Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e203435313135.roa
File:                     3130332e3130372e3231362e302f32322d3232203d3e203435313135.roa (raw, json)
Hash identifier:          3NJj2cH/+iRYviZJbklDzkNpnfhvDkTkOeSpR3Z+qaY=
Subject key identifier:   26:AB:B9:87:32:05:63:51:4E:94:32:17:E8:BC:0F:56:41:6F:FF:DA
Certificate issuer:       /CN=765F117BE77ECC31BDAB953318E1A2F507E82481
Certificate serial:       0477B00642520CB5D28395FBA25F3700AC71A73C
Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e203435313135.roa
Signing time:             Mon 29 Jun 2026 07:53:29 +0000
ROA not before:           Mon 29 Jun 2026 07:48:29 +0000
ROA not after:            Mon 28 Jun 2027 07:53:29 +0000
asID:                     45115
IP address blocks:        103.107.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 12:11:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:77:b0:06:42:52:0c:b5:d2:83:95:fb:a2:5f:37:00:ac:71:a7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481
        Validity
            Not Before: Jun 29 07:48:29 2026 GMT
            Not After : Jun 28 07:53:29 2027 GMT
        Subject: CN=26ABB987320563514E943217E8BC0F56416FFFDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:ab:0a:3e:62:d4:28:cd:4e:c8:cb:3f:b1:
                    04:6b:d8:35:4c:eb:bc:5e:1e:4c:87:c7:2b:28:4b:
                    1e:0c:23:66:ad:2d:28:3f:93:c8:ff:32:c0:ee:65:
                    55:18:f1:91:60:84:90:a5:cb:1c:e0:fd:3b:ca:f1:
                    89:78:ee:68:2d:49:c3:e1:b3:ff:2a:1b:6d:a1:bd:
                    c9:5e:25:d5:d9:32:46:15:bc:77:80:d2:20:1b:88:
                    69:4a:8d:72:fa:74:c5:0d:bf:17:98:ae:9c:91:18:
                    51:30:9c:9f:46:ae:1b:5e:2c:f7:94:96:3c:7e:17:
                    4a:77:f0:cd:8f:da:ec:e3:d8:b9:5f:90:0b:cf:7a:
                    dd:5f:ae:b5:3f:88:64:05:89:1b:5c:54:12:d0:ac:
                    79:0a:73:9d:a1:d8:d6:d0:c6:36:98:fc:c5:a7:c8:
                    15:5f:f6:e7:34:32:05:4c:06:e0:7f:68:9d:8d:d8:
                    be:05:7b:20:63:d6:c9:67:a4:5b:ed:c3:55:fd:a0:
                    ca:da:bd:6f:07:e8:c6:4d:fe:90:67:66:2a:78:95:
                    77:d2:d8:63:36:e3:ce:b6:6a:20:36:c6:50:c5:32:
                    c7:99:fe:9d:ce:89:5a:94:44:2a:c2:3c:3c:9b:99:
                    db:8f:c0:93:55:85:36:bb:06:72:60:e3:29:f2:17:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AB:B9:87:32:05:63:51:4E:94:32:17:E8:BC:0F:56:41:6F:FF:DA
            X509v3 Authority Key Identifier:
                keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e203435313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:e9:b3:e7:96:4d:90:a6:b3:22:e8:56:57:bd:8e:44:a5:b6:
         ba:08:91:b6:25:4d:e0:09:67:69:01:fb:5c:c2:fc:59:6a:55:
         7e:5f:0d:43:b1:4d:6b:be:65:29:33:a6:80:db:9b:22:5b:59:
         f1:99:d1:e2:a9:69:1e:b4:a7:ac:e1:4f:b6:88:41:f2:7d:a9:
         9d:7a:a2:26:37:e1:1c:41:a5:78:95:5f:70:ec:00:72:c5:6a:
         9a:56:9a:5a:93:82:ca:7d:c3:c0:cb:9d:32:e7:ea:6b:e0:bd:
         4f:e3:df:6c:8d:b0:13:9f:31:1f:31:fb:b3:6a:36:33:53:9c:
         16:d3:6d:d7:ff:fb:fb:34:3d:48:36:c5:e4:bf:56:23:b5:7b:
         0c:53:40:3b:a0:c7:42:69:b3:10:b9:bb:c4:e1:ac:35:e8:27:
         59:33:25:7d:57:15:ab:26:fb:4d:52:91:99:77:34:6a:56:ef:
         e9:ce:33:7d:f8:55:4f:98:1b:e9:80:b8:d6:36:ec:89:20:cb:
         99:67:4e:c9:4f:7c:fd:05:85:8c:5c:8b:cf:0c:38:ea:49:62:
         39:9a:47:74:2d:1d:e5:5c:06:84:79:86:6d:9c:74:d8:c8:c3:
         27:fa:f9:42:2c:fa:5b:a9:d1:18:6f:88:43:c9:33:5d:3c:58:
         7a:2f:15:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:45 2026 by rpki-client