Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133362e302f32342d3234203d3e20313531323633.roa
File:                     3130332e34352e3133362e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          muRYDgXAl3QDM2yrYGeIGMErJ6nr9786prUQqAkfbeQ=
Subject key identifier:   B3:6E:3E:59:F8:0C:F2:91:81:B5:1F:D8:74:E2:0C:4D:6F:75:D8:8D
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       6F6DAE39A49E92719E40BDF4A409314C63ECBA31
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133362e302f32342d3234203d3e20313531323633.roa
Signing time:             Thu 25 Jun 2026 07:09:55 +0000
ROA not before:           Thu 25 Jun 2026 07:04:55 +0000
ROA not after:            Thu 24 Jun 2027 07:09:55 +0000
asID:                     151263
IP address blocks:        103.45.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6d:ae:39:a4:9e:92:71:9e:40:bd:f4:a4:09:31:4c:63:ec:ba:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:04:55 2026 GMT
            Not After : Jun 24 07:09:55 2027 GMT
        Subject: CN=B36E3E59F80CF29181B51FD874E20C4D6F75D88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:51:dd:cc:8e:23:66:8a:11:a3:fe:cb:5c:
                    6c:46:89:1f:6d:a3:4c:bd:de:ac:a4:f1:09:af:e0:
                    ea:cd:fd:49:d7:40:ee:8a:e4:64:84:77:12:97:60:
                    dc:dc:a1:2b:40:bc:52:0a:1a:f2:0f:28:f4:e4:49:
                    5f:23:2e:7c:89:1c:9d:fc:e9:1e:57:6a:6b:22:70:
                    66:44:cc:25:81:66:36:c1:34:a3:a0:4d:97:68:24:
                    53:ad:9d:ec:d4:95:e9:b8:e2:ed:0a:7a:ec:ac:f6:
                    90:20:5e:9c:ab:a0:d7:0c:72:ad:4e:76:41:9e:14:
                    fb:0e:27:83:64:27:d6:88:21:ef:90:6c:97:a9:62:
                    4e:c1:03:2b:75:ec:3a:2c:52:6a:bf:c5:71:a8:27:
                    7c:44:26:b8:58:42:6f:7d:9d:9a:5b:bd:79:f6:2d:
                    72:de:36:c5:8d:e7:5b:d7:39:46:9d:8e:6e:60:6d:
                    cf:64:a5:c7:cf:fe:9b:68:c9:7e:13:03:cd:47:e4:
                    f5:66:4c:dd:ab:52:b2:ab:46:dd:29:1f:47:59:6d:
                    a1:76:a9:d3:02:39:c1:3e:e5:2d:e9:ad:e7:d6:96:
                    a7:6d:08:d2:1a:fd:c4:f2:67:e8:4f:8c:db:43:c5:
                    08:86:75:84:01:80:1f:c8:4b:ae:b1:cf:74:4f:b1:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6E:3E:59:F8:0C:F2:91:81:B5:1F:D8:74:E2:0C:4D:6F:75:D8:8D
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133362e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:a6:e3:df:be:4d:1f:b7:76:28:87:27:b2:8f:fc:cb:00:2a:
         8e:cc:21:06:17:57:01:9e:95:00:fb:64:fc:9c:12:2e:04:3f:
         da:13:e5:e8:b8:17:d8:1c:71:aa:e4:b3:1f:43:d7:c3:29:10:
         84:15:a8:6e:5b:e8:0a:dd:b0:84:25:26:c6:f3:3c:96:d8:79:
         dc:9f:a0:61:56:fe:3f:5c:6b:6c:21:3e:d2:66:96:4b:39:d3:
         82:95:64:ce:00:ec:ea:42:f4:ad:86:3f:63:ca:8c:ae:0c:52:
         44:e3:97:7e:e5:8c:ba:61:78:ca:33:7b:f6:f8:c7:64:2b:e3:
         f6:8e:19:3d:3a:98:d9:e8:07:77:7d:b9:b1:03:74:9f:8a:42:
         a2:00:9e:91:a2:e4:19:c4:1a:0a:f9:74:79:77:fa:c1:23:78:
         99:1e:28:41:3a:e7:4b:40:93:b5:ef:f4:26:a7:4c:89:20:88:
         f7:f8:e1:90:6b:e2:aa:0b:71:4f:c8:46:53:91:ef:a0:c4:75:
         c1:07:ee:0b:64:41:9c:52:b4:8f:4c:f3:b2:01:27:56:4d:9a:
         2a:f3:c7:ad:6f:31:1f:b0:05:08:23:c4:6d:13:e9:59:dc:ab:
         33:bc:d0:99:38:ab:04:f8:d3:27:e1:d1:90:a6:3a:ea:c6:d7:
         bc:77:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:30 2026 by rpki-client