Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34342e3134362e302f32332d3233203d3e203539303337.roa
File:                     3130332e34342e3134362e302f32332d3233203d3e203539303337.roa (raw, json)
Hash identifier:          HNLmQn8lLO9Uu02GIjGzPHKTe0HMbM+3HCSS9Z1OiFk=
Subject key identifier:   5F:92:7A:91:A6:A0:BD:E2:1A:E8:6C:CE:33:AA:FB:60:17:86:B8:48
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       4691AD0159ECC8D779F14706AAF550081623409D
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34342e3134362e302f32332d3233203d3e203539303337.roa
Signing time:             Wed 01 Jul 2026 02:56:08 +0000
ROA not before:           Wed 01 Jul 2026 02:51:08 +0000
ROA not after:            Wed 30 Jun 2027 02:56:08 +0000
asID:                     59037
IP address blocks:        103.44.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 07:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:91:ad:01:59:ec:c8:d7:79:f1:47:06:aa:f5:50:08:16:23:40:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: Jul  1 02:51:08 2026 GMT
            Not After : Jun 30 02:56:08 2027 GMT
        Subject: CN=5F927A91A6A0BDE21AE86CCE33AAFB601786B848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:c5:54:3e:03:75:fb:33:9d:90:18:cc:65:
                    48:12:53:21:e8:8c:f3:c8:a7:f7:c5:81:4b:11:ba:
                    77:5f:7d:f0:0d:8d:eb:30:16:e6:97:e1:c5:3d:27:
                    55:5c:00:7c:1d:7c:7e:f8:74:95:50:4b:de:fd:d4:
                    0d:0b:9a:80:74:e9:dc:91:fa:35:e1:21:2b:98:74:
                    d2:9e:3b:5f:d3:dd:ab:69:c9:90:a3:6e:83:f9:dd:
                    65:2b:27:05:08:b9:b8:24:4d:3b:96:28:fa:8c:96:
                    85:3e:82:4e:23:76:e3:2e:42:a4:fd:e1:09:4f:8c:
                    3c:cb:2b:5f:3a:99:e0:32:ea:8f:66:52:53:0f:97:
                    16:7d:d9:b2:24:5b:6c:c2:40:0b:32:1e:84:37:c0:
                    67:20:1d:f2:a8:61:bd:39:84:6a:b6:85:7b:cc:d4:
                    2b:14:ec:c5:5a:9d:19:b8:6b:c6:15:a1:36:a9:d6:
                    62:0e:6d:af:d2:5c:01:59:03:c2:02:61:2c:6f:97:
                    a4:91:12:94:dd:9d:30:b0:8a:ae:df:c0:9c:86:43:
                    9b:66:6e:0f:fe:59:d2:ab:ad:c2:54:f5:6f:1c:d6:
                    2f:b7:08:98:25:fa:71:85:d9:66:c6:4a:1e:a0:63:
                    91:51:36:5f:51:bc:8a:0f:3c:75:60:44:b0:5b:c9:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:92:7A:91:A6:A0:BD:E2:1A:E8:6C:CE:33:AA:FB:60:17:86:B8:48
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34342e3134362e302f32332d3233203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:5a:f7:c0:15:6f:47:e0:b9:cb:47:4a:3a:59:a6:14:a3:
         8b:d5:91:3c:7f:c8:47:56:8b:81:18:51:6f:6d:96:07:b5:cb:
         b8:74:81:3d:04:0a:68:04:6f:00:1a:ec:88:93:b4:2d:9f:ac:
         5c:93:ca:79:e8:cd:db:01:8b:1e:30:75:e4:17:25:bc:5b:e6:
         05:4a:d3:df:03:f6:45:42:dc:f2:1d:bc:23:cd:9d:d0:db:bd:
         a4:24:50:ec:bb:17:6c:d0:7b:c8:a7:0d:73:bc:78:05:fb:e1:
         66:29:ef:80:4d:86:bb:c6:3f:3a:e0:54:46:ae:06:16:ef:ee:
         1a:77:8c:12:21:7c:43:40:08:3b:96:7e:29:63:b1:f3:72:33:
         b0:0a:66:2d:24:56:a8:69:a7:9a:13:83:54:c9:43:1b:55:bc:
         84:92:a0:4d:db:00:b3:3d:7a:f8:04:8d:d1:43:cf:bf:44:f5:
         1f:8e:9b:c8:b9:a4:62:b8:11:2e:01:ab:b3:1c:8d:0f:a0:d9:
         c0:0a:b4:88:a5:78:8c:cd:20:5a:4e:7b:2e:be:f2:8f:06:27:
         07:21:6a:6a:b1:35:d2:b9:25:18:44:d0:1f:5b:6f:74:49:f0:
         cd:4a:ad:bf:6b:71:0f:61:6b:a3:fd:bb:35:ac:47:15:2e:b1:
         de:60:1f:45
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:01 2026 by rpki-client