Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e20313331323734.roa
File:                     3130332e34352e3136392e302f32342d3234203d3e20313331323734.roa (raw, json)
Hash identifier:          OfG9zhRU2Omg+/J6YKnp3JZMV/e/BSs6dN5byxAEhRo=
Subject key identifier:   D0:DF:AA:D1:EF:E3:57:AB:D7:48:3D:A2:8E:57:1F:0A:E8:52:4C:9C
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       023330D1CD997F50E8B6CB5CCAD4274536B4AB5D
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e20313331323734.roa
Signing time:             Thu 17 Sep 2026 05:33:51 +0000
ROA not before:           Thu 17 Sep 2026 05:28:51 +0000
ROA not after:            Thu 16 Sep 2027 05:33:51 +0000
asID:                     131274
IP address blocks:        103.45.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:33:30:d1:cd:99:7f:50:e8:b6:cb:5c:ca:d4:27:45:36:b4:ab:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: Sep 17 05:28:51 2026 GMT
            Not After : Sep 16 05:33:51 2027 GMT
        Subject: CN=D0DFAAD1EFE357ABD7483DA28E571F0AE8524C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:fc:64:0a:98:11:f2:0c:85:e0:3d:4d:05:
                    f6:73:14:d4:ec:be:dd:50:95:79:35:33:64:f8:fd:
                    91:08:f9:b1:1d:1b:05:2f:fe:8c:8c:07:0b:dd:f0:
                    62:48:ae:cd:80:be:ba:76:0e:7c:c9:53:b6:84:e6:
                    44:34:95:2a:e5:5a:6c:a7:e3:c6:29:64:52:a0:d5:
                    9b:2f:26:42:8d:e4:71:4f:87:8d:4e:72:d2:d5:c7:
                    73:ae:7c:4f:21:d8:84:77:24:d3:75:3f:2a:56:a1:
                    91:fa:57:e8:00:93:29:d9:1f:95:e8:6f:12:3c:52:
                    e4:51:7d:85:b6:db:f0:b4:67:29:e3:aa:58:1e:90:
                    ec:b6:21:32:f6:00:3e:be:f6:53:b3:9b:7f:86:22:
                    76:ec:5a:22:8c:8d:ff:41:ab:93:b5:c8:12:97:69:
                    ea:8e:a7:d6:37:a6:ff:22:4a:9b:e6:69:03:54:d4:
                    a6:8d:fa:5a:3e:93:d1:eb:97:71:ea:f4:f5:7e:6c:
                    d4:e6:51:d6:c4:8c:e0:8d:8e:c8:89:29:85:82:cf:
                    4f:d9:c7:b7:40:ae:0f:b6:e7:9c:1c:20:70:cc:26:
                    ad:22:2c:ca:8d:e2:52:be:47:c8:a6:a4:81:f8:1d:
                    0e:5b:27:61:30:f4:b5:a3:2b:aa:55:b3:9c:ad:0e:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DF:AA:D1:EF:E3:57:AB:D7:48:3D:A2:8E:57:1F:0A:E8:52:4C:9C
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3136392e302f32342d3234203d3e20313331323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:33:fa:ba:ba:17:4b:d4:54:a4:12:fe:fd:a0:b7:1e:93:a0:
         d1:c0:9c:62:cb:13:d0:0e:0e:ae:36:f9:95:5b:16:01:8f:66:
         de:bf:27:f7:72:81:e2:62:df:e2:61:70:4a:2e:5f:68:d4:e3:
         34:24:72:17:8c:89:a4:ec:c5:fa:a0:9b:2e:3c:f7:d7:92:3f:
         8c:56:ac:91:12:54:9e:5b:f1:7c:ed:97:16:de:59:62:ad:ab:
         3a:e4:5d:b9:7d:8a:26:d5:db:4b:d6:08:66:c2:89:b9:7b:c6:
         a8:db:b1:44:3e:7d:19:a9:27:74:7a:3c:a9:6f:6b:e2:87:63:
         cc:7a:ee:eb:f2:93:da:98:cf:66:52:80:cb:c4:e1:ce:8b:cc:
         d7:2b:a4:ac:8f:fe:8a:0b:f2:82:eb:c6:34:94:f3:4b:61:72:
         10:04:30:f1:f6:8f:f9:ed:20:5f:b3:e7:d4:85:9a:6a:71:e4:
         4f:79:e4:58:a5:96:0d:11:0a:65:ee:9a:d0:df:6f:07:81:ab:
         d9:d4:28:8d:6e:9e:a5:36:ac:ee:40:48:9f:b6:8d:35:ce:98:
         d0:10:5f:3b:d5:9f:9f:97:29:85:ee:be:bf:87:bd:41:39:11:
         9b:bd:62:bb:6d:2a:a0:be:14:24:77:48:44:b0:b1:06:ca:da:
         5f:18:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:35:02 2026 by rpki-client