Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32342d3234203d3e20313339313732.roa
File:                     3130332e34342e38302e302f32342d3234203d3e20313339313732.roa (raw, json)
Hash identifier:          DVL2fboXz53mI37NIU9sKepHkvW3/7Qp0PzdxPrndEw=
Subject key identifier:   FE:46:72:42:F2:90:A2:2C:92:29:A8:52:10:B7:A3:D1:31:14:60:ED
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       23BB970CB119B26A141D7B2C446EE9F91F049ABB
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32342d3234203d3e20313339313732.roa
Signing time:             Mon 01 Jun 2026 07:26:07 +0000
ROA not before:           Mon 01 Jun 2026 07:21:07 +0000
ROA not after:            Mon 31 May 2027 07:26:07 +0000
asID:                     139172
IP address blocks:        103.44.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 23:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bb:97:0c:b1:19:b2:6a:14:1d:7b:2c:44:6e:e9:f9:1f:04:9a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: Jun  1 07:21:07 2026 GMT
            Not After : May 31 07:26:07 2027 GMT
        Subject: CN=FE467242F290A22C9229A85210B7A3D1311460ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d4:0c:fa:f3:97:9d:ee:4f:70:f0:43:e7:0d:
                    2f:d2:a8:eb:58:18:ba:8b:0c:4a:a6:c9:1c:dc:14:
                    93:74:07:61:55:c7:a4:c5:84:72:5d:78:f9:a9:7f:
                    a0:0a:d8:29:13:43:8b:ba:94:30:02:fd:ae:63:37:
                    c7:2f:b6:b1:f0:c3:08:91:1f:63:0d:20:13:be:7c:
                    c7:66:75:d8:03:39:f8:eb:7c:b7:e8:68:90:8e:43:
                    b3:d0:b6:d6:c5:ac:e3:a6:e1:1a:23:80:b0:86:76:
                    34:97:55:a9:96:0b:6d:59:c6:d8:bd:7f:aa:d9:cf:
                    2d:af:d2:5a:ea:b7:7a:03:25:6c:21:a3:d3:af:83:
                    02:39:9c:6e:4e:e2:55:c5:8d:7a:2a:8a:23:1d:7d:
                    bf:dd:57:4c:0f:a4:ee:c5:1c:30:d6:e2:f9:14:1f:
                    46:48:a7:16:e9:63:b2:52:3e:df:94:f3:dc:c4:5d:
                    6c:9b:c7:b1:d2:83:de:27:fd:d1:ad:83:e7:2b:0b:
                    4c:2b:65:f5:76:0f:6c:19:75:3c:cb:4c:2f:af:ed:
                    84:47:6e:07:7d:23:0f:83:06:e2:3a:ce:9b:79:d2:
                    c6:41:46:50:3a:78:af:29:36:e7:fc:18:67:6e:6b:
                    52:e6:6f:f0:c7:04:57:be:7d:1c:a3:b8:84:12:21:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:46:72:42:F2:90:A2:2C:92:29:A8:52:10:B7:A3:D1:31:14:60:ED
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32342d3234203d3e20313339313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:82:aa:78:4c:8d:10:e2:3c:31:87:72:78:72:6f:2f:37:27:
         22:cc:bc:6e:03:68:62:12:7c:02:9b:ad:a0:34:eb:4f:f7:c8:
         9a:1b:6c:52:9b:c1:42:5a:64:b7:18:7f:06:30:15:f0:31:0d:
         6e:6c:78:2b:33:d6:94:bc:2a:65:46:0c:d2:32:f2:f6:a6:45:
         23:b5:2a:8c:25:97:fd:50:42:a8:54:d4:e1:da:29:cf:8c:ae:
         84:5c:a6:50:a3:b4:3b:de:00:91:ff:0f:ba:02:29:bf:e7:c4:
         b1:5e:54:d5:21:63:89:d0:84:98:2c:76:48:99:ce:c3:ac:0c:
         09:54:5d:18:83:da:4b:ce:bb:16:c7:e9:a6:dd:de:0c:0b:f1:
         cb:6b:07:6b:23:90:6e:b9:bd:16:64:be:cf:52:b7:21:b3:73:
         07:04:2a:f4:75:ce:10:90:27:46:d4:60:2a:2e:39:5d:27:0b:
         5b:6e:1f:a0:f0:1d:6a:6e:d2:c0:42:77:1c:f3:bb:53:c3:92:
         21:8d:36:b7:46:81:13:c6:e7:61:06:46:09:84:bb:a4:3a:28:
         97:cf:28:ea:1c:1d:28:38:0d:38:05:d2:c7:00:6e:e1:19:b7:
         a5:46:c5:e5:87:55:3f:59:ef:46:70:9b:1c:2f:35:0b:cb:59:
         ca:70:e4:9c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUI7uXDLEZsmoUHXssRG7p+R8EmrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2
RUZERDAwRjAeFw0yNjA2MDEwNzIxMDdaFw0yNzA1MzEwNzI2MDdaMDMxMTAvBgNV
BAMTKEZFNDY3MjQyRjI5MEEyMkM5MjI5QTg1MjEwQjdBM0QxMzExNDYwRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi1Az685ed7k9w8EPnDS/SqOtY
GLqLDEqmyRzcFJN0B2FVx6TFhHJdePmpf6AK2CkTQ4u6lDAC/a5jN8cvtrHwwwiR
H2MNIBO+fMdmddgDOfjrfLfoaJCOQ7PQttbFrOOm4RojgLCGdjSXVamWC21Zxti9
f6rZzy2v0lrqt3oDJWwho9OvgwI5nG5O4lXFjXoqiiMdfb/dV0wPpO7FHDDW4vkU
H0ZIpxbpY7JSPt+U89zEXWybx7HSg94n/dGtg+crC0wrZfV2D2wZdTzLTC+v7YRH
bgd9Iw+DBuI6zpt50sZBRlA6eK8pNuf8GGdua1Lmb/DHBFe+fRyjuIQSIdJjAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/kZyQvKQoiySKahSELej0TEUYO0wHwYDVR0j
BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5
MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjcyNzc1MjM1MTk0MDYwOS8wLzMxMzAzMzJlMzQz
NDJlMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzOTMxMzczMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAGcsUDANBgkqhkiG9w0BAQsFAAOCAQEAHoKqeEyNEOI8MYdyeHJvLzcn
Isy8bgNoYhJ8AputoDTrT/fImhtsUpvBQlpktxh/BjAV8DENbmx4KzPWlLwqZUYM
0jLy9qZFI7UqjCWX/VBCqFTU4dopz4yuhFymUKO0O94Akf8PugIpv+fEsV5U1SFj
idCEmCx2SJnOw6wMCVRdGIPaS867Fsfppt3eDAvxy2sHayOQbrm9FmS+z1K3IbNz
BwQq9HXOEJAnRtRgKi45XScLW24foPAdam7SwEJ3HPO7U8OSIY02t0aBE8bnYQZG
CYS7pDool88o6hwdKDgNOAXSxwBu4Rm3pUbF5YdVP1nvRnCbHC81C8tZynDknA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:34 2026 by rpki-client