Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098465627510669315/0/3130332e3135362e36382e302f32332d3233203d3e2034383132.roa
File:                     3130332e3135362e36382e302f32332d3233203d3e2034383132.roa (raw, json)
Hash identifier:          7bejjbNQ3v0uT78boBdtD0q+BBCNI2h6V6F6ctkt6zc=
Subject key identifier:   DD:BB:09:D0:4F:90:49:2A:19:08:22:10:85:24:0D:9D:D5:E3:61:A2
Certificate issuer:       /CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Certificate serial:       2B565B3DF6ED243302417F44197509681499FACA
Authority key identifier: 1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/3130332e3135362e36382e302f32332d3233203d3e2034383132.roa
Signing time:             Thu 02 Jul 2026 03:25:37 +0000
ROA not before:           Thu 02 Jul 2026 03:20:37 +0000
ROA not after:            Thu 01 Jul 2027 03:25:37 +0000
asID:                     4812
IP address blocks:        103.156.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 05:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:56:5b:3d:f6:ed:24:33:02:41:7f:44:19:75:09:68:14:99:fa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
        Validity
            Not Before: Jul  2 03:20:37 2026 GMT
            Not After : Jul  1 03:25:37 2027 GMT
        Subject: CN=DDBB09D04F90492A1908221085240D9DD5E361A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:08:43:28:ec:02:b6:9e:b6:48:da:cd:fe:21:
                    da:25:ca:58:30:f4:a7:c9:0e:61:7a:e2:da:38:19:
                    29:57:36:c7:92:39:dd:ec:36:76:0b:68:90:0d:49:
                    87:52:63:23:ee:7f:e8:c9:f0:45:bf:f3:78:8e:5d:
                    05:05:e3:1f:b1:f3:1d:d4:85:ed:f4:90:a0:cb:0c:
                    45:30:a4:df:46:7c:37:ae:59:d3:5f:40:45:45:1b:
                    cb:49:3f:6a:3c:7b:9a:80:a1:39:18:1a:82:2a:60:
                    be:c7:7e:d4:5d:7a:bc:70:c1:28:14:ff:fe:54:9e:
                    f6:d0:f7:f0:10:44:b6:ae:74:4d:08:f2:04:ba:11:
                    86:23:43:91:f4:e6:f6:a4:40:52:21:9f:9a:94:60:
                    0b:91:05:15:ae:0f:a5:bf:ae:41:05:fb:a7:7e:4d:
                    8a:b0:60:24:00:72:90:65:c5:a0:d8:fd:08:40:24:
                    52:be:44:d3:35:44:87:6a:87:02:e6:08:5e:4c:4a:
                    3b:6a:ab:fb:50:3a:c3:f5:3b:a9:49:70:bc:b5:d4:
                    9e:2d:e6:8e:d3:37:f2:97:8f:78:d5:ee:26:e1:32:
                    c4:7b:b9:25:00:11:57:3a:9c:8e:4d:1b:67:c5:fc:
                    c0:7e:41:31:96:67:d3:b7:e0:f9:96:0f:86:59:97:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BB:09:D0:4F:90:49:2A:19:08:22:10:85:24:0D:9D:D5:E3:61:A2
            X509v3 Authority Key Identifier:
                keyid:1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/3130332e3135362e36382e302f32332d3233203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:c4:7e:59:8d:97:34:61:08:a7:0c:fd:66:28:ad:cc:5c:22:
         2a:52:20:bd:3f:e7:ae:fa:34:33:3f:ad:aa:a7:ab:d5:ea:52:
         15:2d:43:8b:0e:56:96:bb:c1:a6:9f:4e:18:dd:d5:17:f0:01:
         29:05:e7:7c:a4:f6:b4:93:71:ee:55:3f:1a:a1:ed:50:3e:8c:
         91:c8:69:e4:04:f1:08:57:eb:de:94:5a:ad:10:1f:6f:d3:f6:
         6a:ed:c6:67:4a:f2:88:5e:d3:d1:d1:2b:fd:26:11:78:b9:8c:
         01:4b:0f:3c:5f:e4:a6:59:70:66:37:36:03:bd:47:7e:b5:c0:
         88:7c:83:49:c1:b0:90:dc:df:17:e9:a3:c9:8f:ef:a0:af:1d:
         00:db:91:cb:fa:8a:5e:51:87:53:7f:b9:c0:0d:13:00:bc:ac:
         0d:0d:e7:11:1f:af:82:22:11:9c:2f:4f:47:4e:78:5e:0e:60:
         c7:58:35:88:e7:51:d4:eb:d7:9e:7b:b6:85:29:cc:f7:bf:48:
         9f:37:14:8b:37:a3:8b:32:19:ad:09:16:74:0e:58:fc:44:80:
         ea:f5:13:ee:c4:95:ef:62:83:27:de:27:43:4b:82:75:76:d9:
         32:b0:a6:e0:22:2f:e9:45:0b:dd:f4:87:06:e6:fc:56:60:64:
         ac:e8:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:17 2026 by rpki-client