Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32342d3234203d3e203538343631.roa
File:                     3130332e34342e38302e302f32342d3234203d3e203538343631.roa (raw, json)
Hash identifier:          NUxVOYHrrY8En+O6+hvzqYGTwet0BQpnl9Anzjx9Pmk=
Subject key identifier:   20:80:9A:21:05:7B:94:4C:EA:89:10:EC:97:55:9E:78:33:00:76:92
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       2AFE7BBCE4FA7B08A9F6EA79BEA9D8472C2BA2B0
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32342d3234203d3e203538343631.roa
Signing time:             Thu 04 Jun 2026 06:28:42 +0000
ROA not before:           Thu 04 Jun 2026 06:23:42 +0000
ROA not after:            Thu 03 Jun 2027 06:28:42 +0000
asID:                     58461
IP address blocks:        103.44.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fe:7b:bc:e4:fa:7b:08:a9:f6:ea:79:be:a9:d8:47:2c:2b:a2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: Jun  4 06:23:42 2026 GMT
            Not After : Jun  3 06:28:42 2027 GMT
        Subject: CN=20809A21057B944CEA8910EC97559E7833007692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:85:61:98:f6:3b:3c:02:89:d2:cc:44:6c:
                    26:7c:ad:5e:d0:8b:36:8c:dc:a7:0a:da:2e:5e:22:
                    f6:4b:7c:28:6b:9e:20:f3:3d:d8:8c:28:92:6c:b0:
                    be:16:8a:2c:15:8f:b7:70:6a:2c:05:ac:9a:67:1b:
                    c8:5a:d6:45:b4:b2:fe:f7:7d:94:ab:67:5f:94:0d:
                    ee:d9:a3:94:88:99:c8:27:4d:43:24:07:77:2f:a0:
                    9b:99:9d:2d:44:3f:59:37:fc:1a:cd:a6:1d:d3:65:
                    cc:15:61:35:8b:b3:31:01:a2:e5:c0:d5:8e:4c:ee:
                    a6:2c:91:ec:eb:e4:02:b4:b6:fc:a5:0c:97:40:74:
                    32:7f:d1:72:9a:3b:37:e2:ef:df:93:8d:4d:42:09:
                    f8:87:6f:2c:c5:51:ed:ab:7f:a8:9b:9a:65:05:f4:
                    29:9f:38:82:78:c6:69:96:e0:56:ca:ba:af:15:a8:
                    b1:7a:32:68:4f:cd:3d:a5:e4:f3:ad:10:53:c1:d8:
                    a0:ea:22:22:6c:55:69:b2:12:6d:00:ea:ae:e1:ee:
                    61:4e:b8:66:00:cc:53:de:e4:ff:22:1e:2e:3b:f9:
                    3a:2a:82:8d:e4:9e:45:07:43:c6:30:03:a0:0d:0c:
                    41:b8:9b:45:09:82:c0:3f:ca:3d:3f:ef:f0:00:a9:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:80:9A:21:05:7B:94:4C:EA:89:10:EC:97:55:9E:78:33:00:76:92
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32342d3234203d3e203538343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:d3:86:b7:23:16:76:d5:23:39:1c:cc:74:fd:92:94:df:67:
         be:cc:36:7c:6a:d4:5e:c4:d4:15:d3:c1:3c:a1:87:3c:6f:c8:
         6a:e7:d7:11:4c:d6:a7:a2:0d:c9:a2:75:97:98:47:a8:87:85:
         0b:3c:2a:ea:04:d7:7b:79:34:42:ec:2d:c3:3d:47:fc:ac:d7:
         4e:f4:f5:e7:f6:a6:e6:59:02:f7:19:ad:02:93:ce:b1:8f:1a:
         6c:6c:3a:68:ee:c7:d0:b0:fe:2d:a5:93:1c:ff:27:fd:c3:82:
         51:3f:3a:80:47:a5:24:fb:51:b4:1b:e2:74:95:c0:73:cb:fd:
         56:37:c2:33:07:e9:27:6d:49:2a:e0:07:73:6a:13:67:5d:41:
         5f:40:cb:f8:60:ae:3e:b8:c7:80:4c:e7:53:60:1e:06:39:ba:
         37:21:0a:f2:60:9b:ec:28:e8:59:6c:1f:df:ab:59:10:f6:7f:
         e6:3f:2e:a2:76:cc:c4:3b:a5:ef:ea:11:69:62:36:e7:27:fd:
         0d:0c:0d:88:72:73:bb:0f:eb:21:c7:0c:71:bb:ef:4a:f6:54:
         c9:da:ad:2a:40:1f:ea:e5:4d:66:28:83:6c:28:9b:b0:e4:13:
         0d:93:b2:91:fa:4b:57:e4:48:07:b8:92:88:9f:f3:4c:61:8c:
         d3:2f:da:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:51 2026 by rpki-client