Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa
File:                     3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa (raw, json)
Hash identifier:          V+qv7ptj/i5Q0Kg0lA4vCRODMLzJgZmqRhPGd63kKfo=
Subject key identifier:   F2:7B:B6:DB:9A:77:36:BA:B7:76:9F:F7:02:DA:B3:4C:72:D5:0E:EF
Certificate issuer:       /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
Certificate serial:       70459C88E52FD70A58BA056670DBA06A94838FF1
Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa
Signing time:             Thu 18 Jun 2026 16:08:14 +0000
ROA not before:           Thu 18 Jun 2026 16:03:14 +0000
ROA not after:            Thu 17 Jun 2027 16:08:14 +0000
asID:                     140726
IP address blocks:        103.14.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 07:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:9c:88:e5:2f:d7:0a:58:ba:05:66:70:db:a0:6a:94:83:8f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
        Validity
            Not Before: Jun 18 16:03:14 2026 GMT
            Not After : Jun 17 16:08:14 2027 GMT
        Subject: CN=F27BB6DB9A7736BAB7769FF702DAB34C72D50EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:31:af:e1:01:19:60:0a:75:b1:96:21:19:
                    a7:16:e4:a3:5e:3e:d4:ba:7d:e3:bb:a5:bf:7d:52:
                    22:b4:ce:09:a4:e8:6b:31:0b:93:78:89:48:85:1d:
                    4d:e9:09:61:d0:2d:58:1a:5e:fd:f2:32:44:05:f8:
                    de:9d:0f:d5:e8:89:7f:af:8a:08:53:0f:63:df:f0:
                    c0:18:a7:6d:29:1e:3f:88:3a:f5:0e:34:5c:84:58:
                    12:d2:f2:6c:73:f3:51:27:4e:04:27:81:12:82:38:
                    62:a3:01:85:ea:f9:a2:32:f3:c6:c0:67:72:91:ee:
                    f0:f7:94:6e:8f:4d:87:62:9c:9f:0b:d7:37:65:90:
                    52:73:0a:7a:5a:b9:9f:ad:e6:2b:1a:2c:2b:18:9a:
                    2d:39:95:25:87:33:12:b4:37:43:b2:56:a1:5b:32:
                    ad:5a:7f:c4:66:b8:3a:17:bd:1f:8f:f9:62:89:8c:
                    47:17:f2:da:93:e6:28:0c:1a:fd:a3:42:78:b3:ed:
                    8c:76:48:f3:36:b0:33:de:f6:4d:20:cb:e9:16:f0:
                    e8:e4:47:df:22:41:a7:5d:a5:c9:60:1a:b9:ab:1b:
                    dd:52:7c:d7:f2:24:b1:e2:9c:f5:06:65:8f:69:e3:
                    06:97:77:a7:5a:39:cc:92:f6:5b:af:f0:fb:3b:0e:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7B:B6:DB:9A:77:36:BA:B7:76:9F:F7:02:DA:B3:4C:72:D5:0E:EF
            X509v3 Authority Key Identifier:
                keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:63:5e:8e:81:2f:ab:50:10:e8:52:e5:eb:05:19:72:88:
         dd:c6:34:69:53:64:e9:f0:81:bb:3c:82:69:82:9b:69:f7:46:
         76:98:25:e7:13:ac:b4:6b:9f:db:92:99:c6:52:3e:86:75:bb:
         36:d7:96:91:0f:13:64:12:98:31:89:da:61:72:da:84:de:ce:
         ee:ef:00:a3:79:91:be:18:2d:70:50:28:2f:d8:ae:a8:98:24:
         d4:9b:4a:f2:e0:01:05:89:e5:5d:87:a3:b3:61:38:ea:73:bc:
         f8:a1:33:f0:00:fb:74:99:48:e7:e1:3b:3c:37:af:a6:b0:aa:
         da:98:b0:09:46:4a:50:0d:39:87:13:ea:bf:65:e5:db:36:eb:
         72:a8:4a:f2:8a:2e:ea:4d:f4:84:e6:3b:71:47:0a:e3:7c:d1:
         fa:1f:7f:84:f2:e2:7a:9d:89:bd:18:82:a9:e2:c7:22:e1:10:
         5a:95:e5:e4:b5:d8:9c:c8:89:a1:ef:cf:db:b3:fd:83:03:eb:
         e6:49:db:d6:b3:6a:3e:54:77:4e:20:ca:20:6f:37:f2:18:59:
         fc:e6:5c:25:f4:a5:b6:b8:48:9f:f4:d1:2c:8c:09:a7:7f:02:
         a3:85:cc:24:89:dc:7c:86:7e:37:ef:dc:05:78:6e:a4:e9:d1:
         18:0c:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 21:53:14 2026 by rpki-client