Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38332e302f32342d3234203d3e203538343631.roa
File:                     3130332e34342e38332e302f32342d3234203d3e203538343631.roa (raw, json)
Hash identifier:          Kh5kxhsVv4P80kwshvjLD9aLAdrAE3WTfQIOMpwp9RI=
Subject key identifier:   17:41:1B:91:6C:D1:9F:B6:8D:E7:1D:87:6C:07:03:2C:90:C9:F2:A4
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       7F75F206E30640CBA296A53CA8661DD2EC516767
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38332e302f32342d3234203d3e203538343631.roa
Signing time:             Thu 04 Jun 2026 06:28:42 +0000
ROA not before:           Thu 04 Jun 2026 06:23:42 +0000
ROA not after:            Thu 03 Jun 2027 06:28:42 +0000
asID:                     58461
IP address blocks:        103.44.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:75:f2:06:e3:06:40:cb:a2:96:a5:3c:a8:66:1d:d2:ec:51:67:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: Jun  4 06:23:42 2026 GMT
            Not After : Jun  3 06:28:42 2027 GMT
        Subject: CN=17411B916CD19FB68DE71D876C07032C90C9F2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:d5:a6:ba:83:9e:c5:09:65:6c:68:5f:0c:
                    a5:15:4c:12:52:06:7f:a8:26:b4:b6:26:54:a3:33:
                    b5:86:8a:7f:2a:c6:5f:9c:2c:b0:fb:d6:d0:90:9c:
                    47:17:7d:90:a2:89:d7:59:67:5a:8d:80:79:6e:06:
                    8e:40:08:d9:a5:6e:89:d1:69:97:e2:47:5b:10:c9:
                    e6:e0:d9:61:24:2f:28:a1:65:38:40:53:6d:53:7a:
                    12:1c:8e:40:11:19:91:c1:a5:c9:cd:82:8a:7e:6b:
                    41:f9:08:59:3a:83:82:59:17:93:ee:4c:fd:53:bb:
                    43:b5:f7:f0:5c:39:f2:9c:36:77:c4:42:aa:88:19:
                    25:33:11:b0:8b:35:1e:30:26:13:1a:e3:30:17:0c:
                    08:9e:03:34:a3:6d:db:7f:e8:83:3e:8d:ec:23:ab:
                    dc:c8:9c:02:4e:01:d4:05:f6:86:f0:e2:4a:f1:12:
                    ce:4c:26:e8:46:e9:b6:f5:0e:ab:7e:ef:99:e7:b3:
                    1e:97:5d:e0:9a:e0:97:93:fc:b7:4d:58:22:ea:42:
                    9f:8d:6e:75:70:1e:8a:42:ed:88:d1:cc:87:ba:67:
                    12:cd:07:8b:5c:eb:9b:fa:dc:ba:a7:37:a9:09:28:
                    d4:2c:fe:76:58:d5:ae:31:b2:ea:96:ca:86:48:98:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:41:1B:91:6C:D1:9F:B6:8D:E7:1D:87:6C:07:03:2C:90:C9:F2:A4
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38332e302f32342d3234203d3e203538343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:a1:da:2f:08:56:9f:33:84:bb:5f:93:51:d8:54:4e:ae:d9:
         51:7d:5c:14:d3:21:34:25:09:70:62:c7:49:51:42:f8:82:10:
         30:70:27:c5:2e:f8:9b:e0:6d:3a:14:7d:59:b9:8d:78:a5:41:
         11:ee:7d:78:fc:68:43:bc:aa:82:7e:95:ac:03:45:9e:bc:bb:
         3b:e9:57:81:e1:02:55:d4:a1:cf:55:54:bd:25:9f:88:6e:06:
         96:bd:b5:7d:23:52:58:8c:b8:40:b6:92:91:d5:70:1a:44:83:
         62:4e:e9:4d:8a:bb:e7:84:18:01:4c:0b:45:78:45:41:c0:61:
         0a:65:ef:f1:ac:d1:f4:5f:e5:bd:3b:48:fe:b5:07:cc:51:b8:
         fa:a4:7c:dd:4d:6e:31:ed:f7:e8:68:19:c0:59:9f:5b:31:49:
         bd:ab:49:e5:aa:31:2b:fc:25:5e:bb:10:2e:a5:fd:fa:25:8c:
         40:d0:8a:9d:9f:51:06:80:d1:1b:03:44:49:5b:e4:d9:e9:3b:
         37:b3:b5:99:eb:e1:1b:1e:0a:48:72:3c:6c:41:90:fe:5e:a9:
         6b:0d:48:8d:36:65:49:13:67:89:01:44:43:8b:8c:7f:36:e2:
         56:07:db:a6:81:88:55:07:c3:d8:0a:86:b0:f2:c2:b8:e5:f4:
         2e:59:2e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:49 2026 by rpki-client