Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS24547.roa
File:                     AS24547.roa (raw, json)
Hash identifier:          BTsAURzD35Y0+zvKbbI59ayXNRg0UlPJQ826Q8J4KwE=
Subject key identifier:   2D:7B:95:E2:AA:40:F0:CC:4B:60:14:F7:23:2B:50:62:2A:50:EA:F7
Certificate issuer:       /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
Certificate serial:       64D4C96E3FD443A786C55DA296E23648ED998635
Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS24547.roa
Signing time:             Mon 29 Jun 2026 15:05:25 +0000
ROA not before:           Mon 29 Jun 2026 15:00:25 +0000
ROA not after:            Mon 28 Jun 2027 15:05:25 +0000
asID:                     24547
IP address blocks:        103.63.160.0/22 maxlen: 22
                          103.63.164.0/22 maxlen: 22
                          2405:1480:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d4:c9:6e:3f:d4:43:a7:86:c5:5d:a2:96:e2:36:48:ed:99:86:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60
        Validity
            Not Before: Jun 29 15:00:25 2026 GMT
            Not After : Jun 28 15:05:25 2027 GMT
        Subject: CN=2D7B95E2AA40F0CC4B6014F7232B50622A50EAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:65:52:fb:2e:6a:1b:00:8f:99:57:38:fc:
                    bf:94:95:dc:8b:97:f8:f7:7c:eb:6e:57:b0:f7:25:
                    e2:70:8e:41:88:63:bd:00:97:b9:60:0c:5c:3c:62:
                    09:af:1b:02:7a:de:00:38:09:2a:1f:0d:a6:31:28:
                    eb:04:89:8a:cb:b5:27:58:86:35:e9:f7:e1:c0:00:
                    8f:3d:60:66:65:db:0f:c2:70:81:5c:6e:39:57:47:
                    06:08:7a:79:da:2f:73:86:54:b3:34:95:f7:ba:ff:
                    7a:df:34:7d:f0:b2:06:5f:39:68:d1:6c:cc:68:54:
                    0f:07:f9:8e:44:13:20:45:66:70:ff:2d:b9:59:ac:
                    f6:20:dd:58:be:bf:e9:9b:e1:9d:f7:72:9c:58:bb:
                    bb:d9:d7:38:47:d7:b1:b6:32:bc:6c:47:06:e6:9a:
                    6b:98:c2:84:18:f3:2c:e1:9a:9c:16:25:cd:c3:43:
                    a9:9a:1b:13:ef:0b:d5:d1:b2:75:5e:1a:7c:f5:82:
                    d7:3e:48:d8:9c:71:82:e1:9d:47:00:45:bd:f1:43:
                    9d:bc:53:43:47:0c:9c:c5:d9:8f:b4:f8:f8:5b:5b:
                    c9:c4:a4:3e:96:2f:2b:46:a7:65:05:e8:a0:8f:b1:
                    6d:d2:fa:d7:5c:bb:70:bc:d0:a0:50:88:4d:ca:92:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7B:95:E2:AA:40:F0:CC:4B:60:14:F7:23:2B:50:62:2A:50:EA:F7
            X509v3 Authority Key Identifier:
                keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/AS24547.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.160.0/21
                IPv6:
                  2405:1480:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:48:7d:e4:77:cc:d0:cc:b6:1e:6b:5e:fd:77:a0:02:51:cd:
         67:06:22:2d:b7:11:32:87:6c:05:ec:05:e0:e4:17:3a:6b:b1:
         e7:84:97:d9:ef:27:f8:e3:c1:13:00:dd:40:fd:b3:2b:81:04:
         26:c7:d2:dd:15:c7:2e:3f:5c:bd:8b:ea:34:c6:68:2e:6a:0e:
         5c:32:3f:55:c2:ca:24:07:0b:d4:2d:02:3a:21:06:97:7e:2d:
         8b:62:a7:94:02:98:81:1a:b5:73:1e:6b:96:1c:5a:25:7f:1b:
         82:19:ca:fe:cf:05:78:9a:47:2d:4e:24:b8:9f:13:51:e2:af:
         1a:f1:01:f9:a3:d0:aa:f8:67:78:65:69:97:d9:98:ae:86:ff:
         03:13:46:e2:38:cb:0c:39:13:3f:87:c2:f9:50:38:98:4e:4f:
         20:c4:b1:85:59:1a:8b:72:96:07:12:d4:54:ec:c7:a9:b7:da:
         f2:e4:16:fd:df:43:9e:29:ab:01:b5:01:37:06:99:39:a7:37:
         d7:dd:20:2d:86:11:65:ad:71:71:42:6e:9a:27:59:b0:ca:7b:
         b0:3c:33:c7:18:23:b4:f5:aa:3f:8d:f3:fa:68:86:58:d4:eb:
         9f:b2:33:0d:29:1e:4d:7c:cd:cd:c0:86:77:f4:11:90:07:a5:
         fe:08:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 22:58:10 2026 by rpki-client