Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa
File:                     3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          VLYofrbSPniO0qPNEJB87CbLmJC5xRZYZf97BFvmres=
Subject key identifier:   05:C6:AD:B4:F4:0C:9C:6B:74:D8:86:79:9C:CC:64:A6:28:40:A0:27
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       56943D317C5D1794FE21ED612DCD36AE2D9DFF3A
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa
Signing time:             Thu 25 Jun 2026 07:09:54 +0000
ROA not before:           Thu 25 Jun 2026 07:04:54 +0000
ROA not after:            Thu 24 Jun 2027 07:09:54 +0000
asID:                     151263
IP address blocks:        103.45.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:94:3d:31:7c:5d:17:94:fe:21:ed:61:2d:cd:36:ae:2d:9d:ff:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:04:54 2026 GMT
            Not After : Jun 24 07:09:54 2027 GMT
        Subject: CN=05C6ADB4F40C9C6B74D886799CCC64A62840A027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e6:28:00:6a:43:11:22:25:4b:f9:8c:5d:42:
                    c3:a3:32:00:35:ce:b4:ff:87:09:ee:94:d0:a0:5f:
                    e3:1d:d5:5c:97:7f:4d:7f:e6:af:6d:8a:df:c8:e7:
                    17:d3:3a:7d:76:61:a3:b8:ab:4b:8c:b8:53:02:6e:
                    a9:7c:c5:36:04:d2:d0:6d:80:3d:bc:c1:e6:da:11:
                    dc:fb:22:88:7e:05:e6:5a:ca:26:90:10:6a:d1:0c:
                    cc:b0:d6:78:9b:be:85:17:87:7d:22:67:44:14:51:
                    4f:fa:8f:e0:7f:4e:a1:09:7f:da:f6:9c:4b:91:51:
                    09:14:f1:12:ef:17:a6:ce:69:73:ae:ce:df:b8:19:
                    b1:61:24:e1:7f:4c:64:bc:44:6b:09:4f:58:01:78:
                    6f:a9:70:c6:3d:35:95:01:2d:d1:b2:5e:6a:80:94:
                    26:8e:23:1f:27:91:90:62:fe:03:c3:7e:3a:9c:40:
                    b0:f2:8a:75:bd:30:9a:1f:25:07:77:92:16:d4:d9:
                    ce:d6:b2:56:a0:09:10:15:da:da:43:18:a9:0b:ea:
                    ec:5e:be:e2:18:5a:67:0c:3a:e8:9d:a4:56:bb:f1:
                    a6:19:b6:2d:7c:ab:cb:0e:5a:8d:51:5d:bd:07:62:
                    fa:4b:01:55:08:b9:29:d1:52:26:6a:7a:23:0e:1d:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C6:AD:B4:F4:0C:9C:6B:74:D8:86:79:9C:CC:64:A6:28:40:A0:27
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3134312e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:72:ba:58:ad:07:80:14:ac:6a:24:25:9b:d5:de:e2:8a:16:
         02:4f:78:37:c2:48:af:d0:0b:f8:46:10:05:6c:58:88:e8:b2:
         5a:44:c9:af:53:18:94:d3:e6:df:b7:38:3d:ea:dc:cf:75:fc:
         ad:65:5a:b5:f1:f8:38:10:80:c8:c8:25:7f:d5:cb:4e:05:a8:
         b0:eb:c3:79:5f:d7:e3:ed:0d:bb:1f:e3:ad:7b:00:93:56:c1:
         7f:0c:e6:81:6f:ba:a3:57:76:9c:1f:1c:b8:f5:c7:1b:03:a2:
         8a:b1:bf:32:7b:4e:5e:43:b0:d8:7c:07:8a:05:1c:a5:12:ce:
         11:45:25:d7:b7:92:0e:66:41:66:b7:c1:82:bb:8a:04:19:50:
         3f:07:c2:94:b0:ea:e5:e7:a1:0a:bc:8a:24:26:bc:38:a9:2f:
         79:f8:75:c2:03:f9:25:20:50:72:b2:bc:8a:1b:4c:89:b3:ba:
         91:da:fa:d7:40:54:0f:07:53:47:71:e1:d7:9b:31:aa:4f:67:
         bc:6f:c0:8f:73:b8:20:c8:42:2d:cc:87:57:5a:8d:f8:0e:bf:
         93:6d:6e:f9:5d:9b:cf:fa:f4:00:28:05:40:f1:61:33:66:04:
         df:4a:fd:59:34:e1:71:0e:f3:5a:3a:28:85:34:a0:06:bf:39:
         7f:1c:f0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:23 2026 by rpki-client