Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32332d3234203d3e20313331323734.roa
File:                     3130332e3139372e302e302f32332d3234203d3e20313331323734.roa (raw, json)
Hash identifier:          fij9rb0OYinJsbLagHbItJlKmnYeIXs9CVTFwhwKcME=
Subject key identifier:   E4:DC:66:2F:32:68:C4:35:C4:45:23:B0:66:04:76:FF:58:DC:68:2A
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       5E985BEFD95041CCCE0CF3B6668C883754B41E75
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32332d3234203d3e20313331323734.roa
Signing time:             Thu 07 May 2026 16:03:42 +0000
ROA not before:           Thu 07 May 2026 15:58:42 +0000
ROA not after:            Thu 06 May 2027 16:03:42 +0000
asID:                     131274
IP address blocks:        103.197.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:98:5b:ef:d9:50:41:cc:ce:0c:f3:b6:66:8c:88:37:54:b4:1e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: May  7 15:58:42 2026 GMT
            Not After : May  6 16:03:42 2027 GMT
        Subject: CN=E4DC662F3268C435C44523B0660476FF58DC682A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:e3:72:3f:70:ad:cd:2a:0e:c5:67:cf:34:
                    09:67:58:09:84:f5:10:f3:fd:e6:23:de:55:2f:38:
                    1f:94:a5:75:a9:72:9d:a9:da:08:f2:5c:ff:62:d1:
                    98:b0:a3:18:42:7a:4d:9e:71:97:8e:44:5c:3e:7b:
                    17:c5:1e:7b:40:18:3c:f6:32:4c:2c:8e:71:0d:6d:
                    e2:ac:41:c1:e3:3e:d7:77:2e:7a:fd:47:e2:b9:b9:
                    6e:14:92:98:70:d7:01:c9:48:87:ed:d0:23:a7:b9:
                    37:13:24:0a:4e:30:51:31:34:b1:28:8e:be:c1:aa:
                    46:f3:62:9d:c6:09:c5:fd:28:38:01:2b:04:a0:9c:
                    2d:9f:de:a1:b1:1b:c1:22:6a:fc:d0:66:2d:6c:fd:
                    02:ce:b2:68:39:ab:24:50:e1:45:21:c9:24:34:cc:
                    db:4e:5c:2a:e8:91:bc:1a:67:0a:7b:88:f6:9a:cd:
                    4c:d5:90:97:e6:63:3c:b5:32:76:7d:b2:83:b1:5f:
                    5f:51:df:e0:4e:35:76:c5:f3:3d:c8:6f:08:97:b7:
                    fd:b1:ba:62:29:d3:0b:1d:98:3b:b8:3f:fc:f9:7e:
                    e8:8e:c4:97:36:50:51:47:4d:23:ee:ca:52:73:4c:
                    8b:38:05:9a:4d:74:e0:b6:97:1e:b0:1f:51:ec:35:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DC:66:2F:32:68:C4:35:C4:45:23:B0:66:04:76:FF:58:DC:68:2A
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e302e302f32332d3234203d3e20313331323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:c7:77:f1:a1:f2:4d:9f:e4:da:9f:cf:eb:27:03:42:1b:b1:
         34:05:5a:13:26:04:85:70:4e:8d:05:a1:a1:58:95:40:74:58:
         75:4c:88:b6:11:a9:5d:02:4b:b6:8b:6a:2b:41:8d:69:28:71:
         d4:5d:bf:99:bd:b0:75:2e:d6:bd:1f:8b:57:db:a9:17:a6:ad:
         0c:b9:fe:47:a8:e3:9b:14:b6:76:88:63:27:5a:48:6a:3d:02:
         4e:ce:e6:a6:b1:e4:f2:fa:96:52:66:42:15:39:94:dd:d2:4d:
         ca:c0:de:fd:9a:2e:03:3d:5c:05:a7:82:ae:ab:57:90:59:05:
         51:77:d5:25:7e:e8:32:26:5b:4f:f1:ff:33:c3:bb:72:d9:82:
         78:ba:0b:51:45:c4:10:88:6d:be:f1:09:79:a3:07:e7:ab:d0:
         a2:a9:5b:85:e5:7d:6e:71:f2:ae:b7:20:7e:51:a2:cc:de:e8:
         91:3a:35:f1:b9:7c:a9:1d:a8:9d:9a:b3:d3:1a:0c:13:c8:ef:
         ee:4d:0b:3b:86:aa:29:0c:14:ba:ab:29:15:5c:32:2c:ee:a8:
         f7:33:0c:1a:84:60:67:15:85:32:e9:41:f6:6e:28:2c:a2:87:
         c9:92:63:66:89:b0:d1:49:00:26:e5:ad:bd:25:ed:9d:52:df:
         11:dd:91:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 09:23:52 2026 by rpki-client