Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e36352e3232352e302f32342d3234203d3e20313531323633.roa
File:                     3130332e36352e3232352e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          04DMYvCyM5FOMvEVp5saBOpFCW8VIu8YneGg62PNVVo=
Subject key identifier:   E4:82:F6:B8:C7:F7:BD:54:92:52:B8:0C:E1:BF:90:07:83:3E:08:D3
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       7991D0459C8DB8DEAF429F2CAE2C56EADFF998AF
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e36352e3232352e302f32342d3234203d3e20313531323633.roa
Signing time:             Thu 25 Jun 2026 07:09:54 +0000
ROA not before:           Thu 25 Jun 2026 07:04:54 +0000
ROA not after:            Thu 24 Jun 2027 07:09:54 +0000
asID:                     151263
IP address blocks:        103.65.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:91:d0:45:9c:8d:b8:de:af:42:9f:2c:ae:2c:56:ea:df:f9:98:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:04:54 2026 GMT
            Not After : Jun 24 07:09:54 2027 GMT
        Subject: CN=E482F6B8C7F7BD549252B80CE1BF9007833E08D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:ba:25:e3:45:92:f5:07:55:4d:3c:3d:0d:
                    ef:15:9a:fd:d0:9c:76:f6:28:08:13:56:b2:a1:2a:
                    74:36:94:26:10:6f:30:4f:67:5f:5c:eb:1d:27:85:
                    6e:f5:7c:6f:0a:c0:5d:63:a7:19:b1:73:5e:ad:3d:
                    77:af:16:55:00:37:90:78:bb:c9:ee:c1:0e:c8:5b:
                    be:a4:61:89:a6:66:69:c3:7b:b5:d2:3f:4a:7b:ff:
                    a1:1b:26:5c:1e:67:1b:59:89:a8:68:ff:7b:28:89:
                    37:c5:88:6b:2f:17:17:f1:ce:be:9f:9a:4f:66:e5:
                    92:11:5c:5f:6e:93:b6:8a:e5:c9:07:20:c4:e3:9f:
                    95:ca:aa:e9:ff:f5:e7:a1:67:8c:1d:b3:32:28:52:
                    86:5f:ee:a6:a0:a3:4c:92:7e:b8:08:b6:52:58:1b:
                    48:84:d0:56:a8:29:37:c3:50:0f:ce:26:dd:6c:99:
                    49:33:33:4e:a8:e4:9e:4f:2d:c1:6c:05:08:ac:1f:
                    f5:b2:3f:69:b1:07:c2:e6:3a:fd:59:f7:4e:44:be:
                    23:1a:86:cd:36:33:d3:78:4e:2f:ed:d0:1d:96:ed:
                    43:dd:e5:1a:88:b4:ca:53:8a:68:a3:7d:11:8a:69:
                    46:d7:56:10:76:18:8b:44:f1:42:f1:80:a6:11:9a:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:82:F6:B8:C7:F7:BD:54:92:52:B8:0C:E1:BF:90:07:83:3E:08:D3
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e36352e3232352e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:ed:bc:0c:9d:fc:78:cd:be:34:b4:67:89:5c:0e:1d:5c:85:
         4e:7b:01:98:9c:d7:30:de:c7:1e:fd:ee:0f:26:7f:13:8f:93:
         84:0e:53:12:ea:06:18:53:98:2a:4d:6d:e2:1e:97:ad:25:17:
         ff:81:81:34:05:46:d9:df:03:08:c2:86:2d:42:b5:e9:a7:b6:
         bc:5e:6a:39:25:44:97:b5:8f:5a:aa:2c:1f:00:50:8c:a4:66:
         07:f9:8e:bc:68:35:62:c5:c3:7b:f3:c8:5e:a4:27:79:d9:4c:
         61:01:40:74:3f:29:dd:f3:fc:7f:33:f3:0c:ea:20:26:ff:a3:
         cc:e2:dc:21:a4:a2:09:75:79:d4:c2:26:63:76:a9:4e:a5:a5:
         51:98:c9:8d:27:d5:9b:57:a5:bf:b8:54:a4:1a:9f:91:73:50:
         c7:9b:61:e4:a4:ee:fa:1c:6c:ae:c6:fa:57:7c:12:03:8e:6a:
         5a:47:47:26:9f:1e:a2:bf:ae:1d:9b:83:28:16:96:71:84:4d:
         8c:51:36:de:7a:73:aa:2c:d4:3f:b6:1e:73:5b:5a:a0:74:f2:
         f5:8c:25:7b:79:4e:13:99:be:71:f8:85:ec:44:93:7b:39:9a:
         30:e0:00:08:24:e5:e6:41:78:1b:17:e4:88:44:24:5c:f1:5c:
         54:52:3e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:53:37 2026 by rpki-client