Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e36352e3232342e302f32342d3234203d3e20313531323633.roa
File:                     3130332e36352e3232342e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          I3p3J8zTRklFLPdRZ+Q9zQwUOdP7emT/RsjsVluAfQc=
Subject key identifier:   AE:BD:17:80:CF:2B:D4:E4:B2:4C:41:FE:FB:03:5D:CB:CD:A2:32:6E
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       30E6D86056E853C2F9BE4865623FCC8CF906A5F4
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e36352e3232342e302f32342d3234203d3e20313531323633.roa
Signing time:             Thu 25 Jun 2026 07:05:14 +0000
ROA not before:           Thu 25 Jun 2026 07:00:14 +0000
ROA not after:            Thu 24 Jun 2027 07:05:14 +0000
asID:                     151263
IP address blocks:        103.65.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e6:d8:60:56:e8:53:c2:f9:be:48:65:62:3f:cc:8c:f9:06:a5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:00:14 2026 GMT
            Not After : Jun 24 07:05:14 2027 GMT
        Subject: CN=AEBD1780CF2BD4E4B24C41FEFB035DCBCDA2326E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:14:79:bd:1e:fc:93:61:a4:6d:d8:6f:1c:ce:
                    67:79:49:8e:e5:7b:9e:2c:64:20:bb:8a:ab:29:58:
                    f9:4e:59:2f:b0:2f:3e:7a:81:d3:8f:a4:e8:c2:7e:
                    e8:08:af:32:97:56:67:cb:48:e2:43:66:67:64:20:
                    b7:f8:d3:1b:9c:2b:a7:72:f3:04:d8:e5:5c:17:05:
                    67:b4:da:44:6c:34:51:24:e6:f0:60:4c:93:bb:55:
                    ac:cb:c3:e8:0a:82:1e:83:9d:a3:ee:47:ed:04:15:
                    66:ed:7e:f8:8d:19:05:06:20:a1:d3:d0:0b:26:c4:
                    ba:d1:de:f9:04:49:52:55:5c:50:0a:1d:d8:22:ee:
                    d9:40:9e:ee:32:e7:de:ac:70:9b:1c:cd:06:10:f3:
                    a7:05:83:9b:c0:b3:97:93:54:1b:5e:e1:7b:a8:7d:
                    e9:0f:d6:5d:8b:0c:e0:30:28:6c:6e:c6:66:22:99:
                    1e:09:49:ef:e2:1c:cc:b5:b3:4a:76:a2:35:39:b7:
                    1f:6c:38:c9:60:2e:42:31:55:1b:fa:3c:a8:4b:2f:
                    51:54:b1:86:44:58:a1:1f:63:93:0a:68:25:db:3d:
                    32:5b:b8:dc:d2:e6:12:f0:37:6e:3c:03:16:8b:58:
                    3c:d6:ba:5e:ad:69:15:2f:c6:bc:27:8e:29:3c:e5:
                    58:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BD:17:80:CF:2B:D4:E4:B2:4C:41:FE:FB:03:5D:CB:CD:A2:32:6E
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e36352e3232342e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fa:91:1c:ff:76:3d:52:3d:f1:f2:2f:28:c7:24:79:ba:e1:
         1c:0a:c8:fe:59:ed:6a:d5:bc:1b:83:be:3c:8a:67:5c:77:c5:
         28:6d:af:25:21:9c:53:1a:10:c5:e3:af:c8:3d:56:e9:e0:ca:
         6c:b5:d9:c1:e9:d4:b4:a2:f3:6f:27:88:d9:ab:53:01:34:7f:
         c4:ea:1e:16:88:b2:66:48:93:44:8a:c2:ce:38:54:80:6d:30:
         23:c8:97:54:11:7d:43:93:10:70:ec:ac:b6:1c:0b:64:d8:c4:
         3f:a8:f2:44:91:07:55:90:59:39:e1:73:c2:da:21:23:12:3c:
         ee:ec:12:08:95:e6:14:bd:63:71:06:e8:5b:57:be:e6:f7:fd:
         b0:be:9a:f4:3d:68:c4:96:5e:86:09:e1:39:43:28:97:ea:e4:
         72:89:b6:cd:9d:89:1c:c5:0f:b3:b8:ae:78:86:7b:35:93:3e:
         cc:7e:34:3c:11:61:1d:d0:11:71:0e:88:12:27:2d:70:5d:73:
         30:4d:de:f3:ab:7f:99:95:d9:bc:d3:38:ec:64:30:c4:3c:ec:
         08:6b:62:19:93:e2:ee:25:de:90:25:af:87:09:a2:ab:0f:78:
         72:32:14:11:95:31:b9:24:65:9f:0c:f9:a9:04:64:ef:e1:0b:
         af:16:38:20
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUMObYYFboU8L5vkhlYj/MjPkGpfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2
NjY4MDEzODAeFw0yNjA2MjUwNzAwMTRaFw0yNzA2MjQwNzA1MTRaMDMxMTAvBgNV
BAMTKEFFQkQxNzgwQ0YyQkQ0RTRCMjRDNDFGRUZCMDM1RENCQ0RBMjMyNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsFHm9HvyTYaRt2G8czmd5SY7l
e54sZCC7iqspWPlOWS+wLz56gdOPpOjCfugIrzKXVmfLSOJDZmdkILf40xucK6dy
8wTY5VwXBWe02kRsNFEk5vBgTJO7VazLw+gKgh6DnaPuR+0EFWbtfviNGQUGIKHT
0AsmxLrR3vkESVJVXFAKHdgi7tlAnu4y596scJsczQYQ86cFg5vAs5eTVBte4Xuo
fekP1l2LDOAwKGxuxmYimR4JSe/iHMy1s0p2ojU5tx9sOMlgLkIxVRv6PKhLL1FU
sYZEWKEfY5MKaCXbPTJbuNzS5hLwN248AxaLWDzWul6taRUvxrwnjik85Vg/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUrr0XgM8r1OSyTEH++wNdy82iMm4wHwYDVR0j
BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG
RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTM2
MzUyZTMyMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGdB4DANBgkqhkiG9w0BAQsFAAOCAQEAW/qRHP92PVI98fIvKMck
ebrhHArI/lntatW8G4O+PIpnXHfFKG2vJSGcUxoQxeOvyD1W6eDKbLXZwenUtKLz
byeI2atTATR/xOoeFoiyZkiTRIrCzjhUgG0wI8iXVBF9Q5MQcOysthwLZNjEP6jy
RJEHVZBZOeFzwtohIxI87uwSCJXmFL1jcQboW1e+5vf9sL6a9D1oxJZehgnhOUMo
l+rkcom2zZ2JHMUPs7iueIZ7NZM+zH40PBFhHdARcQ6IEictcF1zME3e86t/mZXZ
vNM47GQwxDzsCGtiGZPi7iXekCWvhwmiqw94cjIUEZUxuSRlnwz5qQRk7+ELrxY4
IA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:52:50 2026 by rpki-client