Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS134121.roa
File:                     AS134121.roa (raw, json)
Hash identifier:          4MCO91V3nZULWel7G3s84MuO6gbgH9st5HMkhZjQGos=
Subject key identifier:   30:A6:6B:54:7B:A5:A0:16:B9:72:07:18:E2:EF:9C:B6:6D:CC:F8:98
Certificate issuer:       /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial:       12CC7FF9752730E678DC724569EF790B84D7015C
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS134121.roa
Signing time:             Tue 19 May 2026 02:36:41 +0000
ROA not before:           Tue 19 May 2026 02:31:41 +0000
ROA not after:            Tue 18 May 2027 02:36:41 +0000
asID:                     134121
IP address blocks:        103.118.204.0/22 maxlen: 24
                          103.118.208.0/22 maxlen: 24
                          103.118.212.0/22 maxlen: 24
                          103.118.216.0/22 maxlen: 24
                          103.118.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 10:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cc:7f:f9:75:27:30:e6:78:dc:72:45:69:ef:79:0b:84:d7:01:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
        Validity
            Not Before: May 19 02:31:41 2026 GMT
            Not After : May 18 02:36:41 2027 GMT
        Subject: CN=30A66B547BA5A016B9720718E2EF9CB66DCCF898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:03:a8:d6:e6:9e:cd:6b:ac:52:bf:4f:8b:be:
                    65:42:40:af:5f:e2:35:4f:27:20:5b:f6:b6:80:e8:
                    05:b6:e1:d5:ef:f0:a0:12:b4:d8:dd:b7:d1:4e:42:
                    7b:eb:43:9c:4b:ae:49:29:75:b0:81:5d:ec:7e:ac:
                    fd:3d:4e:5f:b7:4f:59:4f:21:d7:40:47:44:ec:08:
                    a7:94:3e:da:e3:0d:07:0e:b5:82:e8:b2:05:ab:b1:
                    d1:52:27:6b:cb:38:fb:40:cb:c3:4f:83:13:e9:69:
                    3c:f4:75:b6:39:68:24:ca:a2:35:43:3c:fc:d2:4c:
                    db:c4:c1:f5:ad:50:3c:87:be:a5:b7:a4:6b:c7:c4:
                    c8:9a:e9:b3:22:ce:9b:8f:0e:00:4c:4a:20:cb:5e:
                    43:1f:18:c1:eb:43:7d:45:a3:a4:0c:6e:03:fe:6a:
                    72:ff:3d:5c:68:2a:46:43:84:f3:a6:99:b8:22:36:
                    00:d7:a1:8d:1d:06:15:b8:ca:4e:34:9b:16:25:03:
                    6d:ca:e1:bf:c7:22:1c:70:eb:28:4b:59:e7:ff:30:
                    98:19:3b:0a:5c:79:b2:4a:57:d4:7f:05:a9:d2:3a:
                    0d:f2:87:dc:8e:99:81:91:0e:35:69:bd:d3:19:8f:
                    9b:4b:97:6d:d7:31:9e:58:fa:3f:1e:bf:e5:e2:10:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A6:6B:54:7B:A5:A0:16:B9:72:07:18:E2:EF:9C:B6:6D:CC:F8:98
            X509v3 Authority Key Identifier:
                keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS134121.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.204.0-103.118.223.255

    Signature Algorithm: sha256WithRSAEncryption
         0a:11:f7:44:3b:ad:8d:0c:a5:b7:1c:cb:19:a8:17:e3:4f:d6:
         90:b6:ff:42:d8:9d:4b:2c:a5:4d:93:a9:a4:43:0f:51:00:2f:
         b7:59:3d:c2:58:c2:16:e2:d1:ce:a0:28:00:e3:c9:d8:e0:70:
         c4:d0:26:9a:53:38:51:a8:a7:00:16:d3:6f:63:4a:e8:38:72:
         5f:44:6e:a4:99:8e:f1:f5:11:79:11:be:18:ec:73:6c:8b:d7:
         f1:cf:8b:68:d9:d4:2d:06:0f:56:0f:44:02:59:01:00:3e:e2:
         a2:d6:94:db:25:62:51:0f:79:1d:c1:1b:97:43:d5:df:a3:7e:
         a2:54:d8:eb:85:c4:cc:5a:b6:55:73:34:6e:bd:a6:04:6f:72:
         d5:03:0c:c6:fb:72:af:95:64:b6:9a:4b:6f:9d:1c:14:78:08:
         d8:37:51:79:c6:14:f7:22:8e:f8:32:51:00:f8:76:aa:cd:4e:
         95:30:27:03:95:d4:5b:32:91:f8:d3:af:40:4f:7e:fe:8b:a2:
         f3:5c:de:2c:95:41:ce:61:f1:3e:be:51:d9:52:fa:b3:3f:aa:
         9b:a7:60:90:96:61:01:35:bd:6b:3e:4d:a8:e4:c3:9f:87:57:
         51:71:a2:c8:d4:5a:78:54:5b:aa:9c:7e:b9:32:5e:13:2d:71:
         b8:23:13:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:27:36 2026 by rpki-client