Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122361002747232293/0/3130332e3134352e36302e302f32332d3234203d3e203432393630.roa
File:                     3130332e3134352e36302e302f32332d3234203d3e203432393630.roa (raw, json)
Hash identifier:          4quknRlzzctaSU5IFxB6Tpo5hzL1S+C/fjMxv8WeKYA=
Subject key identifier:   AC:F1:A9:92:2D:C4:51:84:93:06:51:AA:37:28:78:72:A1:BA:05:D0
Certificate issuer:       /CN=A919AAA00000/serialNumber=ECE7AD10B332E86702B118145564E6C084B9C744
Certificate serial:       37FD07689742BB8BF80B80EC35799AE07ECBD8C2
Authority key identifier: EC:E7:AD:10:B3:32:E8:67:02:B1:18:14:55:64:E6:C0:84:B9:C7:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7OetELMy6GcCsRgUVWTmwIS5x0Q.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/3130332e3134352e36302e302f32332d3234203d3e203432393630.roa
Signing time:             Thu 02 Jul 2026 04:19:58 +0000
ROA not before:           Thu 02 Jul 2026 04:14:58 +0000
ROA not after:            Thu 01 Jul 2027 04:19:58 +0000
asID:                     42960
IP address blocks:        103.145.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7OetELMy6GcCsRgUVWTmwIS5x0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 07:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fd:07:68:97:42:bb:8b:f8:0b:80:ec:35:79:9a:e0:7e:cb:d8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AAA00000, serialNumber=ECE7AD10B332E86702B118145564E6C084B9C744
        Validity
            Not Before: Jul  2 04:14:58 2026 GMT
            Not After : Jul  1 04:19:58 2027 GMT
        Subject: CN=ACF1A9922DC45184930651AA37287872A1BA05D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:10:c2:50:a5:9e:3a:94:ef:05:59:0a:42:
                    54:fd:9f:01:27:2c:94:70:b9:bb:2f:68:8b:fd:bb:
                    18:1d:35:75:b2:90:f8:05:76:bb:51:a3:46:cf:81:
                    1f:63:d9:8f:d4:32:93:98:49:36:e4:3d:04:39:02:
                    57:fc:16:a3:03:e0:eb:25:8d:d0:d7:6b:23:37:91:
                    91:2e:36:e9:d1:2f:a3:1d:d0:5c:75:18:74:74:d2:
                    18:7c:89:7c:e9:6f:00:34:6f:de:b0:82:bb:ea:7d:
                    74:62:c6:08:92:40:8e:07:c3:62:30:91:6e:79:06:
                    84:66:fd:90:44:3a:57:ae:0a:76:b0:5d:a7:6b:c8:
                    59:d6:68:04:59:02:44:cb:ae:0a:f9:f2:28:e8:bf:
                    71:71:70:1e:98:e0:72:e5:74:40:e1:7e:d1:a4:46:
                    99:f6:fd:1b:c0:ae:98:57:12:e1:b0:70:ee:61:67:
                    1b:14:cf:6e:71:8c:04:4b:64:c3:e7:71:1c:b0:84:
                    ce:af:49:d6:f0:c7:2a:8f:01:9b:5d:82:1f:64:f1:
                    e9:b4:5a:81:8f:38:05:be:16:94:42:b0:94:12:0e:
                    15:83:ea:c1:a8:53:8d:d0:51:fb:c0:71:da:1e:e4:
                    28:09:a4:a1:05:50:5c:19:3f:83:fa:82:2e:3d:cc:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F1:A9:92:2D:C4:51:84:93:06:51:AA:37:28:78:72:A1:BA:05:D0
            X509v3 Authority Key Identifier:
                keyid:EC:E7:AD:10:B3:32:E8:67:02:B1:18:14:55:64:E6:C0:84:B9:C7:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/ECE7AD10B332E86702B118145564E6C084B9C744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7OetELMy6GcCsRgUVWTmwIS5x0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122361002747232293/0/3130332e3134352e36302e302f32332d3234203d3e203432393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:e5:12:ae:5e:48:1a:10:4f:a4:25:a0:35:00:3d:62:25:d2:
         53:9d:ca:fd:b9:a0:18:16:80:bc:60:42:8d:ae:c8:2c:09:46:
         01:55:30:69:3c:d6:f9:f1:1c:08:c3:da:3d:cf:f5:25:0f:59:
         5a:75:41:14:8a:a7:2e:de:8f:54:d5:52:0b:41:f8:04:89:90:
         09:e4:e8:08:11:05:2a:26:13:13:30:d2:74:2b:12:cc:67:57:
         04:a8:59:05:cf:bc:97:53:62:8e:8a:2d:40:52:20:31:44:57:
         d1:cc:24:3d:1b:41:c8:51:4b:1c:9b:f6:fc:12:89:a5:4b:b4:
         78:8a:6f:ad:bc:6a:70:b2:ff:05:d3:61:93:5b:10:bd:fd:24:
         e7:ad:da:19:20:78:30:72:4d:67:43:c6:5a:5e:7c:a6:10:54:
         9d:a0:33:4f:65:de:51:ca:3c:35:f6:55:2c:bf:7e:72:91:f6:
         4c:0b:ff:4f:8b:85:7d:74:17:69:fc:be:88:c2:fd:1e:c0:51:
         9f:68:7e:31:90:13:ac:73:89:15:be:c9:4d:ba:9a:78:75:2e:
         81:22:36:ba:b3:ab:06:32:0e:11:85:05:d1:70:92:18:ff:15:
         93:06:4c:00:84:bf:20:64:6d:5f:d8:28:32:c2:81:66:70:9e:
         c2:c3:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 09:20:56 2026 by rpki-client