Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32332d3234203d3e20313331323734.roa
File:                     3130332e36312e3138382e302f32332d3234203d3e20313331323734.roa (raw, json)
Hash identifier:          TW4xc3RMGZqziyoxyqI9iqabX4vSVegXlwZzmthrrfg=
Subject key identifier:   4F:E3:47:2E:F7:2B:7D:F6:14:0A:68:F9:0B:3C:5D:BA:60:83:07:B5
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       7F40C2B94886D9DE02485C97B411845166DA3FF1
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32332d3234203d3e20313331323734.roa
Signing time:             Thu 07 May 2026 16:06:43 +0000
ROA not before:           Thu 07 May 2026 16:01:43 +0000
ROA not after:            Thu 06 May 2027 16:06:43 +0000
asID:                     131274
IP address blocks:        103.61.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:40:c2:b9:48:86:d9:de:02:48:5c:97:b4:11:84:51:66:da:3f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: May  7 16:01:43 2026 GMT
            Not After : May  6 16:06:43 2027 GMT
        Subject: CN=4FE3472EF72B7DF6140A68F90B3C5DBA608307B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:90:2c:3c:6c:e7:a0:8b:4a:e4:ad:8c:33:
                    ac:79:f7:93:2c:00:07:da:fe:98:85:7a:ca:d0:2c:
                    db:d6:14:b2:c9:2d:17:14:b3:7b:8e:06:63:ad:7e:
                    db:44:80:44:12:f6:dd:f6:70:8a:20:d4:91:c7:01:
                    93:32:f2:36:88:2b:17:fb:77:50:39:d2:ce:b8:5d:
                    db:d5:85:4c:10:d8:ec:ca:4c:7d:8c:e8:03:39:05:
                    7a:0f:31:35:5a:88:bb:12:da:6f:1d:44:03:d7:af:
                    2f:af:01:05:3e:a0:15:0d:0b:c1:63:bd:21:5c:d4:
                    05:b1:3b:c7:99:2a:54:1b:89:d5:45:25:ff:8d:6a:
                    2f:1b:9a:27:93:f8:63:55:00:86:79:ff:ac:e9:a1:
                    33:56:48:f5:62:a9:b4:2e:cf:4b:a5:cb:97:f9:db:
                    71:eb:97:53:e8:ed:ff:7b:4a:10:21:d6:8d:b3:00:
                    ce:d5:fa:4a:ae:02:8e:f6:a6:f5:3c:dd:ac:89:ab:
                    85:50:5d:c4:27:95:45:bd:e3:dc:45:51:e6:d6:90:
                    c6:25:7e:2e:39:ac:f8:d6:24:49:c5:aa:e9:d9:e4:
                    d7:1f:7a:2f:f3:ed:f3:64:86:d2:76:ca:dc:47:ad:
                    a0:ee:16:6b:17:a1:d9:9c:1e:31:32:38:d8:b4:a6:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E3:47:2E:F7:2B:7D:F6:14:0A:68:F9:0B:3C:5D:BA:60:83:07:B5
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e36312e3138382e302f32332d3234203d3e20313331323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:26:8c:71:a2:ad:54:79:3a:a6:34:f6:b7:61:08:66:71:
         d9:f6:aa:48:cd:be:75:8c:e9:3f:74:f2:eb:8d:0d:9b:e3:b4:
         b5:a5:e6:6c:f3:dc:1d:3b:55:e2:5f:a0:2e:d1:77:03:0e:39:
         f0:eb:14:ec:76:67:2c:e1:09:9b:cd:fe:05:12:97:3e:1f:df:
         22:ba:4f:0a:64:e8:8d:e0:df:d4:f8:48:38:64:e6:cd:36:cf:
         c6:f2:1a:55:01:06:b3:1c:d4:77:04:a7:8a:82:25:08:19:fe:
         a7:16:21:14:9d:56:10:6d:df:8e:a5:8c:27:1b:20:58:7d:5e:
         e0:ff:50:b5:f3:34:39:83:73:b9:d3:a4:be:b7:53:97:a0:1e:
         27:14:57:8b:75:87:8e:00:51:89:b5:29:4c:d6:fe:f8:31:f7:
         72:a9:91:02:d4:b1:89:dc:d8:8b:04:5e:b1:d5:a9:8d:c1:f0:
         1c:c1:8a:17:28:b9:00:40:13:52:2c:2d:73:38:9a:8a:3a:1f:
         2a:73:a7:b1:ed:d3:98:a1:be:d1:a5:17:9d:26:75:33:26:21:
         99:53:9b:88:ff:87:1f:c8:e8:62:81:80:d1:51:e5:cb:35:89:
         31:bd:68:22:bf:f3:97:de:5f:81:b3:e3:8f:8b:75:83:cd:ea:
         44:4c:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:12 2026 by rpki-client