Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133372e302f32342d3234203d3e203539303634.roa
File:                     3130332e35372e3133372e302f32342d3234203d3e203539303634.roa (raw, json)
Hash identifier:          EhkLMd2zDyYJ51w/Sy0gxXGPOF2SNni4GumU+NZ9Ag0=
Subject key identifier:   80:0D:ED:AC:2C:A1:07:DA:A5:92:D6:0D:69:42:3E:D4:4E:21:A3:B9
Certificate issuer:       /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Certificate serial:       67FB9A49FC85AA8ABA5A7AC18ADAAE1A402B8BAA
Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133372e302f32342d3234203d3e203539303634.roa
Signing time:             Tue 02 Jun 2026 07:36:57 +0000
ROA not before:           Tue 02 Jun 2026 07:31:57 +0000
ROA not after:            Tue 01 Jun 2027 07:36:57 +0000
asID:                     59064
IP address blocks:        103.57.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 03:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fb:9a:49:fc:85:aa:8a:ba:5a:7a:c1:8a:da:ae:1a:40:2b:8b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
        Validity
            Not Before: Jun  2 07:31:57 2026 GMT
            Not After : Jun  1 07:36:57 2027 GMT
        Subject: CN=800DEDAC2CA107DAA592D60D69423ED44E21A3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:d3:d2:ae:96:6e:ec:31:62:3d:c6:77:51:
                    c2:7b:36:f9:d3:f4:2a:e4:82:91:12:53:11:22:02:
                    3f:8c:61:a8:4e:c3:60:63:3e:68:9f:07:c5:61:3d:
                    fc:5a:d2:bd:8c:d2:30:49:23:44:62:da:94:9a:a8:
                    70:c1:c6:41:cc:20:84:df:9c:48:cd:c9:7a:bd:15:
                    b4:28:8f:65:aa:57:38:65:6f:70:3f:9a:a7:a9:ab:
                    26:82:07:e0:ae:a5:96:05:a3:ab:e9:e2:2c:6e:15:
                    35:64:f8:74:6c:6e:11:34:14:da:d8:ad:3d:ed:ac:
                    ef:c8:e1:2c:b3:d2:a4:ac:5a:13:5f:3e:ac:57:5f:
                    2b:cd:fc:d6:9c:31:a4:c3:2c:a4:e9:3e:34:18:ff:
                    bd:aa:df:5f:0a:fe:e1:fb:04:b6:22:a1:82:96:87:
                    af:d6:53:49:20:12:95:48:aa:af:9e:9c:e1:4c:de:
                    03:45:67:7e:b9:f4:7a:d9:6f:63:55:aa:76:c1:b6:
                    b3:d9:3c:e4:c1:ae:0d:d3:1d:d8:31:66:70:59:5b:
                    d2:a1:c5:0c:03:aa:d3:00:ee:2b:7a:f0:f9:e0:e2:
                    f8:da:ca:f4:dc:3b:d2:9c:3d:c3:99:ed:5a:e0:dc:
                    83:2c:2a:fe:f6:5d:24:74:35:ba:5e:0c:9c:0b:8d:
                    39:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0D:ED:AC:2C:A1:07:DA:A5:92:D6:0D:69:42:3E:D4:4E:21:A3:B9
            X509v3 Authority Key Identifier:
                keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/3130332e35372e3133372e302f32342d3234203d3e203539303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:8e:56:2f:77:1c:f3:8f:ab:05:45:75:c9:28:c2:45:90:82:
         ad:2f:c2:cd:1a:7e:b6:8c:50:79:74:19:3d:28:f6:66:06:fb:
         b3:2c:0c:f5:4b:b3:82:2a:04:f1:18:9f:16:b6:92:95:d7:b6:
         a4:2c:6a:f2:b2:c9:c3:63:d4:72:7c:2c:95:68:41:78:84:34:
         25:30:d4:93:76:75:09:f4:b5:39:22:b5:3e:20:76:10:02:4d:
         66:41:d5:00:ca:33:ed:5f:9c:6e:d1:77:0a:ac:f2:14:ff:7c:
         7d:44:68:74:b8:dc:f5:50:2c:7a:e6:07:60:b8:a6:91:a3:90:
         25:32:e8:c8:f7:2b:cf:8f:b6:3d:a0:cf:e8:4c:9b:2c:e3:fb:
         b1:f6:5f:d0:e2:33:b7:ba:cd:dd:e2:06:52:74:10:b2:44:ca:
         86:d9:8c:f1:ef:d7:43:3a:d4:df:aa:28:22:61:6d:df:48:ed:
         6f:69:96:50:8e:bd:02:92:e8:09:c5:4e:fb:4b:04:6b:d7:74:
         40:c9:7c:47:35:c3:88:2f:74:49:1c:bd:ce:67:81:8f:2d:a5:
         ed:09:41:81:58:dc:8b:63:c6:fd:e0:f9:ed:ad:29:96:92:c5:
         0a:ef:bc:41:4e:80:79:63:e9:fe:c2:30:19:f0:f1:9c:a0:a4:
         94:38:63:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:52 2026 by rpki-client