc:62:09:0a:b8:da:56:7e:
         9c:52:87:17:53:a6:70:9b:5f:c1:7a:1e:ed:f9:f0:fc:b9:0c:
         f2:83:33:75:fe:e8:eb:f5:53:e0:ec:88:fc:17:9e:78:7b:c3:
         06:4b:12:3a:b8:59:a5:b4:15:ef:93:5b:3c:51:42:9f:9c:b2:
         ef:49:61:83:71:c1:63:c1:b7:e7:2e:54:1e:ea:e4:cb:51:73:
         1a:2f:9c:48:a3:97:16:93:d3:d9:8c:06:04:a9:ca:46:fc:40:
         32:f5:f5:e5:7e:d6:89:0b:cd:99:9d:f7:58:f1:9b:68:c6:ca:
         49:7e:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:31 2026 by rpki-client