Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e36352e3232342e302f32332d3233203d3e20313531313835.roa
File:                     3130332e36352e3232342e302f32332d3233203d3e20313531313835.roa (raw, json)
Hash identifier:          RTYtTFe9AHsjJZDXut5sHNrTxjvC4H588yOBuEGqVas=
Subject key identifier:   B1:1E:1B:05:3C:0D:3A:87:82:B4:13:A0:5A:8C:A8:03:62:CA:19:79
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       31226FDEEC582A374F9F402814AF4D98B6DCDC56
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e36352e3232342e302f32332d3233203d3e20313531313835.roa
Signing time:             Thu 25 Jun 2026 07:07:27 +0000
ROA not before:           Thu 25 Jun 2026 07:02:27 +0000
ROA not after:            Thu 24 Jun 2027 07:07:27 +0000
asID:                     151185
IP address blocks:        103.65.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:22:6f:de:ec:58:2a:37:4f:9f:40:28:14:af:4d:98:b6:dc:dc:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:02:27 2026 GMT
            Not After : Jun 24 07:07:27 2027 GMT
        Subject: CN=B11E1B053C0D3A8782B413A05A8CA80362CA1979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:78:5b:83:7f:ef:b1:67:a0:b5:33:9a:d0:
                    56:20:a1:d5:e5:2d:65:09:a4:71:84:ba:8a:c4:46:
                    9a:e5:bd:30:12:eb:fc:a1:ba:45:41:27:fd:0e:9c:
                    ce:1f:55:19:cf:f8:27:a9:e4:4e:19:ea:a7:6c:20:
                    ae:d9:88:01:49:44:d5:cf:b5:8b:e4:3a:70:82:8e:
                    56:68:85:59:65:31:e2:7e:ea:82:3e:ff:36:d3:5e:
                    2c:a7:2a:8a:c6:d9:f6:d1:b8:a9:18:4f:21:00:74:
                    88:95:a8:7b:84:94:60:7e:7e:62:99:47:eb:de:b2:
                    b5:06:82:36:20:a4:13:69:f2:9b:c9:5b:a3:f2:e8:
                    54:b3:64:df:b1:c7:1b:01:9f:bb:3e:fa:25:d6:b8:
                    a0:c3:66:64:cd:fc:a6:d3:23:10:f2:49:98:06:9d:
                    94:37:ef:0d:d8:4e:39:af:43:98:9d:af:bd:48:27:
                    a8:47:4a:f1:b7:c6:bc:62:c9:97:d6:49:59:82:3f:
                    63:99:f7:90:4d:54:a4:4a:24:3c:f3:eb:6a:10:38:
                    b5:9a:55:69:b9:23:0d:5a:b9:87:17:3b:a2:7b:6d:
                    a3:b7:c2:fc:c3:72:93:1c:2f:db:06:6c:44:a8:c2:
                    9c:ae:de:ba:85:82:08:cf:ca:aa:0a:de:b6:f3:67:
                    a9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1E:1B:05:3C:0D:3A:87:82:B4:13:A0:5A:8C:A8:03:62:CA:19:79
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e36352e3232342e302f32332d3233203d3e20313531313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:54:92:d7:05:ef:a6:87:27:46:6f:df:78:aa:9e:99:a7:1f:
         47:03:b3:68:df:92:bc:32:c9:9f:8c:a4:79:86:b0:18:96:c9:
         3b:fe:a5:24:06:e1:72:0c:c6:8d:89:5f:c6:88:e0:bc:cf:50:
         f2:17:a1:b9:ee:51:ff:09:65:31:2f:ed:2d:52:39:b5:45:1a:
         26:a0:17:da:0c:74:03:21:b9:1a:d6:e3:d4:f6:8e:ce:52:3f:
         98:ad:10:58:99:ad:6a:10:0d:e8:63:5f:15:94:ab:f7:53:15:
         f4:a5:2c:84:eb:59:6a:62:25:71:c0:bc:ad:21:8b:6a:c6:37:
         b0:4c:9a:9b:5f:80:6c:28:81:e3:25:92:99:b2:60:b8:b5:0d:
         65:b0:11:e4:07:d9:4b:88:27:2a:df:d5:be:97:e5:62:30:a0:
         7a:56:e3:b7:18:c1:38:37:b4:8a:7d:f1:b5:b3:f3:5f:2e:21:
         1a:0a:76:22:85:ee:c9:a0:bc:1c:17:dd:7e:4c:51:98:d5:f3:
         60:9c:70:c3:42:21:d1:28:93:94:fd:df:f3:fd:d9:ac:bf:60:
         b7:b8:92:41:b1:a2:30:a6:33:1c:46:de:49:15:40:e5:51:59:
         f0:1c:40:a8:9a:1a:60:f9:5a:2a:81:24:89:10:29:90:ea:f1:
         f3:fc:15:23
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUMSJv3uxYKjdPn0AoFK9NmLbc3FYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2
NjY4MDEzODAeFw0yNjA2MjUwNzAyMjdaFw0yNzA2MjQwNzA3MjdaMDMxMTAvBgNV
BAMTKEIxMUUxQjA1M0MwRDNBODc4MkI0MTNBMDVBOENBODAzNjJDQTE5NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1Xhbg3/vsWegtTOa0FYgodXl
LWUJpHGEuorERprlvTAS6/yhukVBJ/0OnM4fVRnP+Cep5E4Z6qdsIK7ZiAFJRNXP
tYvkOnCCjlZohVllMeJ+6oI+/zbTXiynKorG2fbRuKkYTyEAdIiVqHuElGB+fmKZ
R+vesrUGgjYgpBNp8pvJW6Py6FSzZN+xxxsBn7s++iXWuKDDZmTN/KbTIxDySZgG
nZQ37w3YTjmvQ5idr71IJ6hHSvG3xrxiyZfWSVmCP2OZ95BNVKRKJDzz62oQOLWa
VWm5Iw1auYcXO6J7baO3wvzDcpMcL9sGbESowpyu3rqFggjPyqoK3rbzZ6nrAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUsR4bBTwNOoeCtBOgWoyoA2LKGXkwHwYDVR0j
BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG
RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTM2
MzUyZTMyMzIzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzUzMTMxMzgzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWdB4DANBgkqhkiG9w0BAQsFAAOCAQEAp1SS1wXvpocnRm/feKqe
macfRwOzaN+SvDLJn4ykeYawGJbJO/6lJAbhcgzGjYlfxojgvM9Q8hehue5R/wll
MS/tLVI5tUUaJqAX2gx0AyG5Gtbj1PaOzlI/mK0QWJmtahAN6GNfFZSr91MV9KUs
hOtZamIlccC8rSGLasY3sEyam1+AbCiB4yWSmbJguLUNZbAR5AfZS4gnKt/Vvpfl
YjCgelbjtxjBODe0in3xtbPzXy4hGgp2IoXuyaC8HBfdfkxRmNXzYJxww0Ih0SiT
lP3f8/3ZrL9gt7iSQbGiMKYzHEbeSRVA5VFZ8BxAqJoaYPlaKoEkiRApkOrx8/wV
Iw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:52:52 2026 by rpki-client