Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e332e302f32342d3234203d3e203538353432.roa
File:                     3130332e3139372e332e302f32342d3234203d3e203538353432.roa (raw, json)
Hash identifier:          FItEo1dOsmYj+3DmabSGIv72m6Lk7RbbGmsWTRwaFhM=
Subject key identifier:   CD:3B:05:37:75:4B:3C:4D:23:14:C8:6B:3A:E0:F6:08:AB:21:6B:8B
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       7E852E1423DCC0137EBFB219F53F033162DBCCA2
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e332e302f32342d3234203d3e203538353432.roa
Signing time:             Thu 07 May 2026 16:03:42 +0000
ROA not before:           Thu 07 May 2026 15:58:42 +0000
ROA not after:            Thu 06 May 2027 16:03:42 +0000
asID:                     58542
IP address blocks:        103.197.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:10:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:85:2e:14:23:dc:c0:13:7e:bf:b2:19:f5:3f:03:31:62:db:cc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: May  7 15:58:42 2026 GMT
            Not After : May  6 16:03:42 2027 GMT
        Subject: CN=CD3B0537754B3C4D2314C86B3AE0F608AB216B8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:c4:91:5d:17:a1:86:d5:82:b7:5c:b1:f2:
                    58:d1:25:7d:e9:f9:e3:34:e3:c0:65:32:5f:c3:87:
                    27:c1:ba:6a:cd:b7:10:d9:bf:ba:e4:0e:58:ce:1b:
                    d8:8a:ef:5d:2e:95:d9:6e:47:e2:9a:c6:3e:ab:c9:
                    9b:75:90:59:56:bc:7c:d9:e7:70:cd:29:14:d6:3d:
                    7f:0d:23:46:82:f0:e1:9f:d0:e7:4e:34:d7:eb:38:
                    c1:5d:11:58:89:91:94:c5:32:f4:7d:42:ff:84:db:
                    d0:52:b2:dc:b2:ec:20:42:36:61:13:46:33:98:4f:
                    ce:34:b1:64:91:e7:9e:fd:18:50:92:83:05:d9:e3:
                    b7:7c:49:7a:ef:b8:b3:85:f9:b7:75:58:46:50:1c:
                    4f:ec:d7:c1:d2:e2:e4:6f:c4:55:a0:8a:f2:e7:0f:
                    c4:52:da:58:e0:62:a2:96:d5:36:13:90:0c:8c:63:
                    88:2e:e7:10:73:47:11:dc:5b:56:32:a5:1d:0a:de:
                    76:5e:97:af:1b:86:32:e4:fb:cb:de:f9:27:8a:09:
                    62:1f:b8:40:3b:2d:f8:a7:a6:8b:e9:e7:97:84:65:
                    7c:c9:ea:aa:25:88:ce:ca:1d:32:24:3e:77:af:29:
                    b5:81:da:45:1b:7e:fe:4d:3b:ff:86:51:1c:4f:00:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3B:05:37:75:4B:3C:4D:23:14:C8:6B:3A:E0:F6:08:AB:21:6B:8B
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e332e302f32342d3234203d3e203538353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:16:34:73:f0:ba:0e:29:9b:3a:a7:5e:5e:20:ea:38:61:
         40:06:b6:ec:0e:59:1a:b1:cf:7c:f2:7f:4f:f9:a0:ef:a4:fa:
         28:f5:81:3d:bc:5d:41:91:01:a1:ff:c8:5e:3f:53:98:69:4c:
         26:13:9b:3f:ce:68:22:03:86:a5:66:25:62:9f:40:53:bb:3f:
         11:be:3e:c8:99:c4:27:db:5a:76:fb:53:b8:ab:f6:d2:b6:ab:
         d4:68:16:98:ec:60:fd:c4:bc:41:79:e3:49:d4:9c:cf:8a:4c:
         47:c0:6b:7a:c5:c1:69:7f:08:13:e0:14:28:12:a2:f9:bb:9a:
         eb:bd:ca:e8:bf:17:43:75:c7:25:6a:86:94:2c:a7:53:18:74:
         7f:7c:50:ef:ed:43:09:d0:32:30:0f:c9:2e:40:fa:2d:d5:77:
         f8:b0:81:c4:32:08:64:6e:33:a9:a1:01:1a:ab:4c:81:3c:98:
         40:19:2c:9d:17:e2:70:6b:cd:39:0e:d8:35:40:99:fe:db:52:
         2a:43:6d:dc:ca:b1:3c:d4:2b:1c:2a:73:76:18:b5:a3:cd:67:
         7a:4a:c9:10:93:1c:e9:ee:bd:6a:16:ba:cb:04:f3:8e:4b:16:
         69:eb:44:4d:52:f7:a3:e2:26:2e:bf:ed:2f:6b:89:d4:b3:6c:
         38:9f:9a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:56 2026 by rpki-client