Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32332d3234203d3e203538343631.roa
File:                     3130332e34342e38302e302f32332d3234203d3e203538343631.roa (raw, json)
Hash identifier:          WdL+0DaHMJDdDwyVs755gR8kUOV3sLq6YnIqBcrt1NY=
Subject key identifier:   E5:3D:A7:22:6C:2B:97:C4:EF:F5:9C:7C:CB:9E:7D:46:E3:D6:99:55
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       227F4672A4B03540700F50C2FEB2D15A74F70BE0
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32332d3234203d3e203538343631.roa
Signing time:             Thu 11 Jun 2026 02:29:16 +0000
ROA not before:           Thu 11 Jun 2026 02:24:16 +0000
ROA not after:            Thu 10 Jun 2027 02:29:16 +0000
asID:                     58461
IP address blocks:        103.44.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7f:46:72:a4:b0:35:40:70:0f:50:c2:fe:b2:d1:5a:74:f7:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: Jun 11 02:24:16 2026 GMT
            Not After : Jun 10 02:29:16 2027 GMT
        Subject: CN=E53DA7226C2B97C4EFF59C7CCB9E7D46E3D69955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:3c:c4:b9:c1:5f:29:f2:a4:ad:a8:27:23:
                    5a:04:43:05:54:2a:c9:f7:d2:26:36:87:a4:53:08:
                    b7:0e:eb:94:f3:4c:de:d9:e6:b9:a9:58:16:6e:d0:
                    30:de:d2:a4:0c:4e:df:73:d0:79:06:65:d0:87:55:
                    3b:34:30:95:0d:bf:f3:95:cb:14:29:0f:79:0a:9f:
                    ca:a7:cf:5c:1e:4e:6c:24:02:38:61:39:65:bb:97:
                    76:10:cc:51:5b:8f:f2:25:9b:76:fa:42:d9:16:44:
                    11:00:82:92:70:58:b8:a1:7d:d6:f6:47:3f:4b:39:
                    6d:aa:13:bb:59:e3:22:c3:9b:e9:be:19:34:24:1d:
                    22:70:50:c8:21:4e:0d:4a:9d:34:fc:c0:31:dc:8a:
                    6a:dc:78:15:24:bb:03:13:08:51:33:69:47:8f:46:
                    57:34:27:a0:f1:5f:9c:fd:6c:4a:f9:03:58:da:78:
                    58:1d:5a:cf:c8:5d:75:b9:66:c3:c7:17:ba:5c:b8:
                    76:2b:45:21:e5:25:9b:93:9a:2c:d4:82:ff:f6:c3:
                    8d:19:53:ac:58:57:70:34:cb:43:b7:ae:91:1e:aa:
                    d2:ad:13:45:cc:dd:2e:97:04:60:ba:44:01:66:2f:
                    60:ff:da:4e:b9:2d:42:9d:13:c3:05:41:ef:bf:c7:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3D:A7:22:6C:2B:97:C4:EF:F5:9C:7C:CB:9E:7D:46:E3:D6:99:55
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32332d3234203d3e203538343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:3d:36:15:7f:7a:92:6b:ef:6a:51:9f:83:61:1a:69:61:6d:
         e0:ba:5a:0f:5d:fa:63:4d:04:41:15:40:b2:27:f9:31:dd:88:
         87:1c:86:c3:09:a6:ed:8b:11:ed:1f:cb:8a:62:54:8c:db:ec:
         d5:0b:27:4e:fe:0e:69:a5:e0:23:1a:dc:28:cf:cb:40:88:3d:
         8c:35:2c:56:5b:8c:d4:62:de:67:e4:5d:a7:17:fb:69:84:ac:
         18:3a:d6:09:c5:21:95:62:53:76:51:8a:76:54:d6:5e:4f:ca:
         5e:f1:58:3c:1b:15:50:99:94:bb:81:8d:88:37:64:89:da:31:
         36:97:3c:e1:4b:38:52:68:f7:8e:ef:eb:2f:71:08:de:f3:42:
         44:e9:3a:78:71:24:7b:34:c6:02:6f:a3:6c:cb:ef:c1:be:96:
         6e:7a:4b:10:17:82:07:4e:44:1c:2c:2d:e7:85:9b:41:41:69:
         df:d0:96:61:80:1d:b1:ea:96:75:f7:d8:d3:e3:f2:18:b6:1c:
         f7:7b:b3:0c:30:d8:c8:93:85:a2:05:9c:d7:8d:4e:53:bb:63:
         75:e7:ea:79:7b:1e:ef:7c:98:86:d0:1a:d9:a7:89:d5:e2:67:
         37:bc:5b:3f:ac:a3:bc:4c:f9:8b:65:2a:f0:57:e8:af:6a:20:
         24:97:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:06 2026 by rpki-client