Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38322e302f32332d3234203d3e203538343631.roa
File:                     3130332e34342e38322e302f32332d3234203d3e203538343631.roa (raw, json)
Hash identifier:          TetqalzGyJbFixTiNuf7erlmN/Xg0Ul/HCfKzTmFzjI=
Subject key identifier:   0E:5A:8C:A7:88:1E:3E:44:D0:D6:2F:17:68:07:71:0E:06:97:7F:29
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       59AEB6D4EEA366C82D94699718FCD71ECC23AE71
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38322e302f32332d3234203d3e203538343631.roa
Signing time:             Thu 11 Jun 2026 02:29:17 +0000
ROA not before:           Thu 11 Jun 2026 02:24:17 +0000
ROA not after:            Thu 10 Jun 2027 02:29:17 +0000
asID:                     58461
IP address blocks:        103.44.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ae:b6:d4:ee:a3:66:c8:2d:94:69:97:18:fc:d7:1e:cc:23:ae:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: Jun 11 02:24:17 2026 GMT
            Not After : Jun 10 02:29:17 2027 GMT
        Subject: CN=0E5A8CA7881E3E44D0D62F176807710E06977F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:69:70:92:55:a6:df:9f:ee:12:3a:0a:f9:
                    47:04:db:a9:fb:0b:5d:41:6b:2f:35:52:b1:e9:90:
                    c3:9a:51:48:55:93:18:a4:eb:8f:90:60:2d:92:d1:
                    43:3f:7b:df:d4:ad:cf:7c:79:bc:52:af:58:48:a9:
                    30:1f:1c:79:73:e9:51:94:cd:ec:40:cc:41:99:c4:
                    57:c2:19:d3:d4:d6:fe:1b:ed:2f:bc:97:80:67:de:
                    72:fb:c3:93:f9:23:61:61:a9:fb:b1:1a:fa:c2:15:
                    ba:42:7c:8d:74:39:86:f2:d3:71:9a:c9:be:c8:ac:
                    78:81:a9:a4:3a:97:5f:4d:95:2d:c9:fb:89:8b:97:
                    54:2b:94:13:fd:eb:f0:5e:86:51:e1:c2:2f:a9:1c:
                    34:d5:fe:2d:b0:18:a1:af:bc:1b:6a:61:94:59:5a:
                    ba:30:15:d4:20:33:96:c6:5e:50:2c:5a:39:10:3a:
                    2f:73:c3:b3:56:a3:7d:3a:34:ca:d5:61:0e:54:3b:
                    95:43:26:07:5f:52:65:52:c5:c0:72:69:a5:cc:e8:
                    44:08:41:d7:77:ef:e2:ce:d7:58:d1:35:d3:e9:9d:
                    5e:cf:c1:cf:f8:4a:ea:36:b8:7a:9f:5a:e6:f2:13:
                    d7:5c:41:10:b5:77:fb:59:b3:e2:ee:2b:01:fb:b6:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5A:8C:A7:88:1E:3E:44:D0:D6:2F:17:68:07:71:0E:06:97:7F:29
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38322e302f32332d3234203d3e203538343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:6c:70:5e:fc:82:b5:06:2f:18:2f:c8:39:4b:5e:98:4a:23:
         3e:7f:f6:a1:a2:0c:85:96:58:4e:60:d1:ad:93:0a:3b:ec:95:
         e7:89:2d:b4:98:79:a1:97:fc:e3:19:cf:82:89:35:d1:86:ae:
         15:41:41:c4:f3:b7:24:99:2e:8b:48:d3:e2:44:10:e5:70:ce:
         b0:b7:0c:b8:5e:c1:b8:2c:e4:98:c2:15:96:28:41:44:b3:16:
         42:74:3e:ff:e0:9d:75:52:49:b4:87:9b:a0:3b:26:9e:e6:ce:
         d3:77:10:d4:3c:2a:ed:7d:59:0e:29:21:36:58:19:e6:01:98:
         00:4e:b2:ca:b2:0d:5b:55:f4:38:37:3c:d9:cb:5f:3e:ee:32:
         5a:ae:4a:a5:d3:aa:33:bb:33:91:06:83:9d:92:d7:85:c2:33:
         91:53:f9:62:a3:90:fa:53:12:d4:0b:90:7f:0a:d5:c8:ee:a3:
         34:8c:13:eb:be:0b:7f:af:10:60:a5:59:46:9d:71:8d:4b:0c:
         1a:a8:75:3a:5b:0a:0b:aa:34:fe:72:d1:58:c0:35:9d:52:18:
         e4:ce:13:10:1f:59:cb:ba:af:92:9c:16:b8:3b:e7:e4:29:0c:
         15:a3:b6:6a:5c:07:88:da:e7:df:ea:38:ec:62:b0:a6:aa:8b:
         c0:3f:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:47 2026 by rpki-client