Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34342e3134342e302f32332d3233203d3e203539303337.roa
File:                     3130332e34342e3134342e302f32332d3233203d3e203539303337.roa (raw, json)
Hash identifier:          ydpc8OpnVnfHvAryBOlT6Mz/3uQLnQeuyTk6X+FwZF8=
Subject key identifier:   12:D9:2A:C2:0F:A7:42:D6:44:85:B1:32:FD:B6:B3:F1:3A:F2:38:79
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       5207387EEB81961F557ED1A729433241028261CA
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34342e3134342e302f32332d3233203d3e203539303337.roa
Signing time:             Wed 01 Jul 2026 02:56:08 +0000
ROA not before:           Wed 01 Jul 2026 02:51:08 +0000
ROA not after:            Wed 30 Jun 2027 02:56:08 +0000
asID:                     59037
IP address blocks:        103.44.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:07:38:7e:eb:81:96:1f:55:7e:d1:a7:29:43:32:41:02:82:61:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: Jul  1 02:51:08 2026 GMT
            Not After : Jun 30 02:56:08 2027 GMT
        Subject: CN=12D92AC20FA742D64485B132FDB6B3F13AF23879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:36:da:97:32:40:b4:f9:78:fa:cd:ef:e3:
                    31:e9:ea:4f:c6:9b:fe:b8:50:7b:4e:3e:d0:92:5f:
                    45:b8:e8:e1:dd:08:38:c9:3c:07:1c:7c:eb:0f:f1:
                    e0:b5:a1:e0:9c:27:e0:d3:8d:57:27:16:b0:fa:15:
                    fa:6f:07:05:08:04:9a:ff:79:87:8b:e1:f2:ec:6e:
                    ea:5c:a9:95:6a:62:7e:ac:82:84:62:0b:8a:0c:cb:
                    35:22:7a:25:8a:99:f2:7b:bf:58:cf:79:c8:00:77:
                    e2:33:c1:68:9e:85:c6:0a:b0:03:c3:4b:e6:2a:9e:
                    05:44:03:d3:1d:2f:b9:30:86:6e:da:3b:4e:2b:0b:
                    2f:d4:69:b4:73:e1:31:c9:5c:54:cd:4d:a8:45:e6:
                    79:98:2c:94:e4:c1:14:f3:5b:eb:f0:3b:5b:82:18:
                    0e:22:72:81:9a:18:19:e6:24:0d:b7:98:87:5d:ca:
                    d4:03:9c:ff:ca:a7:e4:6c:1a:25:d5:a9:a5:87:95:
                    6b:b8:26:98:07:0f:da:81:47:d4:ff:be:42:93:ab:
                    5e:6e:ea:63:2a:0f:c0:17:df:2c:97:5c:6f:76:e5:
                    48:3c:ba:4f:5a:9c:12:ef:64:ad:94:8f:75:d3:d1:
                    26:25:09:de:96:94:17:5e:a4:c4:fe:45:4c:84:53:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D9:2A:C2:0F:A7:42:D6:44:85:B1:32:FD:B6:B3:F1:3A:F2:38:79
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34342e3134342e302f32332d3233203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:35:fc:b7:be:66:d6:e1:c3:c6:03:72:d5:80:63:0c:ff:06:
         2b:72:31:cf:be:b9:4c:ed:c3:2f:9d:3f:09:1d:5e:ec:1b:04:
         59:5f:6b:68:a8:77:19:a8:2d:91:eb:5a:fc:02:03:35:11:0f:
         6f:96:9a:20:af:a1:cf:58:fc:d8:1d:a3:85:fe:c5:96:41:61:
         88:03:b1:c7:8b:e0:9d:85:0f:07:93:bb:20:6d:19:10:6a:ba:
         7d:1e:4e:7e:6c:9b:1e:a8:b4:f1:f8:99:4f:6e:5d:3f:d4:cb:
         f9:f1:9d:36:97:7e:90:72:c6:cd:0c:f5:12:f7:ba:6a:8c:3c:
         2b:13:d2:21:3b:b2:8b:60:d0:79:46:14:d6:94:c5:63:a2:12:
         dc:46:e9:c3:bc:da:4c:df:0a:a8:fc:9d:3a:d2:fe:1b:43:6d:
         38:7f:ec:a9:23:57:aa:a3:f6:12:2e:c2:0f:77:f6:ea:ef:e7:
         42:1c:13:10:b6:b4:e7:f2:14:11:03:b3:41:ad:10:1c:a7:8b:
         67:4e:0a:0d:01:21:4b:bd:af:95:99:1a:45:68:98:03:b8:53:
         50:af:89:ae:b5:e7:8d:86:af:e0:78:d7:ea:69:66:c2:74:74:
         d8:6a:87:9f:a3:1c:79:d7:da:01:a0:eb:62:02:f7:b1:9c:7e:
         00:f5:b1:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:03 2026 by rpki-client