Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3132332e3130332e31332e302f32342d3234203d3e2034383038.roa
File:                     3132332e3130332e31332e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          6pn01jyYgKo68pNVvKbZfGdmkH2nlLSrJ/Q4QvPRHvE=
Subject key identifier:   DE:6B:16:BA:0A:DA:15:14:50:14:B9:AC:A8:D4:5C:DF:34:E8:07:8E
Certificate issuer:       /CN=D55490FB885552307A1D271E02513B4D423A90AE
Certificate serial:       2039F4ECD464B7AEE29D1BCE88E52AD71856EC12
Authority key identifier: D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3132332e3130332e31332e302f32342d3234203d3e2034383038.roa
Signing time:             Tue 12 May 2026 10:44:24 +0000
ROA not before:           Tue 12 May 2026 10:39:24 +0000
ROA not after:            Tue 11 May 2027 10:44:24 +0000
asID:                     4808
IP address blocks:        123.103.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:39:f4:ec:d4:64:b7:ae:e2:9d:1b:ce:88:e5:2a:d7:18:56:ec:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55490FB885552307A1D271E02513B4D423A90AE
        Validity
            Not Before: May 12 10:39:24 2026 GMT
            Not After : May 11 10:44:24 2027 GMT
        Subject: CN=DE6B16BA0ADA15145014B9ACA8D45CDF34E8078E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:70:5c:97:93:c8:67:22:8f:1a:d3:a3:f4:
                    a4:73:77:23:4e:5e:a1:95:c3:1b:6a:6e:fa:59:e6:
                    52:a7:1b:9a:f2:86:45:0e:55:6b:6c:c2:6e:24:bc:
                    20:a9:c8:09:90:5c:dd:ed:d6:a4:c3:86:87:ab:30:
                    11:1f:92:34:d3:2f:e0:89:1a:b7:b5:7c:bb:32:dc:
                    f4:2d:b2:f0:66:fe:68:03:83:7d:21:60:f5:d6:dc:
                    13:4c:c8:10:4d:8e:a4:5f:c2:8a:cc:ac:8a:f1:5b:
                    dd:1a:2f:0c:70:5d:c0:1c:f2:a3:b6:e3:2f:c5:bc:
                    b8:45:1a:d3:bf:46:a5:8e:57:a4:f7:74:2c:87:8f:
                    a4:2b:3d:7f:86:6c:5d:10:4f:82:b9:3e:f0:05:1c:
                    19:89:2a:05:a8:93:b8:03:be:b8:1b:59:0d:c1:ba:
                    a4:e6:90:2d:71:c7:85:0f:29:a4:5d:e7:07:95:97:
                    c7:eb:24:03:57:84:e5:aa:72:63:ec:91:ba:0d:ee:
                    4b:39:38:4f:96:af:a8:10:26:80:4c:04:25:ff:55:
                    32:4c:ed:38:76:d5:ea:99:16:58:bd:08:5b:86:ca:
                    53:72:fa:18:08:ab:ab:df:fe:99:ab:96:17:85:be:
                    81:01:9a:7d:08:b2:ea:a4:43:7f:4a:72:f6:9c:94:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6B:16:BA:0A:DA:15:14:50:14:B9:AC:A8:D4:5C:DF:34:E8:07:8E
            X509v3 Authority Key Identifier:
                keyid:D5:54:90:FB:88:55:52:30:7A:1D:27:1E:02:51:3B:4D:42:3A:90:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/D55490FB885552307A1D271E02513B4D423A90AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D55490FB885552307A1D271E02513B4D423A90AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371982850/0/3132332e3130332e31332e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.103.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:4c:cd:64:d6:5f:5e:4c:e2:56:bc:cc:a2:c5:74:c4:72:
         57:95:d5:f5:04:e7:b1:37:61:b2:5b:88:60:4e:f1:99:71:8c:
         6c:42:95:ae:63:fb:6a:25:bf:b3:87:2a:28:1f:a0:dd:42:c8:
         0b:27:f4:86:6d:80:97:e9:e4:bc:e6:ac:59:d1:82:03:8e:53:
         a6:5e:e9:b8:e6:7e:6d:26:55:c1:1f:47:01:f6:5d:20:09:2d:
         34:10:b0:29:0a:95:33:05:90:b2:52:1d:f3:61:a1:24:c3:d4:
         38:b4:8c:c0:00:0b:c6:73:8a:81:6b:f7:66:0f:fb:da:26:02:
         6a:a7:47:6a:61:72:65:31:ca:a9:77:11:11:bc:24:b1:d6:1f:
         96:bb:fc:1f:41:08:9b:64:35:e8:c8:13:4f:6f:e6:a6:53:1f:
         3f:48:5f:b7:02:63:55:79:75:30:3f:ea:07:e3:56:88:ca:03:
         e9:e6:c0:c1:24:9d:b4:2a:64:40:b5:06:a0:e4:66:d7:4b:58:
         11:d9:61:ed:58:ae:b0:33:ed:d3:8e:1b:28:67:85:76:89:da:
         c3:de:ca:75:29:6e:6c:c9:6a:7f:eb:bd:f1:49:dd:95:3f:c0:
         98:31:9c:ae:48:0e:63:22:ca:7b:d8:b4:8f:87:f3:09:3a:db:
         24:bd:ae:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:26 2026 by rpki-client