Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3130332e31332e3234342e302f32322d3232203d3e203435303631.roa
File:                     3130332e31332e3234342e302f32322d3232203d3e203435303631.roa (raw, json)
Hash identifier:          s7xNgeXINQ5XzPzluG6befi4PDsxGcgFDif9YN8Cjtc=
Subject key identifier:   96:18:55:66:F5:F8:91:C5:30:62:B6:1B:04:AA:3E:F2:71:07:43:A2
Certificate issuer:       /CN=8421F0680EB1B3756485D0F7681F78067E9C172E
Certificate serial:       044B27D4AC92BB705634C1AA15B95C4EF30A0B73
Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3130332e31332e3234342e302f32322d3232203d3e203435303631.roa
Signing time:             Sat 09 May 2026 11:55:55 +0000
ROA not before:           Sat 09 May 2026 11:50:55 +0000
ROA not after:            Sat 08 May 2027 11:55:55 +0000
asID:                     45061
IP address blocks:        103.13.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4b:27:d4:ac:92:bb:70:56:34:c1:aa:15:b9:5c:4e:f3:0a:0b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E
        Validity
            Not Before: May  9 11:50:55 2026 GMT
            Not After : May  8 11:55:55 2027 GMT
        Subject: CN=96185566F5F891C53062B61B04AA3EF2710743A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:35:95:53:0b:59:cd:56:b9:d9:6d:10:7b:
                    d5:4d:d2:27:ca:f7:ee:34:77:c8:9b:67:dc:ef:04:
                    f6:12:e1:e5:2b:2b:b7:e0:ac:ab:e3:08:d2:e9:22:
                    6e:8e:08:85:20:a3:45:93:20:fe:b9:80:c7:5d:a4:
                    3f:f4:b3:11:4d:dc:cd:ae:94:f4:cb:09:c4:c0:6b:
                    8c:49:02:af:1a:40:f0:b5:02:2c:cb:08:07:76:c6:
                    80:e5:42:d7:c3:c0:6b:63:60:c1:d4:1c:9c:0d:90:
                    04:7f:fb:6d:c9:56:6a:e5:bb:8c:dc:67:05:8a:a8:
                    a1:db:6d:31:77:92:91:09:3c:25:32:24:c6:9d:b1:
                    ef:b1:65:75:85:5d:c4:d9:5a:c1:5c:42:2f:23:80:
                    1b:6e:d2:4c:e9:88:c0:43:d0:55:c7:8d:26:21:8e:
                    ea:60:77:a1:ae:76:aa:61:d9:e5:88:27:44:38:3e:
                    38:98:03:a0:fc:02:b8:5d:c7:28:f6:c8:0b:b2:9a:
                    39:24:d3:15:b4:b7:b7:5d:bc:bf:2c:a0:d6:90:51:
                    6e:23:b7:c6:0f:dd:ea:ae:38:e8:35:fe:cb:45:ef:
                    be:ae:e1:dc:43:ca:23:4b:58:89:0c:c8:f8:79:16:
                    32:5d:6a:9a:45:62:23:b2:f9:7c:8a:fa:93:c7:68:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:18:55:66:F5:F8:91:C5:30:62:B6:1B:04:AA:3E:F2:71:07:43:A2
            X509v3 Authority Key Identifier:
                keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/3130332e31332e3234342e302f32322d3232203d3e203435303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:ed:c3:5c:a4:0e:91:e8:68:8b:82:fc:4c:cc:00:4e:b3:cc:
         9a:b2:9a:57:eb:33:c1:5e:39:12:f8:0c:52:72:7f:0e:db:eb:
         27:42:05:1b:a5:44:52:fc:14:16:af:27:c8:80:b4:f7:7d:8b:
         08:c9:6b:eb:a9:8b:48:1f:f8:a3:53:1b:90:61:36:ef:93:be:
         4d:fc:cc:b9:57:47:da:75:84:38:4b:36:a3:5c:62:b9:e4:04:
         51:83:5e:e0:69:11:31:d9:6c:69:21:23:a9:71:44:58:8b:7d:
         79:76:65:76:e1:0a:8e:51:d5:2c:e5:f8:69:4b:d6:4b:ef:ef:
         0b:43:9a:6f:2f:c0:cf:12:de:d2:b6:3c:2a:cf:91:42:ff:0d:
         8e:34:55:a8:91:16:45:8b:4f:31:1a:4e:c4:72:e1:0c:b6:78:
         56:26:e9:c5:4a:a5:4f:2a:46:12:61:3f:7a:df:0c:b1:c4:98:
         13:4d:06:70:4f:52:5d:0e:72:ba:65:c4:fc:e2:ef:3d:e6:e0:
         91:1f:d2:83:17:80:a9:2a:c7:b6:f1:c7:89:9c:ec:15:02:05:
         6b:ca:17:3c:c5:e9:11:23:97:38:47:8b:6a:f4:0e:ad:b1:29:
         c7:cc:b2:41:02:2b:ed:63:a6:11:b6:b3:91:83:e7:67:0e:39:
         cf:85:50:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 10:36:51 2026 by rpki-client