Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa
File:                     3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa (raw, json)
Hash identifier:          YBHfDHM58M8le1NnLPhE0LYnXzGWsZEKzUotRLgoM74=
Subject key identifier:   92:A9:0F:9F:FD:6C:7B:AB:A4:2D:78:67:DC:33:0D:3C:77:13:70:CE
Certificate issuer:       /CN=A91B10180000/serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
Certificate serial:       7085ECAF471C97820EA0555418ED6D8958A3C14F
Authority key identifier: 72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa
Signing time:             Fri 19 Jun 2026 07:29:07 +0000
ROA not before:           Fri 19 Jun 2026 07:24:07 +0000
ROA not after:            Fri 18 Jun 2027 07:29:07 +0000
asID:                     151951
IP address blocks:        103.181.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 01:40:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:85:ec:af:47:1c:97:82:0e:a0:55:54:18:ed:6d:89:58:a3:c1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B10180000, serialNumber=721C36677F59FEEA9B6707B32253F3062FDFC899
        Validity
            Not Before: Jun 19 07:24:07 2026 GMT
            Not After : Jun 18 07:29:07 2027 GMT
        Subject: CN=92A90F9FFD6C7BABA42D7867DC330D3C771370CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:7e:06:48:7a:ee:41:9b:f4:2e:83:8e:c8:
                    f3:6f:49:84:08:4e:36:95:ce:55:74:19:4c:4d:c5:
                    44:4e:3a:76:1e:c3:4e:fe:e7:90:83:36:55:02:52:
                    46:e8:91:71:32:51:93:b3:2a:f2:a5:9c:53:6c:f5:
                    a4:e5:ca:99:30:a5:5f:62:ca:0b:d8:6b:ee:9c:a9:
                    ea:ce:c8:9b:90:05:c2:52:94:ed:41:b1:88:92:e4:
                    97:61:22:c8:71:55:c8:d8:68:12:11:fa:a5:7e:1a:
                    5f:6b:57:27:f4:67:65:93:7d:09:10:ee:65:9d:51:
                    3c:7f:44:f8:58:db:83:22:78:75:56:2e:65:7c:f9:
                    60:db:e7:fe:81:f8:91:b1:2f:e4:b3:2a:ea:67:9c:
                    ad:a0:e5:88:53:19:91:85:a6:69:81:e3:f6:21:10:
                    fb:e7:f3:13:56:66:72:78:b8:97:bd:84:34:28:e2:
                    b4:58:c7:e5:56:25:03:d7:0d:b5:ae:31:66:c2:6d:
                    3f:d0:2d:8a:ab:a0:d7:b1:da:6c:98:09:87:2e:1d:
                    80:7d:42:c7:1c:7f:cc:70:be:c0:b2:07:6b:8e:55:
                    c5:30:f8:e5:71:37:f0:ab:df:b1:00:6b:13:8c:2d:
                    9e:27:9e:43:02:1c:22:27:59:a9:1c:d9:c8:1e:cf:
                    17:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A9:0F:9F:FD:6C:7B:AB:A4:2D:78:67:DC:33:0D:3C:77:13:70:CE
            X509v3 Authority Key Identifier:
                keyid:72:1C:36:67:7F:59:FE:EA:9B:67:07:B3:22:53:F3:06:2F:DF:C8:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/721C36677F59FEEA9B6707B32253F3062FDFC899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chw2Z39Z_uqbZwezIlPzBi_fyJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/0/3130332e3138312e3136352e302f32342d3234203d3e20313531393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f5:8d:b5:05:15:c9:3c:0b:9c:26:93:4f:64:f0:49:5f:c6:
         2a:23:8a:95:32:00:30:fc:50:fd:a0:bc:ae:59:75:18:8a:26:
         1d:cb:cd:f4:cb:9c:48:0a:45:4e:92:31:ec:1a:42:32:86:b6:
         19:5a:ee:0e:84:b6:af:59:9d:2c:ee:28:ab:fd:c2:65:04:dd:
         f5:4e:60:32:aa:36:62:bc:92:00:0d:f9:31:62:f8:8a:57:3f:
         84:d3:02:bb:bb:d8:69:4d:6d:ee:9e:56:35:7b:c1:4f:70:71:
         7f:71:d5:49:13:1f:a7:ae:78:77:a2:b4:9d:76:a1:ff:56:eb:
         f0:52:32:28:43:eb:b6:a2:db:a7:2f:03:05:55:30:60:ab:f5:
         8c:79:71:11:a7:46:b8:08:ca:06:ec:c7:cc:cd:9c:07:9c:be:
         23:5c:24:b4:31:12:25:74:d7:3b:f0:b3:f0:d6:c6:01:1a:dd:
         25:65:4e:95:29:51:16:c0:df:b4:2f:41:7f:09:57:6f:a2:8d:
         92:80:c9:b1:e3:3c:4a:82:05:f9:43:9f:3a:16:aa:98:89:c1:
         e6:94:e8:d3:24:60:67:55:33:86:f0:5e:38:09:ce:b3:ea:41:
         a5:26:43:d0:b2:58:39:8d:67:61:7b:c7:bc:40:80:f1:88:f0:
         5e:0d:ae:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:36:35 2026 by rpki-client