Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134302e302f32342d3234203d3e20313531323633.roa
File:                     3130332e34352e3134302e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          fjDzv9qZpF3TJWoZVQjqn8OLC/aJPD37r4kSIcjLwvo=
Subject key identifier:   9A:5F:4F:A4:C7:96:2E:06:2A:CF:0D:37:B9:46:C9:66:0A:59:04:ED
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       7DD254144CD131DB66395A0350751C406B374FE7
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134302e302f32342d3234203d3e20313531323633.roa
Signing time:             Thu 25 Jun 2026 07:09:54 +0000
ROA not before:           Thu 25 Jun 2026 07:04:54 +0000
ROA not after:            Thu 24 Jun 2027 07:09:54 +0000
asID:                     151263
IP address blocks:        103.45.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d2:54:14:4c:d1:31:db:66:39:5a:03:50:75:1c:40:6b:37:4f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:04:54 2026 GMT
            Not After : Jun 24 07:09:54 2027 GMT
        Subject: CN=9A5F4FA4C7962E062ACF0D37B946C9660A5904ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:24:ae:e2:76:30:85:36:1d:42:e4:38:85:ea:
                    59:84:d9:20:80:77:9f:e3:9a:a0:6b:e6:b2:73:c9:
                    c0:ed:c1:aa:c2:68:43:35:43:71:d0:9a:3a:3e:7a:
                    f4:f3:4c:4f:7a:8d:80:d3:66:c6:1b:04:c6:b4:61:
                    9e:23:12:df:eb:27:42:22:7f:bd:e0:5f:7a:fe:9b:
                    9d:d8:f7:f4:01:7b:14:45:49:99:4a:fb:01:cc:b5:
                    ac:a2:ea:2e:95:dc:9f:ee:1a:eb:29:36:e6:a9:8f:
                    44:2c:58:8d:48:fa:2d:57:b4:35:fe:23:97:a2:e3:
                    fa:ae:89:f1:52:26:cc:7a:02:52:96:48:c6:41:99:
                    b9:bf:5f:9f:34:90:df:4e:cd:34:d7:5d:e0:c3:83:
                    76:e0:a0:1e:2a:5f:9a:3a:f1:9d:a6:bf:e0:93:48:
                    e1:d3:8c:d4:8b:4f:f0:3e:03:50:8c:2a:d5:7a:6b:
                    da:43:a0:9f:f6:6b:1b:5d:c7:22:3f:73:73:8a:c2:
                    24:3a:52:84:69:e0:ce:34:ae:00:01:8c:13:35:c7:
                    51:94:8d:2d:a9:d8:e0:e5:8e:b0:2d:db:48:b9:80:
                    a8:df:58:ff:ad:57:55:f5:df:02:b6:63:5c:d6:41:
                    29:6e:52:4c:c9:a5:72:c7:b9:42:15:17:48:55:7e:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5F:4F:A4:C7:96:2E:06:2A:CF:0D:37:B9:46:C9:66:0A:59:04:ED
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134302e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ed:b8:6c:0a:ba:3f:69:46:54:ed:0b:12:de:95:1d:df:71:c4:
         f9:56:75:12:3d:e7:fd:84:c1:ff:0c:90:f6:53:31:37:b8:2a:
         22:b9:a6:03:61:12:49:b5:78:a0:03:ab:76:50:cf:65:1e:c4:
         70:0a:47:6b:fa:e6:ec:45:fd:16:ae:e0:a1:18:41:74:10:b0:
         e2:71:db:7f:02:39:5c:e0:8a:99:e3:e0:83:ba:0d:b2:89:05:
         6d:9e:63:37:85:07:57:a2:2f:fa:c6:51:75:06:81:9c:8b:21:
         dc:33:ce:8f:54:d0:11:ac:c1:f9:c3:58:90:42:e3:08:84:c4:
         dc:e2:89:a0:4b:46:80:fa:e9:bf:3c:e0:94:66:5e:8c:a3:0c:
         aa:75:36:ef:92:22:45:fc:59:bb:48:5e:63:44:fb:1b:b1:c2:
         01:66:62:f4:a7:b5:23:13:63:d7:79:0f:b9:7f:70:66:94:5c:
         26:20:fd:db:0b:c3:f9:40:ef:96:e2:8a:5d:c5:47:8c:f8:fc:
         c6:f1:24:63:ef:56:ac:bc:e3:99:69:46:c1:8d:15:c6:76:21:
         20:30:b1:5b:fb:40:73:8d:22:bd:59:82:4b:fa:5a:5f:8b:70:
         b3:28:a5:5d:9d:e2:16:49:9d:14:b7:58:0c:b7:97:53:e4:3d:
         08:dc:fd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:36 2026 by rpki-client